The Dutch National Cyber Security Center (NCSC) temporarily took its website NCSC.NL offline as a precaution due to vulnerabilities discovered in PHP. The organization says it is awaiting a security patch from the PHP security team, expected at 16:00 Dutch time, after which it plans to publish an advisory within an hour. The NCSC has also set up a GitHub page with technical details and is compiling an inventory of PHP-related software products affected by the flaws.
ncsc.nl
· 2026-10-21
The UK's National Cyber Security Centre, along with EU and Australian counterparts, has told organisations using PHP to install a critical update released by the PHP Foundation on Wednesday. Two vulnerabilities were identified that could allow unauthenticated remote code execution, potentially letting attackers install malware or disable websites. Officials say affected versions may stretch back as far as PHP 5, released in 2004.
bbc.co.uk
· 2026-10-21
The Dutch NCSC has issued an alert about two critical Check Point VPN vulnerabilities, CVE-2026-85102 and CVE-2026-85103, warning that attacks exploiting them are likely to begin soon even though no public proof-of-concept exploit exists yet. Check Point released patches for both bugs on September 9, covering Security Gateways and Management Servers across multiple supported and end-of-support versions.
bleepingcomputer.com
· 2026-09-12
GoKawiil