You may have seen the recent announcement from the National Cyber Security Centre (NCSC) regarding critical security vulnerabilities affecting PHP, a programming language widely used by websites and online services.
We want to reassure our customers that Bromcom MIS, Finance and Vision are not affected by these vulnerabilities.
What does this mean for Bromcom customers?
- Bromcom MIS and related systems: Our core systems do not use PHP and are therefore not affected by the reported vulnerabilities.
- Bromcom website: Our main website (bromcom.com) does use PHP, but the necessary security updates were applied promptly.
- Bromcom documentation: Our documentation website (docs.bromcom.com) also uses PHP and has been patched.
- Third-party services and integrations: We are currently reviewing services provided by third parties, including integrations with Bromcom, to establish whether they may be affected and to confirm that appropriate security measures are in place.
Do customers need to take any action?
No action is currently required from Bromcom customers in relation to their Bromcom systems.
Our review of third-party services and integrations is ongoing. Should we identify anything that requires customer attention or action, we will communicate this accordingly.
We take security seriously and continue to monitor emerging threats and security advisories to ensure our services remain protected.
For further information about the vulnerabilities, you can read the official NCSC announcement: NCSC: Critical security issue affecting PHP
