Conversation

The current PHP shitshow is especially vexing because on the one hand, it is very much a big deal, but on the other, there is no widespread SUCCESSFUL exploitation of this vulnerability YET. Despite the latter, a whole lot of asshats are hyping the former for clicks and soundbytes.

Yes, you need to address this ASAP, but no, the internet is not (yet) on fire.