a reminder that if you see a vendor having an unscheduled outage today to apply PHP patches - that is actually one of the most encouraging things you can see from an #infosec perspective, because it means

A) someone/some people at the vendor is paying attention

B) that person/people has enough sway to have them bring down prod in the middle of the day to apply patches

C) enough people at the vendor actually know what software they are running to know its an issue that needs to be dealt with

So, reach out to them and let them know you appreciate it - so they have something to show people who push back the next time a similar thing happens