Threat actors are exploiting unpatched Check Point Security Gateways using PHP2Shell vulnerabilities and a local privilege escalation flaw in Gaia OS. The campaign deploys the TSGA backdoor and wipes ESXi files. Organizations must apply security patches immediately to mitigate initial access and prevent full infrastructure compromise.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →