The Dutch National Cyber Security Center has taken its public website (ncsc.nl) offline after discovering vulnerabilities in PHP. A patch from the PHP security team is scheduled for 16:00 Dutch time, and the center plans to publish an advisory on advisories.ncsc.nl within an hour of that patch. Technical details and ongoing updates are being posted on a dedicated GitHub page, and the center is actively compiling an inventory of PHP-related software products to identify which are affected.
Meanwhile the center directs organizations and the public to alternative channels for updates and support: the NCSC Community, LinkedIn, and MijnNCSC for CSIRT clients. For urgent incidents there is a 24/7 contact email ([email protected]) and a daytime telephone line ((070) 751 55 55); additional out-of-hours emergency numbers and press contacts (Roger Kaemingk and Georgine Aerts, reachable by mobile and [email protected]) are provided. The center apologizes for the disruption and emphasizes its work to restore services and keep the Dutch digital infrastructure resilient.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A PHP vulnerability currently has no working exploit, despite many fake PoCs circulating online. LLMs have falsely been portrayed as able to develop exploits, but practical testing shows no effective attack exists yet. (eliastaylor.com)
The Trump administration denaturalized two individuals who obtained U.S. citizenship by hiding their criminal activities. The move aims to revoke citizenship from those who gained it through fraudulent means. (justice.gov)
Meta's new enterprise terms state that if its AI makes a mistake, the customer is legally responsible. The terms also expand liability to content from partners and give Meta rights to scrape and use user content. (cio.com)
A vulnerability in HTTP/3 implementations allows remote clients to cause servers to allocate excessive memory by exploiting QPACK header compression. Seven of ten tested implementations are vulnerable, with some already patched to prevent resource exhaustion. (foxio.io)
Oracle has issued a security alert for CVE-2026-91403, affecting multiple Java and GraalVM products. Patches are available for supported versions, and Oracle recommends upgrading to ensure security. (oracle.com)
Help desks are increasingly targeted by social engineering attacks to reset MFA accounts. Effective verification methods for remote staff and contractors are being explored to prevent breaches. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.