You may have seen the recent BBC coverage of a global security issue involving PHP, software used by many websites and online services.
We understand that you may have questions about what this means for your school. Our technical teams are responding to the issue across Juniper services, putting protections in place and applying security updates.
What is PHP, and what has happened?
PHP is software that helps websites and online applications run. A critical security issue has been identified that could allow attackers to gain unauthorised access to systems using it. Security updates have been released to address the issue.
How does this affect Juniper products?
A number of Juniper products use PHP. Our technical teams have identified the applications that use it and are checking those services and carrying out the necessary security work.
What is Juniper doing?
We have applied additional protections to all our production workloads. In most cases this means the underlying vulnerability has been patched; this is the case for all school websites, assessment trackers, analytics, estates, risk management and MIS customers. In a minority of cases we have taken systems offline until a patch can be applied, or we have implemented mitigations (WAF).
Do I need to do anything?
You do not need to make any changes to your Juniper services at this time. Our technical teams are managing the necessary work.
If that advice changes for any service, we will contact the relevant customers directly with clear instructions.
Updated