The Dutch National Cyber Security Centre (NCSC) has taken its website, NCSC.NL, temporarily offline as a precaution due to vulnerabilities in PHP. The organisation says it is working hard on a solution to bring the site back online as quickly as possible.
For current information on these vulnerabilities, the NCSC refers visitors to its page on the NCSC Community. The PHP security team has announced a patch scheduled for 16:00 Dutch time. The NCSC expects to publish an advisory on advisories.ncsc.nl within one hour of the patch being released.
The NCSC has also set up a page on GitHub with technical details on the vulnerabilities, which will be updated continuously. In addition, the agency is conducting an inventory of all PHP-related software products to determine which ones are affected. Updates are also available via the NCSC's LinkedIn page and the NCSC Community, while organisations using its CSIRT services can access Mijn NCSC.
For urgent matters, the NCSC can be reached 24/7 at cert@ncsc.nl. During office hours, the agency can also be contacted by phone at (070) 751 55 55. The NCSC apologised for the inconvenience and thanked the public for its patience.
Source: Hacker News · Summarized by HeadlinesBriefing