PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress

SecurityWeek reports widespread and active exploitation of critical vulnerabilities and supply-chain compromises, including PHP flaws targeting exposed Palo Alto firewalls, an unauthenticated WordPress race condition enabling remote code execution, an in-the-wild Drupal Commerce Core access bypass, CVE-2026-97229 in GitLab, and CVE-2026-111585 in TeamViewer. Additional reporting covers a malicious monitoring-tool supply-chain attack draining more than $2 million from Polymarket users, infrastructure used by cybercriminals seized by the FBI, and suspected North Korean TraderTraitor involvement6