Php
- We can now find flaws faster than anyone can fix them
In 2024 our audit of PHP's core reported two flaws in the exact code behind php2shell and filed one as a crash. Two years later, three teams independently turned the same defect into a working attack in six weeks. The code never changed. The cost of looking at it did.