security-patch

荷兰国家网络安全中心（NCSC.nl）因 PHP 存在安全漏洞而临时将官网下线，PHP 安全团队预计于荷兰时间 16:00 发布补丁，NCSC 将在补丁发布一小时内发布安全公告，并在 GitHub 上持续更新受影响产品的技术信息。

Two critical PHP Remote Code Execution vulnerabilities (9.2/10 severity, affecting PHP 5 onward) prompted emergency patches, with cybersecurity agencies advising unpatched sites to go offline. Over 1.3 million hosts and all WordPress sites are potentially affected, with experts anticipating mass attacks within minutes of the release.

Microsoft's latest security updates for Windows and Excel have caused widespread issues, breaking audio, remote access, and paste functions across multiple versions, highlighting ongoing quality challenges.

Microsoft patched 137 vulnerabilities, with a notable high-severity privilege escalation fix in Azure AI Foundry highlighting security risks in the infrastructure layer of AI applications.