Researcher discloses zero-day vulnerability in FireEye

Here's the exploit posting that they refer to in the first paragraph: https://www.exploit-db.com/exploits/38090/

One reason these vulnerabilities are so common is that the admin interfaces of appliances like FireEye's aren't normally exposed on the Internet.

A cyber security company that does this

"the box has Apache, pushing PHP, running as root."

is not a cyber security company .. lol