FreePBX Servers Hacked via Zero-Day, Emergency Fix Released
First, it’s bad security practice to have the ACP accessible directly on the internet. And if you were to do it, lock it down to an IP address the administrator would use via the firewall. It’s just better to VPN…