We are aware of the recently identified security flaws affecting PHP, a widely used technology that supports many websites and online services around the world.
The vulnerabilities could allow attackers to remotely execute malicious code on vulnerable servers if the relevant security updates have not been applied. Security updates have been released and organisations that use PHP have been advised to review their systems and apply the necessary fixes.
NILGOSC services are not affected
We have carried out extensive testing of our online services and can reassure members that both the NILGOSC website and My NILGOSC Pension Online are secure and are not affected by this issue.
- NILGOSC website: Our website uses PHP; however, the required security update has been applied and testing has confirmed that the website is not affected by these vulnerabilities.
- My NILGOSC Pension Online: This service does not use PHP and is therefore not affected by these vulnerabilities.
What members need to do
You do not need to take any action. You can continue to use our website and My NILGOSC Pension Online as normal.
We will continue to monitor the situation and follow recognised cyber-security guidance to protect our online services and members’ information.
