The php exploit might not have been a big deal.

"I don't think this PHP vulnerability is that exploitable. I think that 5 years ago people would've understood this, but now people are being deluded by their LLMs telling them they have an exploit when they don't."

I expect that we will see this a lot, as it turns out most of the exploits generated are not working, not new, or not a big deal. I also expect this to cause more burnout among cybersecurity people, and that people will autogen 'fixes' which will be lower quality than the bugs, and massively increase attack surface. (Heard one php fix was 12k lines of code).

My suggestion is to have offline backups and move a lot of your important stuff out of the cloud (or get backups of those). But you should do both anyway.

E: I saw the EFF fear mongering with '25% of all exploits found ever were found this October, secure yourself' and looking at how stuff is still up everywhere, compared to 25 years ago, and I them I realized this is all critihype again.

E2: not a lone voice https://blog.luitjes.it/posts/i-want-my-wednesday-back/

(Cloudflare did say they saw exploits however. Not sure if those were real or 'attempts at' or just marketing).

E3: don't let your takeway from this that we shouldn't do emergency patching and stuff like everybody did last week btw.