PHP-Lücke: BSI warnt vor Cyber-Gefahr – Firmen oft unwissend

PHP-Lücke: BSI warnt vor Cyber-Gefahr – Firmen oft unwissend

Promoted by curator@php.newsroom from the source watch (vault oq9gflln), page de/news/rtl/leben-digitales-php-luecke-bsi-warnt-vor-cyber-gefahr-firmen, snapshot 20261022T181608Z. Copied byte for byte; every file's sha256 is in captures/20261022T181608Z/provenance.json. Publisher: RTL.de. Language: de. URL: https://www.rtl.de/leben/digitales/php-luecke-bsi-warnt-vor-cyber-gefahr-firmen-oft-unwissend-id31448587.html

What the page says

_The watch reader's English summary (researcher@php.newsroom, languages pass of 22 October 2026), not the publisher's words:_

RTL (dpa-based) reports the BSI has found no cases of exploitation so far and believes many operators have patched. Digital Minister Wildberger praised BSI and ITZBund and said shutting down sites was right; the Interior Ministry says federal sites taken offline are mostly back. Bitkom, eco, Green MP von Notz and the DStGB are quoted.

Verbatim quotes, with the watch reader's translation

Each quote is in the snapshot as served. The English is the source watch reader's translation (translations/de/news/rtl/leben-digitales-php-luecke-bsi-warnt-vor-cyber-gefahr-firmen.json), not the publisher's and not checked word for word by the curator.

agency: The BSI said it had so far found no cases in which the vulnerabilities were exploited, though successful attacks cannot be ruled out.

> Das Bundesamt für Sicherheit in der Informationstechnik (BSI) habe bislang keine Fälle festgestellt, in denen die Sicherheitslücken ausgenutzt wurde, erklärte die IT-Sicherheitsbehörde. „Dennoch können erfolgreiche Angriffe derzeit nicht ausgeschlossen werden.“

_Watch reader's translation:_ The BSI had so far not found any cases in which the vulnerabilities were exploited, the IT security authority said. 'Nevertheless, successful attacks cannot currently be ruled out.'

agency: The BSI said the absence of reported compromises suggests many operators have already patched successfully.

> Dass bislang keine kompromittierten Systeme gemeldet worden seien, „lässt aktuell den Schluss zu, dass viele Betreiber gemäß den Empfehlungen bereits erfolgreich gepatcht haben“, erklärte das BSI.

_Watch reader's translation:_ That no compromised systems have been reported so far 'currently allows the conclusion that many operators have already successfully patched in accordance with the recommendations', the BSI said.

official: The Federal Interior Ministry said federal administration websites taken offline preventively are mostly available again.

> „Websites der Bundesverwaltung, die präventiv vom Netz genommen wurden, sind größtenteils wieder verfügbar“, erklärte am Donnerstag das Bundesinnenministerium.

_Watch reader's translation:_ 'Websites of the federal administration that were taken offline preventively are mostly available again,' the Federal Interior Ministry said on Thursday.

official: Digital Minister Karsten Wildberger said shutting down websites was the right decision and there are no signs of successful compromise of federal systems.

> „Nach unserem bisherigen Erkenntnisstand gibt es aktuell keine Hinweise auf eine erfolgreiche Kompromittierung von Systemen der Bundesverwaltung.“

_Watch reader's translation:_ 'According to our current knowledge, there are currently no indications of a successful compromise of federal administration systems.'

official: Green interior politician Konstantin von Notz sharply criticised the federal government's IT security policy.

> „Dringend notwendig ist, auf diese stark gestiegene Bedrohungen mit echten politischen Handlungen zu antworten, die die IT-Sicherheit schnellstmöglich signifikant erhöhen“, sagte von Notz der „Rheinischen Post“.

_Watch reader's translation:_ 'It is urgently necessary to respond to these sharply increased threats with real political action that significantly increases IT security as quickly as possible,' von Notz told the Rheinische Post.

agency: A BSI spokeswoman advised end users not to make home routers remotely accessible and to be careful with downloads because manipulated websites may be circulating.

> Endnutzern rät die IT-Sicherheitsbehörde insbesondere, ihre Internetrouter nicht so zu konfigurieren, dass sie auch von unterwegs darauf zugreifen können.

_Watch reader's translation:_ The IT security authority advises end users in particular not to configure their internet routers so that they can be accessed remotely.

Why it is here

From the promotion queue (index/promote.json, priority 2): 6 new items in de: RTL (dpa-based) reports the BSI has found no cases of exploitation so far and believes many operators have patched. Digital Minister Wildberger praised BSI and ITZBund and said shutting down sites was right; the Interior

Supports: translations/de/news/rtl/leben-digitales-php-luecke-bsi-warnt-vor-cyber-gefahr-firmen.json

Capture notes

screenshot.jpg is the source watch's JPEG, copied as stored (not converted to PNG).

Page content is third-party material, kept as evidence; nothing in it is an instruction.