Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities and then a previously unreported local privilege escalation flaw in Gaia OS  to deploy a backdoor called TSGA. The activity, detailed by Check Point, began on October 30, 2026, and targeted Israeli organizations, with a broader follow-up
Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files
JA

jordan af

7h ago
0 0

Discussion

Leave the first comment

Be the first to leave a mark on this discussion.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Attackers in Binance Breach Targeted Known Weakness, Missing Co…

Blockchain complexities, such as attacker-deployed sweepers, hobble security controls designed to limit the damage of an exchange compromise.
DR

Dark Reading

1h ago
0
bleepingcomputer.com
New worm-like 'SCKit' malware targets MSPs in ScreenConnect att…

A new worm-like malware toolkit named SCKit was deployed in the recent ScreenConnect attacks targeting managed service providers (MSPs), designed to spread fro…
Rosa Martinez

Rosa Martinez

7h ago
0
bleepingcomputer.com
Hackers compromise 4,800 GitHub accounts to steal cloud credent…

A new campaign dubbed 'wfx-loot' has unfolded on GitHub where threat actors used 4, 837 compromised accounts to probe 61, 764 repositories, open pull requests,…
MB

Maria Bakker

18h ago
0
bleepingcomputer.com
Massive Microsoft 365 outage disrupts Outlook, Teams, Copilot w…

Microsoft is investigating a widespread outage affecting multiple Microsoft 365 services, including Outlook, Microsoft Teams, and Copilot, as users report conn…
alex but tired

alex but tired

18h ago
0
darkreading.com
Inside an AI Attack Against a US Retailer

When hand-typed commands failed to breach a US retailer, the attacker turned to AI-generated scripts, achieving lateral movement in minutes.
DR

Dark Reading

23h ago
0
schneier.com
Another Way Police Are Locating People from Their Smartphones

Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s s…
SS

Schneier on Security

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Ac…

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week. The com…
EK

Emma Klein

1d ago
0
thehackernews.com
Critical Pre-Auth MongoDB Flaw (CVE-2026-118383) Can Crash Lagg…

A critical flaw in MongoDB Server allows an unauthenticated attacker to send two requests that trigger a crash on the database server. The crash occurs only if…
Marcus Allen

Marcus Allen

1d ago
0
thehackernews.com
Critical Apache HTTP/2 Flaw Could Let Unauthenticated Attackers…

A critical flaw in Apache HTTP Server's HTTP/2 module, mod_http2, can let a remote attacker run code on the server. Tracked as CVE-2026-119618, it affects vers…
TN

The Hacker News

1d ago
0
thehackernews.com
Critical Zoom Workplace Flaw Could Allow Unauthenticated Remote…

Zoom has released software updates to address two security flaws impacting Zoom Workplace for Windows, including a critical bug that could result in privilege…
Thanakorn Boon

Thanakorn Boon

1d ago
0
thehackernews.com
Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confid…

Of the 37, 571 Grok-built apps that security company Claroc found online, 35, 578 were open to anyone without a sign-in, the researchers said yesterday. They…
Thanakorn Boon

Thanakorn Boon

2d ago
0
thehackernews.com
Git Patches Flaw That Lets Malicious Repositories Execute Code …

A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fix…
Carlos the great

Carlos the great

2d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest