How the security community found the PHP flaws but stumbled across the finish line Tom Krazit Oct 21, 2026 5 min read