Daily Brief
PHP2Shell attempts and active edge-device compromise
PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware
Attackers are attempting to exploit the newly disclosed PHP2Shell flaws to deploy Mirai malware, although reports say weaponising them appears harder than expected. The activity matters because it shows rapid interest from botnet operators after a critical disclosure, even where reliable exploitation is uncertain.
Check whether any PHP services you expose are affected by the PHP2Shell issues and apply the vendor guidance or mitigations now, especially on internet-facing hosts.
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials
Researchers say a large campaign has targeted exposed network edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, and has exposed over 70,000 credentials. This matters because edge devices remain a high-value entry point and the campaign has already reached numerous organisations worldwide.
Review exposed firewall and VPN access this week, hunt for signs of compromise on edge devices, and rotate any credentials that may have been stored or accessed through those systems.