Just to summarize what happened so you don’t feel overwhelmed: – PHP2Shell Two memory-corruption bugs in PHP core give unauthenticated remote code execution (CVSS v4 9.2). They affect every version of the last decade, back to 5.4. The embargo leaked, attacks began before the patch, and govt sites went offline, including the UK NCSC. The NSA says patch or pull PHP systems offline. – Railway breach Railway detected unauthorized access to the systems that store customer environment variables.…