PHP2Shell Attack Roots 25 Servers Breaches US GovernmentAffiliated Network

Cybersecurity researchers have disclosed details of what appears to be an artificial intelligence AIassisted attack orchestrated by a suspected Chinanexus threat actor that has leveraged the PHP2Shell vulnerabilities to breach exposed systems The activity which was observed on October 25 2026 involved an attacker combining PHP2Shell with a kernel privilege escalation exploit to root