Skip to content
securitytabs

Suspected Chinese attackers built a custom PHP2Shell exploit and rooted 25 servers

The Register SecurityVulnerabilitiesEndpointNetwork

MentionsPalo Alto NetworksLinux kernel

Suspected Chinese attackers chained PHP2Shell with a Linux kernel privilege-escalation exploit to root 25 servers, including Palo Alto Networks firewalls linked to US government-affiliated organizations, according to Dream researchers. The snoops began exploiting these servers on October 23, targeting organizations across the US, Japan, Taiwan, and South Korea.

Summary from The Register Security.

Read the full article at The Register Security
SecurityTabs reportupdated just nowPHP2Shell: Two Critical PHP Flaws Under Active Attack

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities