PHP2Shell, and the 98% of Clients Who Didn't Ask
Two critical PHP flaws let a stranger run code on a web server without logging in. Only 2% of our clients asked whether we'd dealt with it. I'd like to believe the rest trust us. I'd rather they budgeted for it.