Two bugs in PHP itself are being called “70% of the internet is affected”, and the bug is serious, but the headline number is not.

source