PHP2Shell drew attacks before it was even disclosed. Eight lessons for boards on runtime blind spots, patch speed and supplier risk.
