Trending storyDeveloping
Dream details exploit-chain attack that hit 25 servers
1 report1 sourceupdated 4 hours ago
What happened
AI digest
Dream researchers reported a suspected China-linked, AI-assisted campaign that used a PHP2Shell exploit chain, CVE-2026-109618 and CVE-2026-109619, plus the Fragnesia kernel privilege-escalation flaw CVE-2026-46300. The campaign compromised 25 servers in the US, Japan, Taiwan and South Korea, three of them in US government-related environments. The report still describes the China link and the AI-assisted nature as suspected.
Written by AI from the coverage · updated 2 hours ago
Coverage
Follow the reports to see the story from different sides.
Oct 29
- Hacker News front pageChained PHP2Shell Exploit Roots 25 Servers, Including US Government Servers
Dream 研究人员发现一起疑似中国 AI 辅助攻击行动，利用 PHP2Shell 漏洞链（CVE-2026-109618/CVE-2026-109619）配合 Fragnesia 内核提权漏洞（CVE-2026-46300），攻陷美国、日本、台湾、韩国共 25 台服务器，含美国政府相关环境的 3 台。
Heat over time
Not enough continuous observations to draw a trend yet.