25 firewalls rooted from 19,000 scanned. I did the funnel math.
Dream Research published an attack report this week that reads like a funnel teardown: an attacker scanned roughly 19,000 internet-facing Palo Alto PAN-OS firewalls and ended up with root on 25 of them, including a US government-affiliated organization's internal network. The report is worth reading for the exploit chain. It is worth counting for the funnel, because the funnel is where the real lesson lives. Two exploits, one unauthenticated HTTP request. PHP2Shell (CVE-2026-109618 / CVE-2026-10
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.