South Korea raised its private-sector cyber crisis alert to “caution,” the second of four levels, late last week, but faced criticism at a parliamentary audit that its response was too slow. The move came after two critical flaws in PHP, the programming language behind most of the world’s websites, were found to let attackers take over servers without a password. The Ministry of Science and ICT (MSIT) and the Korea Internet and Security Agency (KISA) urged about 28,000 companies and other operators to patch immediately.

The presidential National Security Office held an emergency meetingwith defense and intelligence officials. At