The Nextcloud Break-In That Wasn't – 39,000 Knocks, Zero Shells
I sat down to patch PHP2Shell and found out that my Nextcloud had spent a week fending off a Collabora exploit. A forensic dig through the logs, and why a restart can be the moment you get hit.





