Dream Reports PHP2Shell Attack Chain That Compromised 25 Servers

Dream has reported a PHP2Shell attack chain that it says compromised 25 servers, including systems in a U.S. government-affiliated environment. Its October 26 investigation describes an exposed firewall management interface becoming a route toward internal identity infrastructure. The reported total comprises 24 perimeter firewalls and one internal management server. Dream withheld the affected vendor and software versions and said it notified the vendor. How the Exploit Chain Crossed Two…

Read the original article:

Dream Reports PHP2Shell Attack Chain That Compromised 25 Servers