PHP2Shell attack on Check Point gear reached an ESXi server with a wiper program

TechnologyInternationalhttps://fomoera.com/Nov 14, 2026, 5:40 AMAI summary

Check Point investigated an intrusion in which attackers used the PHP2Shell flaws (CVE-2026-109618 and CVE-2026-109619) to enter through the Mobile Access portal of unpatched Security Gateways, escalated privileges with CVE-2026-123039 in Gaia OS DynamicCLI, installed backdoors such as TSGA and reached a VMware ESXi server over SSH, where they ran destroy_v6, a file-wiping program. The activity began on October 30, 2026, and a second scanning wave was detected on November 2.

In 35 seconds

The entry point was the Mobile Access portal of unpatched Check Point Security Gateways affected by PHP2Shell.
Attackers chained CVE-2026-123039 in Gaia OS DynamicCLI to reach the root account.
They installed backdoors such as TSGA, with the TSProxy component to hide connections, and reached an ESXi server over SSH.

Read the full story at https://fomoera.com/

IASummary generated by artificial intelligence from a story by https://fomoera.com/. It may contain errors: the original source prevails.

ciberseguridad
Check Point
vulnerabilidades
VMware ESXi
PHP2Shell

Comments

Be respectful. Comments reported by several people are hidden until a moderator reviews them.

You do not need an account to read, only to comment. Sign in with a code sent to your email or with your Google account. We only show the name you choose, never your email.

Keep reading

SimRosario: a young man recreated Rosario with AI in the style of SimCity
Agustín Abraham, a young man from Rosario, created SimRosario, a platform that turns real aerial photographs of the city into an illustrated map with the aesthetic of the SimCity video game. He started from oblique Google Maps images taken between 2012 and 2013 and trained AI models, with manual review, to illustrate 2,308 sectors. The result is an image of about 48,000 by 52,000 pixels, split into tiles so it can be browsed from a computer or phone.
TechnologyInternationalRosario36:55 AMAI
Nearly 60% of large companies plan to increase use of open-weight AI models to cut costs, Capgemini says
A Capgemini study shows that 59% of senior executives at large companies plan to increase their use of open-weight AI models over the next 12 months. 59% reported that AI spending over the past year exceeded forecasts, with an average overrun of 24%. Cost concerns rose to 53%, up from 45% a year earlier. Capgemini says processing tokens with open models was on average 87% cheaper than with closed models.
TechnologyInternationalRevista ADVFN6:54 AMAI
Microsoft restores services after global outage affecting more than 70 countries
Microsoft confirmed on Saturday the recovery of its main digital services after a global disruption that affected more than 70 countries and caused problems in Outlook, Teams and Copilot. The company said "all products are operational" and that it had processed emails queued during the incident. The failure reportedly originated in a network capacity update and Microsoft ruled out a cyberattack. More than 1,000 engineers took part in the recovery. The first reports came on Thursday in the United States and the shares showed little variation.
TechnologyInternationalLaSexta6:38 AMAI
Microsoft restores its services after a global outage that hit Outlook, Teams and Copilot
Microsoft restored its main digital services after a worldwide disruption that affected users in more than 70 countries and caused problems in Outlook, Teams and Copilot. The company confirmed that all its applications are operational again and that it processed the emails queued during the incident. More than 1,000 engineers and employees took part in the recovery. Early investigations point to a network capacity update, with problems concentrated in Exchange; Microsoft ruled out a cyberattack or the use of artificial intelligence as causes.
TechnologyInternationalAntena 3 Noticias5:55 AMAI

PHP2Shell attack on Check Point gear reached an ESXi server with a wiper program

In 35 seconds

Comments

Keep reading

SimRosario: a young man recreated Rosario with AI in the style of SimCity

Nearly 60% of large companies plan to increase use of open-weight AI models to cut costs, Capgemini says

Microsoft restores services after global outage affecting more than 70 countries

Microsoft restores its services after a global outage that hit Outlook, Teams and Copilot