PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
// AI summary
Researchers disclosed a suspected China-nexus threat actor used AI-assisted PHP2Shell vulnerabilities combined with a kernel exploit to root 25 exposed servers, breaching a U.S. government-affiliated network.
// from the source
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root