PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

By Ionut Arghire

AI Summary

PHP2Shell attacks are actively exploiting critical PHP vulnerabilities against Palo Alto firewall web interfaces, with over 22.6 million exposed instances potentially at risk across more than a week of sustained exploitation. The campaign has been less effective against WordPress targets despite attempts. Defenders managing Palo Alto devices with exposed management interfaces should apply PHP patches immediately and audit for indicators of compromise.

Read full article → https://www.securityweek.com/php2shell-attacks-roo…

Relevance score: 80.0/100

# More from November 01

1
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor SecurityWeek
2
Hackers steal $6.3 billion from Binance in record crypto heist Ars Technica Security
3
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access The Hacker News
4
China-backed threat group used agentic AI pentesting tool to compromise 140 sensitive targets in 11 days CyberScoop
5
Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor The Hacker News
6
Max-Severity GitLab Vulnerability Exploited Against Alpine Linux SecurityWeek
7
WordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 Hours The Hacker News
8
Trezor Warns of Suspected Hardware Implant in One of Its Wallets Sold by CryptoBilis The Hacker News
10
Chainalysis discloses data breach from "offensive agentic techniques" BleepingComputer