Commit

Well. Heck of a day as a CISO 👮‍♂️ / Lead Webmaster of a Dutch political party (cda.nl) with ~750 decentralised webmasters & 380+ departmental sites on our main site: - Yesterday, I planned to apply the patch at 4 pm today. - Woke up at 8 am as the first hints of exploits came in and the EU CERT advised updating as soon as possible and considering switching off public-facing PHP applications. - 2-hour commute: the rumours intensified, and the Dutch CERT (NCSC) switched off its own website (!). - In my opinion, that triggered a domino effect, with other websites switching off as well. I think it was a good decision. - Contacted our partners (again) and decided to switch off our site as well. - Had to communicate this to our ~750 decentralised local webmasters and stakeholders. - Multiple media outlets reported that our website was offline, mentioning the real reason rather than a silly maintenance page. - We were back online 30 minutes after the patch was released. Only our main site was offline. The member portal was unaffected, and all other business processes could continue. 💚