Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously reported local privilege escalation flaw in Gaia OS to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader follow-up wave

بدافزار و آلودگی آسیب‌پذیری و روز صفر هوش تهدید
خواندن متن کامل در The Hacker News درخواست حذف

این صفحه فقط عنوان و خلاصه کوتاه خبر را نمایش می‌دهد. متن کامل در منبع اصلی منتشر شده است.

خبرهای مرتبط

آرشیو کامل ←
Cyble

CERT-In’s AI Security Auditing Guidelines: Will Your AI System Need an Independent Audit?

Picture a customer-support chatbot at a mid-sized Indian e-commerce company. It answers questions about orders and returns. It runs on a third-party large language model. Nobody thinks of it as high-risk. Now the product team gives it one new permission: it can issue refunds up to ₹5,000 without human sign-off. It's a small feature that saves agents hours a week. Under the Artificial Intelligence (AI) Security Auditi…

Industrial Cyber

SANS 2026 survey finds sharp rise in ICS/OT cyber incidents, slower detection, more severe operational impacts

The SANS Institute’s 2026 State of ICS/OT Security Survey found that 34% of respondents experienced a cyber incident... The post SANS 2026 survey finds sharp rise in ICS/OT cyber incidents, slower detection, more severe operational impacts appeared first on Industrial Cyber.