SecurityThe Recordabout 1 hour ago
Chinese Actor Exploits PHP Bugs on US Servers
5 min read
Cybersecurity firm Dream reports a Chinese threat actor exploited two PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, to compromise 24 firewalls. The campaign targeted U.S. government-affiliated servers between October 23 and 24, using tools like FOFA and DeepSeek to gain root access and steal credentials.
Level
Hype check
Tap to vote and see what everyone thinks.
