highCyber Attacks
PHP2Shell Vulnerabilities Exploited in AI-Assisted Attack Rooting 25 Servers, U.S. Government Network Breached
Cybersecurity researchers have reported an attack campaign observed in late October 2026 that leveraged PHP2Shell vulnerabilities in combination with a kernel privilege escalation exploit. The activity, attributed to a suspected China-nexus threat actor, resulted in 25 servers being rooted and a U.S. government-affiliated network being compromised. The attack was described as AI-assisted, though specific details regarding the orchestration remain under investigation.
The Hacker News1 min read
