So, regarding the #php security issues, it seems that Chainguard was the one who broke the embargo. But at the same time, AWS reports that they were seeing exploit attempts days before even that happened. So it seems that there are other issues with the coordination process.

https://thephp.foundation/blog/2026/10/21/todays-php-security-release-and-how-were-strengthening-php-security/

https://aws.amazon.com/blogs/security/amazon-threat-intelligence-identifies-php2shell-exploitation-prior-to-public-disclosure-in-madpot/

#php2shell #security