Dutch NCSC Goes Offline Over PHP Flaw

The Dutch National Cyber Security Center pulled its site offline today because a critical PHP flaw could be exploited. NCSC.NL is down while the team races to apply a patch scheduled for 16:00 Dutch time. They promise an advisory on advisories.ncsc.nl within an hour of the fix. A dedicated GitHub page now hosts technical details and live updates on the vulnerability. The agency is also cataloguing every PHP‑related product to see which are at risk. For non‑critical queries they point users to their LinkedIn feed and the NCSC Community forum. Organizations using CSIRT services can still reach support through MijnNCSC or by emailing cert@ncsc.nl. Urgent phone help is available 24/7 at (070) 751 55 55, after hours at (070) 751 55 30. Press contact Roger Kaemingk can be reached at +31 6 31 10 51 89 or pers@ncsc.nl. Georgine Aerts is also available at +31 6 29 69 15 00 or pers@ncsc.nl.