Related (where you already posted a bit of this):
Today's PHP security release, and how we're strengthening security
https://news.ycombinator.com/item?id=50182987
petecooper's post that apparently broke the embargo: https://news.ycombinator.com/item?id=50167754
alt Hacker News
petecooper's post that apparently broke the embargo: https://news.ycombinator.com/item?id=50167754