eBoss is patched and protected against this week’s PHP vulnerabilities
eBoss applied the security fix for this week’s critical PHP vulnerabilities overnight. Your data is protected and there’s nothing you need to do.
You may have seen news this week about two critical security vulnerabilities in PHP, the software behind a large share of the world’s websites, including many recruitment systems. Security agencies in the UK and Europe advised organisations to patch immediately, and some companies took their systems offline while they did.
We want to reassure you: eBoss is patched and protected.
What we did
The fix was released on the afternoon of 21 October. Our team worked through the night to apply it to every eBoss server that runs your system, your careers pages and our API, and finished before most of our customers had started their working day.
We did this one server at a time, so eBoss stayed online throughout. Before and after each update we tested logins, candidate records, CV upload and parsing, careers pages and the API, to make sure everything worked exactly as before. It did, and we have seen no sign of any impact on eBoss or your data.
What this means for you
- There’s nothing you need to do
- eBoss works exactly as before
- Your candidate, client and job data remain secure
One step we recommend
The best single thing you can do to protect your account is to switch on two-factor authentication (2FA). It adds a 6-digit code from your phone to your login, so even if someone learns your password, they can’t get in. It takes about five minutes: How to turn on two-factor authentication.
Our commitment
Keeping your data safe is part of the job, not an extra. We watch for security advisories that affect eBoss and act on them quickly, so you can get on with recruiting.
If you have any questions, or your IT team needs more detail for a security review, email us at support@ebossrecruitment.com.