In brief: Cisco patches a zero-day flaw in firewall software, Chinese hackers exploit the PHP2Shell vulnerabilities, and more.
Cisco has not disclosed indicators of compromise, targeted organizations, or details about the attackers.
Virtualine allegedly advertised hosting services for illegal activities, including phishing, credit card fraud and spam.
The complete exploit chain reportedly took less than 15 minutes to establish a persistent webshell with root privileges.
Artem Stryzhak worked with other hackers to steal data and lock victims out of their computer systems, demanding ransom payments.
The attacker exploited a weakness in a third-party monitoring tool used by the company's website to gain access to customer data and the security key.
According to PHPu2019s maintainers, the flaw can be triggered through PHPu2019s cURL extension when automatic decompression of HTTP responses is enabled.
