PHP2Shell hits Palo Alto firewalls, Cisco ASA VPN zero-day | Cyber Security News Oct 29
Attackers are using PHP2Shell against Palo Alto firewall management pages, an exploited flaw crashes Cisco ASA and FTD VPNs, and Talos found an SD-WAN implant that steals network keys. Every version number and every fix in this episode was checked against the vendor's own advisory before it aired. Today's question: What finally got your certificate renewals automated? Reply in the comments or at feedback@defensivesecurity.org.
1. Update: PHP2Shell hits Palo Alto management pages - CVE-2026-109618, CVE-2026-109619, CVE-2026-46300 - federal due 2026-10-31 - Do: Take PAN-OS management off the…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.