Tag
Dream researchers uncovered an AI-assisted Chinese attack campaign that chained a custom PHP2Shell RCE exploit with a kernel privilege-escalation flaw to root 25 servers—including US government-affiliated systems—then pivoted into Active Directory for credential extraction and persistent access.
This CVE describes a prototype pollution vulnerability in n8n that can be exploited for remote code execution through a Git node gadget chain.