Convenors and others who use Beacon, please read this notice from the system's maintainers:

We have temporarily taken Beacon offline to protect your u3a’s data and your members’ personal information following the discovery of critical security vulnerabilities in PHP, the software on which Beacon runs.

We know that Beacon is central to managing your u3a’s memberships, interest groups, finances and communications. We recognise the disruption this decision will cause and are sorry for the difficulties you may experience.

Why have we taken Beacon offline?

The vulnerabilities affect software used by websites and online services around the world. They could allow attackers to gain unauthorised access to affected systems.

In line with guidance from the National Cyber Security Centre, we have taken Beacon offline as a precaution while the issue is resolved. Protecting the information entrusted to Beacon is our priority.

This is a wider issue affecting many organisations. Reuters has reported that government, school and hospital websites across Europe have also been taken offline as a precaution.

What is being done?

Although security updates have been released for newer versions of PHP, a suitable update for the older version currently used by Beacon is not yet available.

We are working with our development team to assess the options and establish a safe way to restore the service. Beacon will remain offline until the necessary security work and checks are complete.

When will Beacon be available again?

We cannot yet give a reliable timescale. We will provide further updates on the Beacon login page and email users when the service is restored, or sooner if there is significant information to share.

Please share this message with others in your u3a who rely on Beacon.