Warning of Vulnerabilities in Network Infrastructure

Attackers are actively exploiting vulnerabilities in critical network infrastructures, as highlighted in a recent report by InfraTrust. Web management interfaces of firewalls, VPNs, and other devices are particularly at risk due to PHP vulnerabilities known as "PHP2Shell". These security flaws allow hackers to gain unauthorized access to systems and potentially carry out harmful activities. The vulnerabilities affect a wide range of devices used in corporate networks, including not only firewalls and VPNs but also Application Delivery Controllers and other critical infrastructure components.

The attacks aim to take control of these systems, which can lead to significant security risks. The vulnerabilities have been identified in several widely used software versions. Companies utilizing these technologies are urged to promptly review their systems and install necessary security updates. According to InfraTrust, attacks have already been documented in several regions, underscoring the urgency of the situation. Some of the affected systems are capable of processing sensitive data, increasing the risks for businesses and their customers.

By exploiting these vulnerabilities, attackers could not only steal data but also compromise the integrity of the systems. This could result in financial losses and a loss of trust among customers. InfraTrust's security researchers recommend that companies revise their security policies and ensure that all systems are regularly checked for vulnerabilities. A proactive approach to identifying and addressing security gaps is crucial to minimize risks. The implementation of Intrusion Detection Systems (IDS) is also considered advisable.

The threat posed by the "PHP2Shell" vulnerabilities is not new; however, the intensity of the attacks has increased in recent months. Companies should be aware that cybercrime is becoming increasingly professional, with attackers developing more sophisticated methods to infiltrate systems. The need to strengthen security measures is therefore more urgent than ever. The InfraTrust study highlights that most attacks target systems that are not up to date or whose security updates are not regularly installed. Statistics show that over 60% of successful attacks are due to known vulnerabilities that have not been patched.

This underscores the importance of continuous security management. The security landscape is further complicated by the increasing interconnectivity of devices and the introduction of IoT technologies. These devices are often less protected and provide attackers with additional entry points. Therefore, companies must ensure that IoT devices are also integrated into their security strategies. The InfraTrust study is seen as a wake-up call for companies that may underestimate the risks of cyberattacks.

The necessity to review and update security protocols is critical to ensuring the integrity of networks. According to the report, up to 40% of companies have fallen victim to cyberattacks in the past 12 months. The vulnerabilities addressed in the study are part of a larger issue affecting the entire industry. Experts warn that without immediate action, the number of successful attacks could continue to rise.

Companies are urged to actively engage with this issue and take appropriate measures to protect their systems. The next security conference, where these topics will be discussed in depth, will take place on November 15, 2026, in Berlin. Experts will discuss current threats and solutions.