All news
PHP2Shell roots Palo Alto firewalls with exposed admin pages: restrict access, look for web shells
Dream reports that a suspected China-linked attacker chained PHP2Shell, two PHP flaws, with the Fragnesia kernel bug and got root on 24 firewalls with internet-facing management across South Korea, Taiwan, Japan and the US on October 23–24. Dream withheld the vendor; The Register, via Mezha, says the devices run Palo Alto Networks PAN-OS versions 12.1 and 12.2.