PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

AI Summary

A suspected China-nexus threat actor exploited PHP2Shell vulnerabilities combined with a kernel privilege escalation exploit to root 25 servers, including systems within a US government-affiliated network, in an attack observed on October 25, 2026. Researchers noted AI-assisted elements in the attack orchestration, signaling an escalation in attacker tooling sophistication targeting web management interfaces of firewalls and VPNs.

Read full article → https://thehackernews.com/2026/10/php2shell-attack…

Relevance score: 80.0/100

# More from October 29

1
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns The Hacker News
2
Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win The Hacker News
3
Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges The Hacker News
4
ShinyHunters-Exploited Oracle PeopleSoft Zero-Day Turns Out to Be Three Chained Flaws The Hacker News
5
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch The Hacker News
6
Critical 16-Year-Old UEFI Flaw Can Run Code Before Secure Boot on Network-Booting Servers The Hacker News
8
Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass The Hacker News
9
Tailscale Patches SSH Flaws That Could Let Hacked Devices Gain Root Access on Other Servers The Hacker News
10
Chrome and Firefox Updates Patch Over 200 Vulnerabilities SecurityWeek