AI-Assisted PHP2Shell and Fragnesia Chain Roots 25 Servers, Penetrates U.S. Government-Affiliated Network
Cybersecurity researchers have detailed an AI-assisted campaign that combined PHP2Shell exploitation with a Linux kernel privilege escalation to gain root on 25 servers and pivot into an internal network tied to a U.S. government-affiliated environment. The activity was observed in late October 2026 and, according to the Israeli firm Dream, demonstrates a tailored, multi-stage intrusion that fused custom exploit development with automated reconnaissance at scale. Attack overview Dream attributes the…