Corporate Threat Intelligence Unit
Appears in 2 stories · Last updated Nov 1, 2026
Said PHP2Shell is now broadly exploited in the wild and recommends checking for intrusions back to October 17
Palo Alto Networks confirmed that attackers chained the PHP2Shell flaws with a Linux kernel bug to take root control of its firewalls, and shipped hotfixes for PAN-OS 12.2, 12.1, 11.2, 11.1 and 10.2. Unit 42, the company's threat research arm, said it independently verified the tooling and results that Dream Security described.
Updated Nov 1
As of May 2026: Active, tracking GRU operations since 2021
From 2021 to 2025, Amazon exposed that Sandworm (GRU Unit 74455)—the team behind NotPetya and Ukraine's grid attacks—had shifted to infiltrating misconfigured devices at Western utilities, energy companies, and security providers. They compromised edge devices, harvested credentials, and penetrated networks across North America and Europe.
Updated May 16
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
