Two remote code execution bugs in PHP could let anyone run code on unpatched servers. Taylor Monahan on why patching is so hard and how Cloudflare is buying time.