“But I think there’s only so much of this low-hanging fruit. There isn’t much else that has the specific reach of PHP. It’s a pretty wild attack surface—most other tools aren’t exposed to the internet by design.”

Jake Williams · said date not stated · reported 2026-10-24

Williams notes that PHP's broad internet exposure makes it a relatively unique attack surface.