PHP exploitation moves at slower-than-expected pace, but millions remain at risk

Security researchers flag botnet activity, but successful compromises have yet to break through.