Security News 900+ Sangoma FreePBX Instances Compromised in Ongoing Web Shell Attacks TheHackerNews Daniel Bender 27 Feb 2026 Over 900 FreePBX systems remain infected after CVE-2025-64328 exploitation, now listed in CISA KEV amid active attacks.