Palo Alto Networks Unit 42

New Capabilities

Verified Dream Security's account and Palo Alto Networks shipped PAN-OS hotfixes for the PHP2Shell flaws; its advisory lists exploit maturity as 'ATTACKED'

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated Nov 1