Morning coverage still followed the Hajar case, with details emerging that 23-year-old suspect Abdi was arrested in Spierdijk after smashing windows and attacking his foster father with a hammer. Police searched an anti-squat building in Amsterdam-Buitenveldert identified as the possible crime scene. DSW also announced a near €15 monthly rise in health premiums for 2027, described as the largest increase ever.
By late morning editors shifted decisively to a critical vulnerability in programming language PHP. DigiD, MijnOverheid, the Tweede Kamer site, hospitals, MijnDomein-hosted sites and RTL.nl itself went preventively offline. The National Cyber Security Centre and minister Van Weel reported no confirmed abuse but warned every PHP system was presumably vulnerable.
A patch became available in the afternoon and sites slowly returned, though experts warned recovery could take months and the PHP foundation acknowledged structural failure.