Urgent Cybersecurity Alert:

Critical PHP Vulnerabilities Require Immediate Action

Alert!

Be aware of multiple critical vulnerabilities affecting PHP, a widely used technology that powers many healthcare portals, websites, web applications, application programming interfaces (APIs) and vendor solutions. Successful exploitation could allow an unauthenticated attacker to execute malicious code on vulnerable servers, potentially leading to system compromise, data theft, ransomware deployment or service disruption.


Due to the severity of these vulnerabilities and the widespread use of PHP across internet-facing systems, healthcare organizations should immediately assess their exposure and apply available security updates.


If you are running affected versions of PHP, immediately update to PHP 8.5.12, 8.4.27, 8.3.36 or 8.2.35, as applicable.

Free Health IT and Cybersecurity Technical Assistance

To help healthcare practices and facilities strengthen security, improve data exchange and align with federal expectations, the Southcentral Centers for Medicare & Medicaid Services (CMS) Quality Innovation Network-Quality Improvement Organization (QIN-QIO) (Region 5) provides cybersecurity and health IT resources on our SouthcentralQINQIO.org website.

Cybersecurity in healthcare

We offer no-cost quality improvement, technical assistance and support to healthcare providers in Arkansas, Louisiana, New Mexico, Oklahoma and Texas. Contact us at communityhealth@tmf.org.