Check Point Security Gateways Compromised via PHP2Shell to Deploy VMware ESXi Wiper
Attackers exploited two critical PHP flaws and a Check Point zero-day to compromise Security Gateway instances and deploy a data wiper on VMware ESXi hosts, with the first wave targeting Israeli organizations beginning October 30.