Kfir Fleischer

New Capabilities

Described a campaign that rooted 24 PAN-OS firewalls and an internal management server by chaining PHP2Shell with Fragnesia, three of them in a US government-affiliated network

Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.

Updated Nov 1