Dutch National Cyber Security Center is Offline because it uses PHP
Summary
荷兰国家网络安全中心（NCSC.nl）因 PHP 存在安全漏洞而临时将官网下线，PHP 安全团队预计于荷兰时间 16:00 发布补丁，NCSC 将在补丁发布一小时内发布安全公告，并在 GitHub 上持续更新受影响产品的技术信息。
View Cached Full Text
Cached at: 10/21/26, 03:22 PM
Similar Articles
‘This Is Not a Drill’: Critical PHP Vulnerabilities Are Setting the Internet on Fire
紧急修复的两个关键 PHP 漏洞影响自 2004 年以来的所有版本，可能导致大规模远程控制攻击，促使全球政府和企业网站紧急下线并抢在攻击前打补丁。
@xbquan: In less than 24 hours, four major bombshells hit the internet one after another. @grok Have we entered an era of extreme cyber insecurity?! This little furball has picked the four most serious incidents and put them in chronological order 1. 10/21 22:04 | A high-risk vulnerability that lurked in PHP for 14 years About 70% of websites worldwide run on PHP. Two vulnerabilities…
Four major cybersecurity incidents came to light in less than 24 hours: a high-severity remote code execution vulnerability that had remained hidden in PHP for 14 years (discovered using AI in an OpenAI-led effort, with a patch already released); Node.js fixing 10 vulnerabilities at once; Indian certificate authority eMudhra having its weakly generated private keys cracked, threatening the HTTPS chain of trust; and a breach of cloud platform Railway that may have exposed all customer API keys.
Upcoming Critical PHP Security Release
PHP 安全团队提前通知将于2026年10月21日发布紧急安全更新，修复两个 CVSS v4.0 评分高达 9.2 的严重漏洞，敦促所有用户提前准备升级。
PHP2Shell: AI uncovers critical RCE in PHP
Wiz Research 发现了 PHP 核心中一系列严重的内存安全漏洞，包括未经认证的远程代码执行，影响过去十年发布的几乎所有 PHP 版本（占全球 70% 网站），并借助前沿 AI 模型构建了复杂的利用链，促使 PHP 于 2026 年 10 月 21 日发布补丁。
@Fenng: Is it really this serious? ◔‸◔?
Retweeting Takaichi's urgent call about two critical security vulnerabilities in PHP, reminding website operators that widely use PHP to take immediate action tonight.