Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers
Title card · GETSECURE.ai
Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-af
Excerpt from The Register
GETSECURE.ai hasn't published its own summary of this story yet. The complete report is at The Register:
The Register. (2026, October 29). Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers. The Register. https://www.theregister.com/security/2026/10/29/suspected-chinese-attackers-built-a-custom-php2shell-exploit-and-rooted-25-servers/5306456
