Zum Hauptinhalt springen
••••••••••••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and Deploy Wiper Malware

Attackers are exploiting a remote code execution vulnerability in PHP2Shell, combined with a newly disclosed local privilege escalation flaw, to take over…

Beitrag
0
Seite
0
↗ Quelle (GBHackers Security | #1 Globally Trusted Cyber Security News Platform)
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!

Attackers are exploiting a remote code execution vulnerability in PHP2Shell, combined with a newly disclosed local privilege escalation flaw, to take over unpatched Check Point Security Gateways. This lets them gain root access and, in some cases, wipe VMware ESXi hosts. Check Point has reported active exploitation of the second flaw, identified... Weiterlesen: Hackers Exploit Check Point PHP2Shell Flaws to Gain Root Access and D…

🔍 CTI & Forensik

Cyber Threat Intelligence & Forensik

ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
3 belegte Techniken
T1068TA0004 · Privilege Escalation
Exploitation for Privilege Escalation
Mitigation: M1026 Privileged Account Management & Patching
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 90%
Controleer patch stand, beperken bevoorrechte accounts, harden sudo / polkit regels.
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 86%
Scan openbaar toegankelijke diensten met OpenVAS, scherp WAF regels, verkort patch windows.
T1485TA0040 · Impact
Data Destruction
Mitigation: M1053 Data Backup
Quelle: Kontext-Klassifikation des Artikeltextes · Konfidenz 82%
3-2-1 back-ups met offline kopieerstation, herstellen tests regelmatig bewijzen.
Initial Access
Privilege Escalation
Impact
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
5 Knoten · 4 Relationen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Jetzt Bewertung abgeben
🟢 Niedrig (1-3.9) 🟡 Mittel (4.0-6.9) 🔴 Hoch (7.0-8.9) Kritisch (9.0-10.0)

Verwant Story Cluster & Sources (vector AI)

Trek om te vernieuwen
Nächster Beitrag