I love the fact that headlines on the PHP shitshow said it was being exploited in the wild, yet the researchers I know and trust have said that it is a difficult at best to exploit and that no known instances oi it actually being exploited have been proven. Shows the state of reporting FUD. IMHO.