Yesterday, we got an email complimenting us saying they are creating a website to make it easier to find indie coffee roasters. This is an almost weekly event, most of it is obviously spam but this looked genuine from a proper domain - they had scraped our current coffees, the bio of us was accurate, and they appeared to have other vibe-coded projects going off with proper brands. Brief reply, free listing for us etc they can go for it (it may lead to sales). The next reply from them after some pleasantries: "please download our plugin to integrate" 🚫 "Nah, not going to do that" is my first thought. This was before I knew about the #PHP vulnerability. It's commendable how quick scammers got to work probing any business with their guard down and some #smallbusiness will not know they've been attacked yet and worry for them. So if you know of any that you think could be vulnerable and they trust you, it may be altruistic to check in on them.