Port of Rotterdam takes website offline as precaution over PHP vulnerabilities

The Port of Rotterdam has temporarily taken its website offline as a precaution over vulnerabilities in PHP, the programming language used to build it. The port authority says it has found no operational impact on its services or port processes.

A spokesperson said the authority was monitoring developments and mapping where PHP is used across its systems. It will take measures where needed and is discussing possible implications with companies and organisations through Ferm, the Dutch seaports’ cybersecurity organisation.

The response follows wider concern about PHP vulnerabilities. The PHP Foundation has said it has seen no signs that previously identified flaws are being actively exploited, while the European Commission says it has no indication its services or data were affected. The Commission said its security teams were prioritising available updates.