In the Principality of Monaco, as in the United States, Europe, and the rest of the world, the security vulnerabilities identified in PHP (Hypertext Preprocessor) technology affect the majority of websites—about 70 percent. Since October 21, Monegasque public websites, such as those of the municipality and the government, have also been subject to preventive measures to avert any breach of sensitive data. The situation is returning to normal, although a new alert was triggered on October 23.
Since August 2026, the PHP developer has been working behind closed doors to resolve this serious issue, releasing fixes and updates for its software. The risk for all users of this technology is that their systems could be attacked and their sensitive data stolen.
In the Principality of Monaco, the Agence Monégasque de Sécurité Numérique (SOC-MC)—an agency directly affiliated with the Monegasque government—has reported a new vulnerability in the tools that most of us use for our websites.
An unequivocal alert regarding previously issued advisories to address the vulnerability in the PHP system. The new threat was reported on October 22, 2026: the vendor issued a new notice stating that the published patches are not sufficient, under certain conditions, to resolve the vulnerability designated CVE-2026-109619 (CVSS: 9.2). All versions of PHP are affected. Therefore, the Monegasque agency CERT-MC strongly recommends isolating affected devices, correcting the configuration as indicated by the vendor, and implementing these measures as soon as possible.
The email we receive is immediately recognizable, but given the current climate—with online scams on the rise—it’s essential to contact the Agence Monégasque de Sécurité Numérique directly to verify the authenticity of the source and the content of the message.
The response is immediate, the explanation is clear, and when we ask about the procedure to follow, we’re provided with instructions. “If you need any further information, please don’t hesitate to call us directly,” they advise. Effective and reassuring. The rest must be handled promptly by the technicians and service providers responsible for corporate and personal websites, thereby reducing the risk of having a compromised site and sensitive data stolen.
When trouble brews online—no matter where it comes from—the best thing is to know you’re safe. Today, the Principality of Monaco’s government monitoring and surveillance system proved its effectiveness.