Apple announced a US$2 million bounty for anyone who could successfully hack an iPhone. At the Hexacon conference the team demonstrated a working iPhone 18 exploit, showing the bounty could be claimed.

The php2shell flaw was described as critical because it affected a large number of websites. Fixing it required a coordinated disclosure effort with OpenAI, Wiz and the PHP Foundation.

Ryan Austin, a Calif researcher based in Florida, discovered and reported php2shell in early August. He spent months on the research and was keen to receive proper recognition for his work.

A leak about php2shell pushed the PHP Foundation to advance the disclosure by one day. When the 5G signal finally appeared, the team rushed to an Indian restaurant in Frankfurt and posted the announcement from there.

Despite the chaos, the final announcement gave clear credit to Ryan Austin. The acknowledgment turned him into an overnight star and showed why crediting researchers matters.