After receiving notice of critical PHP vulnerabilities earlier this week, our website provider let us know they were already addressing the issue, and they patched our public website the same day. (Even though we don’t store member data on our public website, it was important to mitigate the vulnerability as quickly as possible.)
Our internal, nonpublic systems were patched Thursday, and by Thursday evening, all vendors we work with had reported completing their updates.
No unauthorized access to member data was suspected.
What is PHP?
PHP is widely used to operate websites and web applications, including several services First Education uses. The recently disclosed vulnerabilities could allow attackers to run unauthorized software on affected servers, making prompt updates essential.
A vulnerability does not itself establish that a breach occurred; based on the information reported to us, no compromise of member data is suspected.
