PHP2Shell Hits 25 Servers, U.S.-Affiliated Network — SkimNews

Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- PHP2Shell vulnerabilities were leveraged by a suspected China-nexus threat actor to breach exposed systems in an apparently AI-assisted attack.
- 25 servers were rooted during the activity, while a U.S. government-affiliated network was breached; researchers observed the operation on October 25.
Why it matters: The operation, observed on October 25, produced confirmed compromise across 25 servers and a U.S. government-affiliated network. That reach makes the breach material for operators of exposed systems, while researchers’ attribution to a China-nexus actor and AI assistance remains tentative rather than definitive.
Ask SkimNews



