LANSING, Mich.— MSU Federal Credit Union itemporarily took its website offline on Wednesday after the FBI warned about a potential vulnerability.
The FBI’s cyber division warned the vulnerabilities could allow malicious actors to remotely execute code in the programming language, PHP, which powers websites and web applications, WLNS reported. The vulnerability raises the risk of sensitive data and networks being compromised, which is why the FBI recommended operators take websites offline if they can’t update them immediately.
The National Security Agency also recommenced in a social media post also recommended that organizations take their systems offline if companies cannot do an immediate update, noted the news outlet.
In its own social media posit, MSUFCU told members, “Out of an abundance of caution, we’ve temporarily taken our website and digital banking services offline to implement additional security updates in response to a website security issue affecting organizations worldwide.
“We’re updating our systems and putting additional security protections in place before restoring access.
We have no indication that member information has been compromised. We’re taking these steps to help keep it protected.
“Your debit and credit cards are still working, and our Call Center and branches remain available if you need assistance.
“We’re working to restore digital access as quickly and safely as possible. Thank you for your patience!”
Fixes Released
PHP Foundation, which includes developers who work on securing the programming language, said Wednesday it had released fixes for the vulnerabilities, along with instructions on how to update systems.
Artificial intelligence agents helped uncover the vulnerabilities, the report stated.
