Chained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers
Security researchers have identified a chained PHP2Shell exploit that compromised 25 servers, among them several belonging to U.S. government agencies. The attack leverages a vulnerability in PHP to gain remote code execution, allowing attackers to install a backdoor and move laterally across networks. Mitigation steps include patching affected PHP versions and reviewing server configurations promptly.