> there aren’t swarms of automated pwnbots out there that will insta-root your server
replyThere are, they just didn't have a working exploit. Anyone with a honeypot can tell you attempts were widespread going back to early last week, but it wasn't until Saturday that we started to see successes.
> to write a php2shell RCE for nginx and mediawiki on the same version of php as TFA.
replyOk but a mediawiki page is obviously not comparable
People were complaining that originally it was just using php to serve a static index.html file
It looks like after 18-19hours they updated it to serve a real .php file and it was hacked less than 2 hours after that