NCSC says PHP misuse signals came from abroad, with no Dutch incidents reported

The Netherlands’ National Cyber Security Centre (NCSC) says reports of possible exploitation of two PHP vulnerabilities came through its international network, not from the Netherlands. A spokesperson told news agency ANP that no incidents had been reported in the country, as the centre investigates the signals.

The NCSC said it did not yet know when it would be able to share the results of its investigation. Its latest update, published on 23 October, said the agency knew of one report of possible exploitation abroad, but that a successful attack had not been confirmed. It also said exploiting the vulnerabilities was complex and the risk of widespread attacks appeared lower than previously estimated.

The vulnerabilities affect PHP, a programming language used to build websites and web applications. Security updates are available. The NCSC advises organisations to install them as soon as possible, rather than wait for signs of misuse; systems that have not been updated should remain offline until they are patched.

The centre’s earlier updates said that several websites, including government sites, had been taken offline as a precaution, and that some returned after updates became available. The NCSC’s current advice remains to check systems and apply the fixes promptly.