Federal Office for Information Security (BSI)

New Capabilities

Saw exploit attempts but no successful use of the flaws, vice-president Thomas Caspers said; sites taken down as a precaution were mostly back online

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated Nov 1