The Wave

1. 2d agoSecurityWeekPHP2Shell Exploited in Destructive Check Point Gateway AttacksThreat actors exploited PHP2Shell flaws to breach Check Point Gateway appliances and deploy a wiper in two waves starting late October and early November 2026.

   3 articles · BleepingComputer

   1. 2d agoSecurityWeekEarliestPHP2Shell Exploited in Destructive Check Point Gateway Attacks
   2. 2d agoBleepingComputerPickupCheck Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper
   3. YesterdayCSO OnlinePickupThe firewall becomes the foothold: Attackers turn Check Point gateways against customers

   Cyber12 linked
2. 2d agoBleepingComputerCheck Point warns of zero-day flaw exploited for root accessCheck Point issued emergency hotfixes for CVE-2026-123039, a zero-day local privilege escalation flaw in its Gaia OS DynamicCLI daemon that attackers exploited to reach root on devices, with the chain also leading to a VMware ESXi wiper deployment.1 outletCyber4 linked
3. PN3d agoPR NewswireCheck Point Software Achieves FedRAMP Certification for Check Point WAF, Empowering U.S. Federal Agencies with Prevention-First Application and API SecurityCheck Point Software announced that its Web Application and API Security (WAF) platform has achieved FedRAMP certification, extending the FedRAMP-certified platform it first brought to government in 2025.1 outletCyber4 linked

Nothing in Hill activity is connected to this.

Nothing from this branch in view.

Times ET

Nothing in contracts is connected to this.