China-linked hackers exploit PHP2Shell firewall vulnerability

Chinese-linked threat actors chained PHP2Shell and Fragnesia exploits to compromise two servers belonging to a US government-affiliated organization. The attackers achieved root-level access to firewalls through the PHP2Shell vulnerability. Organizations should prioritize patching PHP and firewall systems, and deploy monitoring to detect exploitation attempts of known code execution flaws.