Dunno why, but the panic about PHP2Shell reminds me the panic about the Michelangelo virus in 1992. Or about the Y2K panic . Sure, these threats were real and required a lot of work to stop them - but the panic about them was way overblown.