Digital Policy Office attaches great importance to latest cybersecurity vulnerability and appeals to all sectors to take early action and apply patches
Digital Policy Office attaches great importance to latest cybersecurity vulnerability and appeals to all sectors to take early action and apply patches
******************************************************************************************
The Digital Policy Office (DPO) said today (October 22) that it attached great importance to the critical security vulnerabilities in PHP, a web programming language widely used in backend operations of global websites. The DPO has issued Security Alert to all Government Bureaux and Departments (B/Ds) and public organisations, requesting them to conduct a comprehensive review immediately to check whether their information systems had been affected and complete all patching work as soon as possible; otherwise, the relevant systems should be temporarily taken offline or isolated to reduce the risk of malicious intrusion. Meanwhile, the DPO has completed the required patching for the web content hosting service that hosts the homepages of all B/Ds. As of now, the DPO has not received any reports of related cybersecurity incidents.
In addition, the DPO appeals to the public and organisations to immediately apply patches to all affected systems. The Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) has issued a Security Bulletin and a media message to the public today. If assistance is needed, guidance can be obtained from HKCERT via email (hkcert@hkcert.org), telephone (8105 6060) or online form.
Ends/Thursday, October 22, 2026
Issued at HKT 22:44
NNNN
