2 days ago, everything felt normal.
Sites were up. No one was panicking.
Now PHP2Shell is everywhere, Cloudflare is reporting millions of exploit attempts, and suddenly PHP security is everyone's top priority.
The bugs didn't appear overnight. They were already there. What changed was our awareness of them.
Makes you wonder how many vulnerabilities are sitting in production right now, quietly waiting to be discovered.
Are we getting better at finding them, or have we just been lucky so far?
commit de0620b