A cybersecurity expert in Tunisia, Hichem Mair, has warned that over 6,000 distributors in the country are affected by two security flaws in the programming language PHP. In a statement to Diwan FM on Wednesday, October 28, 2026, Mair cautioned that these vulnerabilities could be exploited to hack into digital systems, control servers, and access and steal personal data. This warning comes as some Tunisian institutions, including the Tunisian Company for Electricity and Gas and the Tunisian Agency for Technical Cooperation, have temporarily suspended access to their websites as a precautionary measure.
The two security flaws, discovered recently, pose a significant threat to websites that rely on PHP, particularly those using outdated versions of the programming language that have not been updated with the necessary security patches. According to Mair, PHP is widely used in web development, with around 70% of internet sites relying on it. The expert emphasized that the severity of the vulnerabilities lies in their potential to be exploited to access and hack into targeted servers, allowing hackers to access and steal personal data or modify it.
The compromised servers could also be used to launch additional cyberattacks or target other servers, expanding the potential risks. In response to the threat, some Tunisian institutions have temporarily suspended access to their websites, a measure that Mair considers necessary from a security perspective. This decision aims to reduce the risk of hacking and protect data until the affected systems can be verified and the vulnerabilities addressed.
The process of repairing the vulnerabilities began on October 21, 2026, and Mair stressed the importance of verifying the status of affected servers and updating systems that still use outdated versions of PHP to prevent the exploitation of security weaknesses. The Tunisian Agency for Technical Cooperation announced on October 27, 2026, that it had temporarily suspended access to its website as a precautionary measure after detecting a cybersecurity issue on a global level.
Similarly, the Tunisian Company for Electricity and Gas announced on October 22, 2026, that its website would be unavailable temporarily due to the disclosure of a global security vulnerability. Mair noted that 2026 has seen an increase in cyberattacks targeting global institutions, both in the private and public sectors, with artificial intelligence playing a growing role in the development of cyber threats.
Artificial intelligence is being used to detect security vulnerabilities and identify weaknesses in digital systems, but it can also be employed to develop new methods of hacking and piracy. This situation requires institutions to strengthen their protection systems and continuously monitor security updates. The evolving nature of cyber threats highlights the need for constant vigilance and improvement of cybersecurity measures.
The situation underscores the importance of maintaining up-to-date security protocols and ensuring that systems are protected against known vulnerabilities. Tunisian institutions and others worldwide must remain proactive in addressing cybersecurity threats to safeguard their digital assets and protect sensitive information. By taking swift action and implementing necessary security measures, institutions can mitigate the risks associated with these vulnerabilities and prevent potential cyberattacks.
Key points
- Over 6,000 distributors in Tunisia are affected by two security flaws in the programming language PHP.
- The vulnerabilities could be exploited to hack into digital systems, control servers, and access and steal personal data.
- Tunisian institutions have temporarily suspended access to their websites as a precautionary measure to address the security threats.
