The PHP situation will lead to a mass of incidents - it’s one of the biggest vulns in years.

Shodan dork "X-Powered-By: PHP/" - a lot are on EOL versions with no patch. It’s also more hosts as not everybody lists their PHP version in headers.