Threat ActorPublished 8 Jun 2026

Check Point links VPN zero-day attacks to Qilin ransomware gang

Source Bleeping Computer

Mentions 2 CVEs

Mentioned vulnerabilities

Description

Israeli cybersecurity company Check Point has released security updates to patch a critical flaw affecting Remote Access VPN and Mobile Access deployments, which was exploited in zero-day attacks. [...]

Impact

Successful exploitation of CVE-2026-50751 allows unauthenticated remote attackers to bypass VPN authentication controls, potentially granting unauthorized remote access to internal networks. This has led to targeted attacks against a limited number of organizations globally, including confirmed post-compromise activity by the Qilin ransomware affiliate. CVE-2026-50752, if exploited, could enable man-in-the-middle attacks on site-to-site VPN connections, potentially compromising data confidentiality and integrity, though no exploitation has been observed to date.

Defensive guidance

Check Point has released official security updates that patch both CVE-2026-50751 and CVE-2026-50752. Customers are strongly advised to apply these updates immediately. For those unable to patch promptly, Check Point recommends removing support for legacy remote access clients, configuring Remote Access VPN Authentication to use IKEv2 only, making machine certificate authentication mandatory, and enabling IPS with updated signatures. These measures mitigate the vulnerabilities until patches can be applied.

References

bleepingcomputer.com/news/security/check-point-links-vpn-zero-day-attacks-to-qilin-ransomware-gang/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 8 Jun 2026, 13:18 UTC

References

Community reviews

Related threats