RESOLVED: Notice regarding temporary downtime of KI websites

Earlier today, information was published regarding serious security vulnerabilities in PHP, a technology used by, among others, KI websites.

As a precautionary security measure, the IT Office has therefore temporarily taken the affected websites offline while awaiting security updates, which are expected to become available during the afternoon of 21 October.

Similar precautionary measures have been taken by other organisations.

In parallel, the IT Office is conducting a broader review of KI’s IT environments, including cloud-based platforms (PaaS), virtual servers (IaaS), and systems hosted in external data centres (colocation). The purpose is to identify any systems that may be affected and to take the necessary protective measures.

Departments and other organisational units that are responsible for operating and maintaining their own servers must ensure that affected systems are updated with the latest security updates. Once the updates have been completed, this must be reported to the Helpdesk.

The shutdown is a precautionary measure and does not in itself indicate that any security breach has occurred.

The IT Office is monitoring developments and preparing the necessary updates. The websites will be brought back online as soon as we have confirmed that it is safe to do so.

We will provide further information as soon as we know more about the timeline.