Braziltopia

Brazil's telecom regulator Anatel and at least three federal courts suspended external access on Thursday (22) to the SEI (Sistema Eletrônico de Informações), the electronic system used across the federal government and judiciary to process administrative and judicial cases, as a precaution after two critical security flaws were identified in PHP, one of the internet's most widely used programming languages. On Wednesday (21), the federal government issued an alert through the Integrated Cybersecurity Center for Digital Government (CISC), ordering public agencies to update the software immediately. According to g1, the vulnerabilities could allow attackers to take control of the servers running affected websites without any login or password. A patch is already available. So far there are no reports of major impacts in Brazil, according to experts consulted by the portal, and none of the affected bodies has reported any sign of intrusion or data leak. How the flaws were found The flaws were first reported in August this year by the security company Calif and by OpenAI, which identified them independently on the same day. Cloud security firm Wiz later said it found additional ways to exploit the vulnerabilities, using the AI models Gemini 4 Argon, from Google, and GPT-5.6 Sol, from OpenAI. On Wednesday (21), the flaws were publicly disclosed, PHP's developers released an emergency fix, and the CISC issued its alert to Brazilian agencies. The precautionary suspensions followed on Thursday (22). "These findings are among the most serious vulnerabilities discovered in PHP and possibly in software history," Wiz said. According to the company, the flaws went unnoticed for more than a decade because finding and exploiting this kind of vulnerability was extremely complex without AI. "Public rankings still point to PHP as the language used in about 70% of websites. With this vulnerability discovered, sites that are not updated quickly could be invaded," Thiago Ayub, technology director at Sage Networks, told g1. What the institutions say Anatel said it temporarily suspended external access to the SEI and to other online services as a preventive measure while technical assessments are carried out. The Regional Federal Courts of the 4th Region (TRF4) and of the 1st Region (TRF1), which are federal appellate courts, confirmed the suspension of external access to the system. The TRF6 said it suspended access to its electronic judicial case system and to the SEI for the same reason. "The measure is preventive and aims to safeguard the security of the system and the integrity of institutional information. At the moment, there is no forecast for restoring external access to the SEI," the TRF1 said. The alert triggered similar reactions abroad. The US National Security Agency urged organizations to patch the flaws immediately or shut down vulnerable systems. In France, local administration websites, including that of the Paris Police Prefecture, went offline at the request of the national cybersecurity agency after what the Interior Ministry called the "detection of a critical security vulnerability." According to the BBC, Wikimedia, the Finnish government and the city of Edinburgh also took sites offline as a precaution. The next step depends on the ongoing technical assessments: Anatel tied the restoration of services to the completion of those reviews, and the TRF1 says there is no timeline for reopening external access. G1 contacted the Superior Electoral Court (TSE) to ask whether the flaws affect its systems and whether there could be any impact on the elections, days before the presidential runoff, and is awaiting a response.

Brazil's telecom regulator Anatel and at least three federal courts this week suspended external access to the SEI, the electronic system that handles administrative case files across the federal government, after the disclosure of two serious security flaws in PHP, one of the most widely used programming languages on the internet. The vulnerabilities had gone unnoticed in the software for more than a decade and were brought to light with the help of artificial intelligence, triggering a global alert: governments from Finland to Japan took websites offline as a precaution, and security agencies in several countries demanded immediate fixes, according to reporting by g1 and BBC News Brasil.To grasp the scale, think of PHP as the internet's invisible waiter: when you open a site like Wikipedia, it is the code that walks to the server's "kitchen", fetches the information and serves it on your screen. Public rankings put the language behind roughly 70% of websites, Thiago Ayub, technology director at Sage Networks, told g1. The flaw lets an attacker take over a server without a login or password and steal confidential data. In practice, it is like learning that the locks on millions of doors installed years ago can all be opened with a master key that anyone can copy.The flaws were first reported in August, independently and on the same day, by security firm Calif and by OpenAI, the company behind ChatGPT. Cloud security company Wiz later said it had found additional ways to exploit the vulnerabilities using Google's Gemini 4 Argon and OpenAI's GPT-5.6 Sol models. The companies reached for superlatives: Wiz called the flaws the "most serious" ever detected by AI, and OpenAI described the finding as "one of the most impactful security problems in recent history". The incentives are worth noting: Wiz sells security services, and OpenAI and Google want to prove their models are useful beyond chat. Government agencies independently endorsed the alert, so the risk is real. The marketing tone, though, also serves those commercial interests.In Brazil, Anatel temporarily suspended external access to the SEI and its other online services as a preventive measure. The federal regional courts of the 1st, 4th and 6th regions, which hear appeals in Brazil's federal justice system, confirmed similar steps. "The measure is preventive and aims to protect the system and the integrity of institutional information," said the TRF1 court, which gave no date for restoring external access. The federal government's Integrated Cybersecurity Center (CISC) issued an alert on Wednesday (21) ordering public bodies to update the software immediately. g1 asked the Superior Electoral Court whether the flaws affect election-related systems and was still awaiting a reply. No major incidents have been reported in Brazil so far, according to experts consulted by the outlet.Abroad, the reaction was just as fast. The US National Security Agency told organizations to patch the flaw or shut down vulnerable systems and said the risk requires immediate fixes across all federal departments and agencies. The United Kingdom advised checking for "backdoors installed by an attacker", and similar alerts came from the European Union, Singapore and Australia. In Japan, Prime Minister Sanae Takaichi wrote on X: "We have an urgent request for everyone to take action tonight." Wikimedia, Finland's government, the Edinburgh city council and the BBC itself are among those that took sites offline for a period. In France, even the Paris police prefecture's website became unreachable at the request of the national cybersecurity agency. PHP's maintainers released fixes on Wednesday and urged all users to update immediately.What we still don't knowNobody knows whether hackers exploited the flaws during the years they went unnoticed. The technical details are only now becoming public, and exploitation attempts are likely to rise in the coming weeks, researcher Salil Kanhere of UNSW Sydney told the BBC. The biggest concern is small, poorly maintained websites run by organizations without security teams, which may be slow to update or may not even know they use PHP.The practical takeaway: if you run a website, especially on WordPress, Moodle or Magento, all built on PHP, the maintainers' guidance is to apply the update now or take the page offline temporarily, as Anatel and the courts did. If you are simply a user, there is little to do beyond checking whether the services you rely on are back online and following their official statements.