Chinese Actor Compromises US Government Network Via Chained PHP2Shell Exploit

Infosecurity Magazine coverage from October 21–30, 2026 reports widespread exploitation of critical vulnerabilities, ransomware and data breaches, credential and token abuse, phishing-as-a-service, malware campaigns, and state-linked activity. Notable developments include chained PHP2Shell exploitation against Palo Alto firewall infrastructure, critical PHP and .NET flaws, attacks on Microsoft 365 and GitHub tokens, supply-chain compromises, healthcare and critical-infrastructure disruption, and emerging AI-enabled offensive techniques.