I am 100% a conspiracy theorist and an idiot and you should not believe anything i say. But i say something seems off.
XFEDI
ActivityPubConversation
also noticing that the CA private key == 4 vuln and the PHP vuln are not related to each other at all. the PHP vuln dropped second, at a time when infosec workers were already scrambling to fix something else.