From Exposed Firewall to Active Directory: Inside a 25-Server Root Compromise Chain
Security researchers at Dream say an attacker combined two PHP2Shell firewall bugs with a Linux kernel privilege-escalation flaw to seize root on 25 systems across four countries, including...
WatchGuard Patches Seven Critical Firebox Flaws With CVSS Scores Up to 9.5
WatchGuard's October 27 security advisory discloses 18 vulnerabilities in Fireware OS and its Windows Mobile VPN client, seven of them rated critical with CVSS scores between 9.1 and...
Palo Alto Confirms Critical 9.2-Severity Flaw in PAN-OS Firewalls, Ships Workarounds Ahead of Patches
Palo Alto Networks has confirmed that a critical memory-corruption flaw in Google's Brotli decompression library, tracked as CVE-2026-111497 with a CVSS score of 9.2, affects certain PAN-OS firewall...
Palo Alto Confirms PAN-OS Firewalls Exposed to Critical PHP Remote Code Execution Bugs
Palo Alto Networks has confirmed that two critical PHP vulnerabilities reach into PAN-OS firewalls and Panorama management systems, with hotfixes still days away. Proof-of-concept exploits already exist for...
FortiBleed: Over 73,000 Fortinet Firewalls Compromised in Industrial-Scale Cyber Espionage Campaign
An industrial-scale cyber espionage campaign dubbed "FortiBleed" has silently compromised over 73,932 unique Fortinet firewall URLs across 194 countries, targeting Fortune 500 companies, government entities, and a NATO...
Critical Palo Alto PAN-OS Zero-Day CVE-2026-0300 Actively Exploited — Root Access Granted on 5,800+ Exposed Firewalls
A critical buffer overflow zero-day in Palo Alto Networks PAN-OS (CVE-2026-0300, CVSS 9.3) is being actively exploited in the wild. Unauthenticated attackers can gain full root access to...
SonicWall SonicOS Flaws Let Attackers Bypass Firewall Access Controls and Trigger Denial of Service
SonicWall has patched three vulnerabilities in SonicOS — CVE-2026-0204 (CVSS 8.0), CVE-2026-0205, and CVE-2026-0206 — affecting Generation 6, 7, and 8 firewalls. Discovered by CrowdStrike, the flaws allow...
15,000 FortiGate firewall configurations leaked by the Belsen Group
A new zero-day vulnerability has been identified in Fortinet firewalls, raising significant concerns for organizations relying on these security devices. This vulnerability is particularly alarming as it exploits...