Chinese Hackers Breach 25 US Government Firewalls

Researchers report the first confirmed PHP2Shell compromises, targeting organizations linked to the US government. Attackers chained PHP2Shell with a Linux privilege-escalation flaw to gain root access and persistence. Breaches progressed from initial compromise to Active Directory attacks within minutes, underscoring patching urgency.