PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers revealed an AI-assisted attack by a suspected China-linked actor exploiting PHP2Shell and a Linux kernel vulnerability to root 25 servers, including three in a U.S. government-affiliated network. The attack used a custom exploit targeting firewall software and Active Directory credentials.