Patching PHP does not tell you whether you were compromised
For organisations, applying the security patch is only part of the response. The next question is whether affected systems were compromised - and what evidence supports closing the incident.
