A New PHP Risk Needs a Workaround, Plus 2 Stories

PHP disclosed a new session upload progress vulnerability with no fixed release yet. Here’s the temporary mitigation, plus AWS capacity pressure and PwC’s vendor incident.