As referenced in our last post, we have taken PBworks offline to keep user data safe. No data breach happened on PBworks’ infrastructure. We have a patch and are deploying it. Our current estimate for when the PBworks platform will be operational is tomorrow, Friday, October 23. This will allow us to deploy and test the patch, conduct QA to make sure the patch doesn’t have downstream impacts on existing code, and deploy code fixes if any are needed.
We apologize for this disruption. The safety and integrity of your data is paramount to us and we’re thankful we were able respond to this news with no breach. We will continue to update the PBworks Blog as we know more.
Links from the previous posts that you may find useful or informative:
If you want to learn more, here is an article that explains the vulnerability:
https://www.wired.com/story/this-is-not-a-drill-2-php-vulnerabilities-are-setting-the-internet-on-fire/
And NSA statement with recommendations:
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Press-Release-View/Article/4630238/nsa-advisory-critical-patches-recommended-for-php-vulnerabilities/
