Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #5

PHP zero-day exploits force Dutch NCSC offline

Original: Attackers are exploiting two unauthenticated PHP zero-days after details leaked early, forcing the Dutch NCSC to pull it

Attackers are exploiting two unauthenticated PHP zero-days whose details leaked ahead of a coordinated disclosure, prompting the Dutch cybersecurity centre NCSC to take its site offline. Cloudflare rolled out emergency WAF rules to protect customers while the PHP Foundation accelerated its patch release. Security experts warn a WAF only offers temporary cover, and PHP's ubiquity means unpatched servers remain exposed until fixes are widely applied.

Why now: Early leak of vulnerability details turned a coordinated disclosure into an active exploitation emergency affecting PHP servers worldwide.

PHP FoundationNCSC NetherlandsCloudflarePHP

Open on mastodon →

Evidence

• Attackers are exploiting two unauthenticated PHP zero-days after details leaked early, forcing the Dutch NCSC to pull its site offline. Cloudflare deployed emergency WAF rules while the PHP Foundation accelerated its patch release. A WAF only buys temporary cover; because PHP… · zubiqo

API: https://socialmediatrends-api.osmike.com/v1/trends/3131722