Online & Secure

Security Update – Opscom Systems Remain Online and Secure

Security Update – Opscom Systems Remain Online and Secure

We are pleased to report that the proactive security measures deployed by our engineering team are effective, Opscom 1 and Opscom 2 remain secure and running. We will publish a more comprehensive report on the whole event next week.

Background on the Situation

PHP is a general-purpose scripting language geared heavily toward web development. Created in 1993 and released in 1995, it is maintained by the PHP Group and powers a vast majority of the internet. As one of the dominant languages for web architecture, Opscom has historically utilized PHP as the core foundation for our platforms.

This morning, our security team—along with the global IT community—received a critical security alert from the PHP Group regarding two major vulnerabilities (Remote Code Execution flaws) in the universal PHP codebase.

A universal patch will be released today at 14:00 UTC by the PHP Group. When this release is published, it will contain specific technical details about the security issues. Because the vulnerabilities are in the core language itself, it represents a severe risk to any exposed systems.

Our Action Plan, Current Mitigations, and Potential Downtime

Our engineering team is fully mobilized and we are already taking precautionary measures and applying network mitigations to protect our infrastructure. However, because the exact technical details of the vulnerability remain undisclosed by the PHP Group until the official release, we cannot yet guarantee these initial defenses are fully comprehensive.

We are continuously monitoring the situation. If we determine that our precautionary mitigations are inadequate after the release and the system remains exposed, we may temporarily take Opscom 1 and Opscom 2 offline from 14.00 UTC today.

Homepage and Status Updates

Since PHP is also the common language used for our corporate website, and many similar websites are currently at risk, we are in the process of setting up a new, secure homepage without using the problematic PHP codebase.

This static page will serve as our secure communication hub during this event. We will provide frequent, real-time updates regarding our patching progress and any required system downtime at: www.opscomsystems.com and/or https://no.linkedin.com/company/opscom-systems-as

We will respond to questions at: support@opscomsystems.com and tel: +47 47 77 55 10

Best Regards

Roar Skogstad

Opscom Systems as
Back to All News & Insights
Opscom News

Loading article…

Fetching article content from Opscom Systems…

More from Opscom Systems

View All Articles →
Book a Live Demo or Contact Sales

See Opscom in Action

Schedule a tailored walkthrough of Opscom 2.0 for your aviation operation, or send our team in Bodø a message.

ISO/IEC 27001, ISO 14001 & EU GDPR compliant. Your details are used strictly to respond to your request.