An outage notice on NCSC.NL says the Nationaal Cyber Security Centrum (NCSC), part of the Ministry of Justice and Security, has temporarily taken the site offline as a precaution. It attributes the decision to PHP vulnerabilities. The notice names no CVEs or affected PHP versions.

PHP’s security team has announced a patch for 16:00 Dutch time. The NCSC expects to publish an advisory at advisories.ncsc.nl within an hour after the patch becomes available.

The NCSC has opened a technical information page at github.com/NCSC-NL and says it will update it continuously. Its current work includes an inventory of PHP-related software products to identify vulnerable products.

For updates and questions, the NCSC points to community.ncsc.nl and its LinkedIn page. Organizations using NCSC CSIRT services can use MijnNCSC at mijn.ncsc.nl. Urgent assistance is available around the clock at cert@ncsc.nl. During office hours, the telephone number is (070) 751 55 55.

Press inquiries can be sent to Roger Kaemingk, spokesperson, at +31 6 31 10 51 89, or Georgine Aerts, press officer, at +31 6 29 69 15 00. Both use pers@ncsc.nl. Aerts is listed as available Monday through Thursday. Urgent press questions outside office hours can be directed to 070 751 55 30.