China-linked hackers exploit PHP2Shell to root firewalls

A China-linked threat actor chained two PHP2Shell vulnerabilities with the Fragnesia Linux kernel privilege-escalation flaw to gain root access to firewalls and deploy PHP root webshells for persistent access.