Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence (AI)-assisted attack orchestrated by a suspected China-nexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems. The activity, which was observed on October 25, 2026, involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root
PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network
TN

The Hacker News

1h ago
0 0

Discussion

Don’t hold back—comment!

Don’t wait—start sharing your ideas now!

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrom…

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…
MB

Maria Bakker

6h ago
0
darkreading.com
Third Serengeti Sweep Tops 1,400 Arrests as Investigations Matu…

Interpol's annual Operation Serengeti, now on its third iteration, led to 1, 462 arrests across 20 African countries and the US, recovering $105 million in sto…
DR

Dark Reading

10h ago
0
bleepingcomputer.com
Japan's GMO urges customers to shut down PCs amid ransomware th…

The GMO Group has urged customers to disconnect their systems from the internet and shut down computers after a threat actor who breached the company's Onamae…
alex but tired

alex but tired

16h ago
0
darkreading.com
3 Frameworks to Protect CISOs & Orgs Against AI Liability

Cyber leaders can get ahead of AI liability with rigorous documentation, transparency, and smart contract negotiations with AI vendors.
DR

Dark Reading

19h ago
0
thehackernews.com
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations …

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key elemen…
TN

The Hacker News

22h ago
0
bleepingcomputer.com
Microsoft releases Windows OOB updates to distrust eMudhra cert…

Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting sys…
LK

Lars Khan

22h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Anthropic's Unreleased AI Model Chains Flaws Into Working Chrom…

An unreleased Anthropic AI model found security flaws in Chrome, Safari, Android, Windows, and Linux and chained them into working proof-of-concept exploits, t…
MB

Maria Bakker

6h ago
0
thehackernews.com
CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations …

Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key elemen…
TN

The Hacker News

22h ago
0
thehackernews.com
Microsoft Authenticator Flaw Let Permissionless Android Apps St…

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, an…
TN

The Hacker News

1d ago
0
thehackernews.com
Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access a…

The Computer Emergency Response Team of Ukraine (CERT-UA) has issued an alert warning of unauthorized remote access to video surveillance systems manufactured…
Golden Greta

Golden Greta

1d ago
0
thehackernews.com
Hackers Infect 953 Online Stores With Scanner-Evading JavaScrip…

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to…
TN

The Hacker News

1d ago
0
thehackernews.com
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Mod…

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sand…
RM

ryan maybe

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest