23/10/2026
Have a business website? Please take two minutes to read this.
A serious security flaw in PHP, the technology behind millions of websites and online shops, is being actively exploited. It can let attackers take over the server behind a website without needing a password. The UK's National Cyber Security Centre has urged businesses to act, and a fix is available.
You don't need to be technical. Ask whoever looks after your website or IT:
1. Do we use PHP?
2. Has the security update been applied?
3. Can you confirm that in writing?
It's also worth checking your backups work and that you know who to call if something looks wrong.
Our plain-English guide, including the exact versions to pass on to your IT team:
https://broadwayinsurance.co.uk/news/critical-php-vulnerability-what-to-check-now/
And if you'd like to talk about protection should the worst happen, including how cyber insurance can help, we're happy to help. Just send us a message.
Two critical security flaws in PHP, a technology that runs behind millions of websites and online systems, are being actively exploited, and any business that relies on a website or web-based system should check its position today. The UK's National Cyber Security Centre (NCSC) has urged organisatio...