Following the recently disclosed PHP vulnerabilities, SCG immediately initiated an assessment and remediation programme across its businesses, platforms and supporting infrastructure. All identified affected systems within scope have now been remediated through vendor-supported security updates or other compensating controls where appropriate. During the remediation activity, potentially exposed services were either patched, isolated, or had external access restricted until the required safeguards were in place.
Our teams have completed validation and health checks across impacted services, and we continue to monitor our environment for any indicators of attempted exploitation or abnormal activity. Based on our investigations and monitoring to date, we have not identified any evidence of compromise relating to these vulnerabilities within the systems reviewed.
Protecting customer services and information remains a priority for SCG, and we will continue to apply security updates, vulnerability management and monitoring controls in line with our established security processes.