ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

Security researchers report ongoing exploitation attempts of PHP2Shell vulnerabilities in WordPress sites, though no confirmed compromises yet. Hudson Rock reveals FortiBleed 2.0 campaign exposing over 40,000 secrets from FortiGate devices. Threat actors hijacked institutional DNS to host illegal gambling content, exploiting trusted domains.