vulnerability disclosure

PHP CVE Window: Why Pulling the Plug Beat Clever Fixes

When the PHP project announced that a critical security release was coming — days before the patch actually existed — the internet did what it always does: it...