Check Point links VPN zero-day attacks to Qilin ransomware gang

Check Point says VPN attacks caused by Qilin ransomware group — who had a month's head start on them

A month-old VPN bug was finally fixed, but not until after Qilin had a field day with it.

Check Point warns of zero-day flaw targeted by ransomware affiliate

A vulnerability in the company’s VPN deployments has faced exploitation since early May.

Check Point warns of ransomware-linked attacks exploiting outdated VPN protocol

Check Point has issued emergency hotfixes for a pair of vulnerabilities affecting VPN deployments that still use the deprecated Internet Key Exchange version 1 (IKEv1) protocol, warning that one of the flaws is already being exploited in the wild. The more serious issue allows attackers to establish VPN sessions without a valid password, potentially giving them a foothold inside corporate networks. According to the company, attackers have been e…

A Qilin ransomware affiliate exploited a Check Point VPN zero-day for a month before a patch existed

Check Point patched CVE-2026-50751, a critical VPN auth bypass exploited since May 7. A Qilin ransomware affiliate used it to hit dozens of organisations.

Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix

Check Point released an emergency fix on Monday for a critical authentication bypass vulnerability affecting its Remote Access VPN and Mobile Access deployments - but attackers, including ransomware criminals, got a month-long head start. Attacks against the bug, tracked as CVE-2026-50751, began on May 7, according to Check Point VP of research Lotem Finkelstein, and picked up in early June. The security software vendor spotted suspicious activi…

Check Point links VPN zero-day attacks to Qilin ransomware gang

Israeli cybersecurity company Check Point has released security updates to patch a critical flaw affecting Remote Access VPN and Mobile Access deployments, which was exploited in zero-day attacks.