Daily Brief
Daily Brief, October 30, 2026
Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces
Palo Alto Networks said attackers are exploiting the recently patched PHP2Shell vulnerabilities against publicly accessible management interfaces. The warning matters because exposed admin portals are a direct path to device compromise, and the campaign is already active in the wild.
Inventory all internet-facing Palo Alto management interfaces and confirm they are not publicly reachable. Apply the vendor fix and restrict access to trusted networks or VPN only.
Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls
Cisco said a high-severity flaw in Secure Firewall ASA and FTD software has been exploited in the wild to crash firewall devices. This is important because unauthenticated remote attacks against perimeter gear can quickly disrupt connectivity and create an opening for further intrusion.
Check whether any Cisco ASA or FTD devices are exposed to the internet and patch them urgently. Monitor for unexpected crashes or restarts on edge firewalls and review incident logs for signs of probing.