Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously reported local privilege escalation flaw in Gaia OS to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader follow-up wave

بدافزار و آلودگی آسیب‌پذیری و روز صفر هوش تهدید
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Industrial Cyber

SANS 2026 survey finds sharp rise in ICS/OT cyber incidents, slower detection, more severe operational impacts

The SANS Institute’s 2026 State of ICS/OT Security Survey found that 34% of respondents experienced a cyber incident... The post SANS 2026 survey finds sharp rise in ICS/OT cyber incidents, slower detection, more severe operational impacts appeared first on Industrial Cyber.

Help Net Security

How attackers turned a Teams meeting booking into a device code phishing trap

Attackers used a fake Microsoft Teams meeting scheduler to trick an employee at a construction company into approving a device code sign-in. They got a valid session token before Huntress’s security operations center identified the incident. Device code phishing abuses a real Microsoft sign-in flow. The attacker starts a sign-in, gets a short code back, and persuades the victim to type it into Microsoft’s genuine dev…