I look at how the PHP2Shell disclosure embargo broke down, what that meant for defenders, and why keeping your PHP runtime patched deserves as much attention as application security.
https://joelbutcher.dev/writing/php2shell-when-a-security-embargo-breaks-down
Joel ButcherPHP2Shell: When a security embargo breaks downA broken disclosure embargo can give attackers a head start while defenders prepare patches. I look at PHP2Shell and why PHP runtime updates deserve as much attention as application security.
commit b54aca0