At a glance

• Critical PHP flaws require urgent action. Affected software can allow an attacker to run code without logging in, putting website information and availability at risk.
• Our response prioritises protection and continuity. Access restrictions, updates and checks form part of our response. Further remediation and verification remain necessary.
• Security is included as standard. Maintaining and securing our hosting infrastructure is part of our service, alongside the website protection included in your hosting package.
• We are strengthening prevention. An isolated mirror, using no client data, is being established for continuous security testing by our team with Fintan.
• Please check your website and report problems. Log in to the Future Hosting client area and open a support ticket. Check the position with any other hosting providers you use, too.

In the news: the threat behind our response

CNN: Websites shut down globally after AI finds cybersecurity flaw affecting 70% of the internet

This is the PHP security threat our Infrastructure team has been working to protect your services against. Our response has combined exposure restrictions, security fixes and checks of affected systems, with service continuity a priority. Further remediation and verification continue where required.

Why this matters to your business

On 21 October, security fixes were released for two critical PHP vulnerabilities, widely referred to as PHP2Shell. PHP is software used to run many websites and online applications.

The vulnerabilities can allow attackers to execute code on affected servers without a username or password. Depending on the application and its permissions, successful exploitation could expose information, change website content, install malicious software or interrupt orders and enquiries. These are potential consequences, not a statement that your website or data has been compromised.

CERT-EU advises urgent patching, or isolation of affected internet-facing applications where fixes cannot immediately be applied and checked. Temporary measures reduce exposure but do not replace the underlying updates.

Protection and service continuity

Our Infrastructure team has worked through the night on the response. The approach has been to reduce exposure first, then apply compatible fixes and verify the systems actually serving website requests.

That involves identifying affected software and dependencies, checking recovery options, testing compatibility and confirming that updated software is running. Older applications can require additional investigation, application changes or temporary restrictions.

Keeping client websites available wherever possible has been a priority throughout. Some legacy services have required temporary maintenance. Further remediation and verification continue; this update is not an all-clear for every service.

Security is a requirement of our hosting service

We provide more than somewhere to put your website. Maintaining and securing our hosting infrastructure is part of the service, alongside the website security included with your package. It is not an optional extra that you must first choose to add.

That distinction matters when choosing hosting. With some hosting services, customers are responsible for administering and patching their own systems. Our role includes actively managing the security of the infrastructure we provide. If an older website needs additional application work, we will explain what is required and agree the scope separately.

Our commitment is to continuing protection, prompt action and clear communication. Security requires ongoing maintenance, testing and investment as software and threats change.

Our Security Proofing programme

We are establishing a dedicated, isolated mirror of our hosting environment on a different continent. It is designed to reproduce the systems across our estate using synthetic information only. No client data will be copied into it.

Our team, supported by Fintan, our AI model trained by The Next Phase AI, will use this environment for continuous, 24/7 vulnerability scanning and controlled attack testing.

The aim is to identify weaknesses, including potentially undisclosed issues, and test protective changes before applying them to live services under human approval. This addresses the wider security landscape, including vulnerabilities uncovered through AI-assisted research.

This is a substantial, continuing investment in infrastructure and technical expertise. It is how we plan to strengthen prevention and the reliability of the services our clients depend on.

We also plan to publish practical security guides on FutureHosting.ie. If your business needs help with its own office IT security, raise a ticket so we can discuss appropriate support.

What we need you to do

Check the main pages, forms, online shop and other features your business relies on. If you find a problem, log in to the Future Hosting client area and open a support ticket, including the affected page address and a description of what is failing.

For websites or applications hosted elsewhere, ask the provider whether affected PHP software is in use and whether fixes have been applied and checked. A website appearing to work normally does not establish that it is protected. If you need help understanding the response, raise a ticket with us so we can assess the assistance required and agree its scope.

Important account notice: effective immediately

Sustaining this security work requires accounts to be kept up to date. Accounts with hosting invoices more than 45 days past their due date will be placed at the end of the queue for additional account-specific security investigation and remediation, behind accounts within this payment limit.

Priority for this additional work will be restored once the overdue balance is cleared, subject to scheduling. We will explain any identified issue and the action required. Additional work may need to be arranged with your own technical provider or scheduled with us after payment.

Essential measures protecting shared infrastructure and other customers continue. A service presenting an immediate risk may need access restrictions in accordance with the applicable terms.

Please review your invoices in the Future Hosting client area and clear balances more than 45 days overdue. Raise any invoice query through a support ticket.