https://www.live-feeds.com/feed/php2shell-attack-roots-25-servers-breaches-u-s-government-affiliated-networkContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/php2shell-attack-roots-25-servers-breaches-u-s-government-affiliated-networkhttps://www.live-feeds.com/feed/php2shell-attack-roots-25-servers-breaches-u-s-government-affiliated-network#u172433Tue, 03 Nov 2026 14:12:48 +0000A suspected China-nexus threat actor used an artificial intelligence-assisted attack to chain PHP2Shell vulnerabilities with a kernel privilege escalation exploit, successfully rooting 25 servers. The compromised infrastructure includes three systems within a U.S. government-affiliated environment, alongside servers located in the United States, Japan, Taiwan, and South Korea. Cybersecurity firm Dream observed the activity on October 25, 2026. The targeted devices run specific versions of a large vendor's firewall software, specifically Palo Alto Networks PAN-OS management interfaces. Fol