PHP2Shell attacks root Palo Alto firewalls; WordPress largely spared
A China-linked group chained PHP2Shell with Fragnesia to plant root webshells on at least 25 PAN-OS firewalls.
88
Organization
Cato Networks
- Mentions · 7d1
- Mentions · 30d1
- All mentions3
- First seenAug 25, 2026
- Last mentioned19h ago
Timeline
3 articles · newest firstShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
ShinyHunters claims it breached the FBI via an Oracle PeopleSoft zero-day RCE, stealing sensitive data on agents and job applicants.
82
Fake OpenAI Codex download tricks macOS users into installing malware
Cato Networks uncovered a malware campaign using sponsored search ads and fake OpenAI Codex pages to deliver an AMOS-like infostealer to macOS users.
55
Related CVEs
by mentions- CVE-2026-3527397%9.8Unauthenticated Takeover Flaw in Oracle PeopleSoft Enterprise PeopleTools
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
Appears with
- Defiantorganization · 1
- Palo Alto Networksvendor · 1
- Federal Bureau of Investigationorganization · 1
- Unit 42organization · 1
- Cato Networksvendor · 1
- ShinyHuntersthreat actor · 1
- WordPressproduct · 1
- WatchTowrorganization · 1
- Codexproduct · 1
- Clopthreat actor · 1
- Claude Codeproduct · 1
- OpenAIvendor · 1
- Dreamorganization · 1
- PHPproduct · 1
- Atomic macOS Stealer (AMOS)malware · 1
- PAN-OSproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.