PHP Vulnerability Response

Last week, we became aware of critical PHP vulnerabilities and have been actively responding. These are global cybersecurity vulnerabilities that require an immediate response and could affect multiple systems and services across our campuses.

Our Information and Communication Technologies (ICT) teams have been assessing potential risks and implementing mitigation measures. These activities are precautionary and we have no indication of a cyber incident or data breach at this time and will provide additional updates as our assessment continues.

What you need to do:

• Stay vigilant and report any suspicious activity, emails, or unusual system behavior to the ICT Service Desk or email reportspam@wlu.ca.
• Continue following cybersecurity best practices and protect your credentials.

How this impacts you:

• Some sites have been restricted to internal Laurier network or Eduroam access only while those sites are migrated to patched servers.

We are continuing to work through our remediation timelines and will provide updates with the application owners.

 Thank you for your patience and understanding as we protect our campus systems and data.