A Dutch developer named Roy was overwhelmed with phone calls as a serious PHP vulnerability became international news, according to De Telegraaf. The newspaper reports that the situation escalated sharply when the government took websites offline, with Roy describing an outburst of frustration at that point.
The episode drew heavy attention in the Netherlands, though NU reported that foreign media gave the PHP danger less coverage and noted that the Dutch response was not exaggerated. BNR reported that the NCSC, the national cyber security centre, found no Dutch misuse of the serious PHP flaw.
De Volkskrant framed the incident around a small non-profit organisation, describing how it triggered a worldwide internet meltdown and quoting the assessment that it should have been an entirely ordinary update. The Leeuwarder Courant argued that this week's hack and internet disruption should serve as a wake-up call, urging preparation for societal disruption.
Taken together, the coverage points to a flaw that caused significant alarm at home even as its exploitation inside the Netherlands was not confirmed by the NCSC. The reports also raise questions about how a routine-looking software update from a small organisation could produce consequences felt across the internet.
What to watch next: whether the NCSC or other authorities publish further findings on the flaw and on the government sites that were taken offline.