# No evidence PHP flaws exploited in government, critical infrastructure systems: Tan Kiat How

- URL: https://talkfuse.com/story/no-evidence-php-flaws-exploited-in-government-critical-infrastructure-systems-tan-kiat-how/
- Published: 2026-11-04T04:15:13+00:00
- Updated: 2026-11-06T05:54:10+00:00
- Original publisher: CNA (publisher lean: Centre)
- Original article: https://www.channelnewsasia.com/singapore/php-flaw-exploitation-mddi-6519861
- Topics: Government, Politics, World

## Key points

- No evidence PHP2Shell was exploited in Singapore’s government or critical infrastructure.
- Authorities secured affected systems and used alternatives where patching was delayed.
- Small firms can get up to 70 per cent co-funding for cyber security measures.

## Summary

Singapore has found no evidence that the PHP2Shell vulnerabilities were exploited in government systems or critical information infrastructure, Senior Minister of State Tan Kiat How told parliament. Authorities worked with agencies and infrastructure owners to identify and secure affected systems after the flaws were disclosed, and say they will keep monitoring for signs of compromise.

The flaws, disclosed on 21 October, affect all PHP versions and could let attackers run code remotely without authentication; PHP runs about 70 per cent of the world’s websites. A security fix was released the same day, and alternative safeguards were used where immediate patching was not possible. Tan said smaller firms can access government-supported cyber security measures with up to 70 per cent co-funding, and a cyber incident helpline for companies is planned.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.