Two items concerning PHP came to us today.

1- Micheal wrote to tell us that phpBB has been working on putting an Incident Response Team together to help users understand how they were attacked and get back on their feet.  The announcement is here: http://www.phpbb.com/phpBB/viewtopic.php?t=343745.

2- Juha-Matti wrote to tell us that in reference to an earlier diary about XML-RPC for PHP issues a new script was published at http://www.securityfocus.com/bid/14088/exploit.