NCSC warns PHP update may not bring all websites back online at once

Websites affected by vulnerabilities in PHP may not all come back online immediately after a security update is applied, the Netherlands’ National Cyber Security Centre (NCSC) has warned. The time needed will depend on which version of the software each site uses, said deputy director Corine Schipper-Derkse at a press briefing on Wednesday. [1]

She said organisations should be ready to install the patch at 16:00. The update is expected to fix a flaw in the software and allow websites to return online, but recovery could take minutes or hours — and, in some cases, longer.

Schipper-Derkse also said a further patch could be issued later if the first update does not resolve all the problems.