PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk
Chainguard says it "didn't leak" the PHP fix six hours early, having found the same bugs itself overnight with "a basic prompt", which is roughly how long a secret keeps now.