McGill responding to Global PHP Security Vulnerability

Dear members of the McGill community,

Like many institutions around the world, McGill is currently responding to a critical security vulnerability affecting PHP, a technology used to operate many websites globally. The University is assessing the situation to minimize service disruption.

Our IT Services and Cybersecurity teams are working diligently to implement the necessary security patches and protective measures to safeguard the University's digital environment. No compromise of University systems has been identified to date. During this process, some services may experience temporary interruptions or reduced functionality.

If you are a system owner and you are responsible for servers running PHP and have not yet been contacted by the IT Security team, please complete this form. Under “What type of IT security incident are you reporting?”, select “Vulnerability Report for a McGill Service”.

We appreciate your patience and understanding as we work to address this situation.

Updates will be posted here as more information becomes available.