Dear SIOP Community,
In light of recent news regarding a widespread security vulnerability affecting PHP services (referred to in media reports as “PHP2Shell”), we wish to provide full clarity and reassurance regarding the security of the International Society of Paediatric Oncology (SIOP) membership platform and website services.
Core Membership Platform (YourMembership / YM)
Following a comprehensive review conducted by the R&D and DevOps teams at Momentive Software (YourMembership), we have received formal confirmation that the YourMembership platform is entirely unaffected.
-
No PHP Dependency: The YM application and its hosting environment do not utilize PHP services.
-
Zero Exposure: No exceptions or vulnerabilities related to this disclosure exist within the platform’s hosted environment.
-
No Action Required: Member accounts, profiles, and data remain secure and fully protected.
Web Hosting & Firewall Defense
For peripheral web services running on PHP-supported hosting environments, immediate preventative measures were automatically deployed across our servers:
-
Firewall Rules Applied: Advanced firewall rules were deployed on October 21 to actively monitor, recognize, and block any unauthorized exploit attempts.
-
System-Wide Patching: Fully patched, updated PHP packages covering both current and legacy system versions were successfully installed overnight between October 21 and October 22.
Ongoing Staff Preparedness & System Oversight
Data security and member privacy remain top priorities for SIOP. In addition to our continuous technical monitoring and routine system patching, the SIOP Office team regularly attends annual cybersecurity training to ensure strict data protection standards and operational best practices are maintained across all daily activities.
Continuous Oversight
Our IT and technical teams will continue to monitor security bulletins closely and maintain routine patching across all core systems and plugins.
If you have any questions or require further details, please feel free to reach out to the Secretariat info@siop-online.org
Warm regards,
Susanne Wollaert (CEO)

