GoKawiilDream Security finds Chinese exploit chain rooted 25 firewalls, 3 US government servers
Dream researchers say they uncovered artifacts from an AI-assisted campaign that combined a custom PHP2Shell exploit chain with a kernel privilege-escalation flaw to compromise firewall devices. The campaign reportedly rooted 25 servers across the US, Japan, Taiwan and South Korea, with three machines in a US government-affiliated network singled out for further attacks on Active Directory, including credential theft and directory enumeration.