On 21 October 2026, the PHP development team released security updates for two critical vulnerabilities which, under certain conditions, allow attackers to execute malicious code on affected servers without logging in. The Federal Office for Cyber Security also recommended that affected systems be updated immediately.
This incident illustrates how quickly a technical detail can become a serious business risk. However, security updates are only part of the challenge. What matters most is whether organisations know which systems are affected, who is implementing the necessary measures, and how the reliable operation of their digital infrastructure can be ensured in the long term.
“A website isn’t finished once it’s launched. True digital responsibility begins when security, maintenance and reliable operation are guaranteed in the long term.”
A website isn’t finished once it’s launched
Many companies invest in the design and development of their website, but regard the project as complete once it goes live. Yet this is only the start of a phase that is crucial for security and stability.
Content management systems, plugins, PHP versions and server components are constantly being updated. New security vulnerabilities are discovered, technical dependencies change, and systems that were previously functioning may suddenly require adjustments.
Anyone who ignores these developments risks more than just a temporary technical glitch. In the worst-case scenario, attackers can gain access to systems, compromise data or inject malware. This can result in business interruptions, recovery costs and a loss of trust.
Security updates are only part of the solution
Professional website maintenance does not simply mean clicking the ‘Update’ button from time to time. First of all, it must be clear which software is being used, which versions are running, and which dependencies need to be taken into account when making changes.
With PHP updates in particular, for example, it is important to check whether the version being used is compatible with the content management system, the plugins and any custom extensions. An uncoordinated update can affect existing functions. Delaying an update, on the other hand, can leave known security risks unaddressed.
In addition, there are regular backups, system monitoring, the management of access rights and a clear procedure for technical emergencies. Backups must also be created and tested in such a way that recovery is actually possible in the event of an emergency.
Security is not achieved through a single measure, but through ongoing technical support.
Who takes responsibility when things get serious?
Technical support is a particular challenge for SMEs. Often, there is no in-house IT department to monitor all systems. Hosting, website development and maintenance may be handled by different providers.
When a critical security vulnerability comes to light, this raises crucial questions: Who checks the affected systems? Who coordinates the necessary updates? Who then checks whether the website is still functioning correctly?
If there is no clear line of responsibility, valuable hours are lost.
A reliable technology partner brings clarity to this situation. They understand the technical underpinnings of the solution, can coordinate the necessary measures and support the company in identifying risks and responding appropriately.
The approach of AM Consulting & Management
Bei AM Consulting & Management betrachten wir Websites nicht als einmalige Projekte, sondern als langfristige digitale Lösungen. Unser Ansatz verbindet Webentwicklung, technische Betreuung und strategisches Verständnis, damit Unternehmen ihre digitale Infrastruktur zuverlässig betreiben und gezielt weiterentwickeln können.
Dabei geht es nicht nur darum, technische Probleme zu beheben. Es geht darum, frühzeitig zu erkennen, wo Handlungsbedarf besteht, notwendige Massnahmen sinnvoll zu koordinieren und für das Unternehmen einen klaren Ansprechpartner zu schaffen.
Denn eine professionell entwickelte Website braucht auch nach dem Launch einen Partner, der mitdenkt und bei technischen Herausforderungen unterstützt.
Conclusion
The latest PHP security vulnerabilities highlight that no company should simply take the technical security of its website for granted. Regular maintenance, timely security updates and clear lines of responsibility are crucial for reducing avoidable risks.
A good website isn’t just recognised by the fact that it works, but also by the fact that someone looks after it when it really matters.
AM Consulting & Management supports companies in the development and management of professional digital solutions.
Do you want to run your website reliably in the long term? Talk to us about the right technical support.