On Tuesday night, October 20, we became aware of an internet-wide security vulnerability that impacts one of the foundation technologies that underlies the PBworks service. We continue learning more about the issue, and how we can address it as cybersecurity experts examine and release additional data around this critical vulnerability.
If you want to learn more, here is an article that explains the vulnerability:
https://www.wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/
And NSA statement with recommendations:
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/
As advised, we have taken PBworks offline to keep user data safe. No data breach happened on PBworks’ infrastructure. We are working to resolve this as quickly as possible. Our current estimate is Thursday or Friday, October 22 or 23. This will be determined by the timeframe needed to get a patch developed and tested, and then conducting QA to make sure the patch doesn’t have downstream impacts on existing code.
We apologize for this disruption. We will update the PBworks Blog as we know more. If you have additional questions about this, please email support@pbworks.com.
