Hackers breached 25 servers, including U.S. government-linked systems — and AI tools may have helped
Hackers exploited critical security flaws to breach 25 servers, including U.S. government-linked systems. Researchers say AI tools may have played a role.
Hackers have breached 25 servers across four countries, including those linked to a U.S. government-affiliated organization. Security researchers discovered AI tools may have aided the attack, using AI tools like Anthropic's Claude Code and an AI-powered security platform called aiscan. The attack exploited critical PHP vulnerabilities, enabling attackers to gain full control of vulnerable systems.
The breach started with two critical security flaws, known as PHP2Shell, which allowed hackers to run malicious commands on vulnerable servers. They combined these flaws with another Linux vulnerability called Fragnesia, taking full control of certain firewall systems. The attackers targeted servers in the U.S., Japan, Taiwan, and South Korea, moving beyond the initial breach to gain access to internal network information, employee account listings, and authentication credentials.
AI tools were found in the attacker's environment, raising concerns about how hackers could use AI in cyberattacks.
Written by urgent.news from Tom's Guide's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
