PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root
Get these alerts on XExploits, big breaches and outages, with what to do.
Follow @vulnpulse_appCheck whether your data has leaked
- Have I Been Pwned: check for free whether your email address is in past breaches (the FBI also contributes leaked passwords)
- Google Password Checkup: checks passwords saved in Google for leaks, reuse and weakness, and suggests changes
| Source | The Hacker News |
|---|---|
| Fetched | 10/29/2026, 01:21 AM |
| Data | Markdown JSON |
On 10/29/2026, 01:02 AM, The Hacker News published "PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network" (type: Breach). Related technologies: PHP.