The PHP LTS service provides alternate PHP releases for various Debian releases.

Nuove falle sfruttate ITW, campagne malevole di diversa matrice, attacchi in Italia

Die Linux-Kernel-Lücke Fragnesia wird seit Oktober angegriffen, zusammen mit PHP2Shell. Der Fix ist seit Mai da, wirkt aber erst nach einem Neustart. So prüfen Sie es.

Attackers exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the Fragnesia bug to root firewalls.

Dream researchers say an apparently AI-assisted attack, attributed only as a suspected China-nexus actor, chained a custom PHP2Shell exploit with the Fragnesia Linux kernel flaw (CVE-2026-46300) to root 25 firewall servers across the US, Japan, Taiwan and South Korea, including three in a US…

Attackers exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the Fragnesia bug to root firewalls.

Introduction: Recent emergency warnings from the Cybersecurity and Infrastructure Security Agency (CISA) highlight active, in-the-wild exploitation of two critical server-level vulnerabilities by advanced threat groups and ransomware syndicates. The flaws—identified as CVE-2026-41709 in VMware ESX and CVE-2026-46300 ("Fragnesia") in the Linux kernel—enable stealthy audit log manipulation and immediate local privilege escalation to root. Together, these vulnerabilities provide sophisticated attackers with the vectors needed to silently compromise and seize complete control of core enterprise server environments.

Palo Alto Networks firewalls running outdated OS seem to be the target, as Chinese hackers chain PHP2Shell to Fragnesia for the campaign.

Les failles PHP2Shell et Fragnesia (noyau Linux) sont exploitées ensemble pour obtenir un accès root sur 24 firewalls. L'agence CISA a publié une alerte.

Dream: PHP2Shell + Fragnesia rooted 24 firewalls plus 1 management server (25 devices); China-nexus assessed; three CVEs in CISA KEV.

Attackers exploited a VMware ESX zero-day to hide their tracks and chained PHP2Shell flaws with the Fragnesia bug to root firewalls.

Dream Research reported that attackers exploited PHP2Shell and Fragnesia flaws to breach 25 servers (24 firewalls and an internal management server) in the United States, Japan, Taiwan and South Korea, after scanning roughly 19,000 internet-facing firewalls. At a U.S. government-affiliated organisation they compromised three servers, stole an account password and obtained user and group lists. Researchers found Anthropic's Claude Code and an AI-powered platform called aiscan configured with DeepSeek and Kimi in the attackers' environment, plus about 40 scripts that may have been AI-written. However, Dream Research cautioned there is no direct evidence AI was used to create the exploits or carry out the attacks.