dreamgroup.com/blog/chained-php2shell-exploit-roots-25-servers Chained PHP2Shell exploit roots 25 servers, including US Government servers
Dream researchers found artifacts of a likely AI-assisted campaign that chained a custom PHP2Shell exploit with a Linux kernel privilege-escalation flaw to root 25 PAN-OS firewalls across four countries, then pivoted into a US government-affiliated Active Directory environment.