PHP2Shell plus Fragnesia: A dangerous new route from web server to root

Chinese hackers build PHP2SHELL exploit, use it to root 25 servers, breach US government-affiliated firewalls

Palo Alto Networks firewalls running outdated OS seem to be the target, as Chinese hackers chain PHP2Shell to Fragnesia for the campaign.

Hackers are exploiting PHP2Shell flaws before organizations can patch—experts warn AI is shrinking the window to respond

CISA says hackers are actively exploiting two critical PHP vulnerabilities, prompting U.S. agencies to patch systems as experts warn AI is accelerating attacks and exposing outdated servers.

Palo Alto Networks firewalls compromised in chained attacks using PHP2Shell

The AI-enabled campaign hit two dozen targets, including sites linked to the U.S. government.

PHP2Shell chain used to root 25 servers

Researchers say suspected Chinese operators built a custom PHP2Shell exploit and chained it with the Fragnesia Linux kernel flaw to gain root on 25 servers, including Palo Alto PAN-OS firewalls tied to US government-affiliated organizations....

PHP2Shell plus Fragnesia: A dangerous new route from web server to root

Researchers say attackers combined PHP RCE with a Linux kernel flaw to root vulnerable firewall appliances, establish persistence, and extract credentials, private keys, and full network topology.

Limited reports of PHP bug exploitation emerge

One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "government affiliated" servers.