FreePBX servers hacked via zero-day, emergency fix released

Sangoma warns of an actively exploited zero-day in FreePBX Administrator Control Panels exposed to the internet; multiple customers report compromises (including unauthorized command execution as the asterisk user and large-scale SIP/trunk impacts). Sangoma released an EDGE module fix and will push a standard security release, and administrators are advised to restrict ACP access, check provided IOCs, restore from pre-21 August backups if compromised, rotate credentials, and review call records for abuse.