Update on Recently Reported PHP Vulnerabilities
Lothian Pension Fund (LPF) is aware of the recently disclosed critical vulnerabilities affecting PHP, a technology that is widely used within websites, applications and online services. Industry guidance has highlighted the potential for affected systems to be vulnerable if appropriate mitigations are not in place.
We've confirmed that LPF's internal technology services are not affected by these vulnerabilities and are engaged with our third-party suppliers who support many of our services. We'll continue to monitor the situation closely.
Protecting our members' information remains our highest priority. We've no indication that LPF systems, services or member data have been affected, and members do not need to take any action at this time.
