{"id":268460,"date":"2026-06-09T12:08:00","date_gmt":"2026-06-09T16:08:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/06\/09\/check-point-warns-of-zero-day-flaw-targeted-by-ransomware-affiliate\/"},"modified":"2026-06-09T12:15:10","modified_gmt":"2026-06-09T16:15:10","slug":"check-point-warns-of-zero-day-flaw-targeted-by-ransomware-affiliate","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/06\/09\/check-point-warns-of-zero-day-flaw-targeted-by-ransomware-affiliate\/","title":{"rendered":"Check Point warns of zero-day flaw targeted by ransomware affiliate"},"content":{"rendered":"

Check Point warns of zero-day flaw targeted by ransomware affiliate<\/a><\/p>\n

https:\/\/www.cybersecuritydive.com\/news\/check-point-zero-day-ransomware\/822372\/<\/a><\/p>\n

Publish Date: 2026-06-09 12:08:00<\/a><\/p>\n

Source Domain: www.cybersecuritydive.com<\/a><\/p>\n

A critical authentication bypass flaw in Check Point Remote Access VPN and Mobile Access deployments has been under exploitation for more than a month, <\/span><\/span><\/span><\/span><\/span><\/span>according to a\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span>blog post published Monday by Check Point Research.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

The vulnerability, tracked as <\/span><\/span><\/span><\/span><\/span><\/span>CVE-2026-50751<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span>, is related to a logic flaw in certificate validation, according to the report. If successfully exploited, the flaw allows an attacker to establish a VPN session without the need for a password.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Discovering suspicious activity, Check Point began investigating on Thursday.\u00a0 It found threat activity dating back to May 4. Researchers urge security teams to prioritize forensic log audits and configuration reviews.<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

The VPN vulnerability is found in deployments that are configured for the <\/span><\/span><\/span><\/span><\/span><\/span>deprecated Internet Key Exchange v1<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span> protocol.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Forensic evidence <\/span><\/span><\/span><\/span><\/span><\/span><\/h3>\n

So far, the investigation has identified a few dozen targeted organizations across the globe. In one specific case, post-compromise activity was linked to an affiliate of Qilin ransomware. The same infrastructure has been observed targeting VPN vulnerabilities in Palo Alto Networks, F5 and Fortinet, according to researchers.<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

The <\/span><\/span><\/span><\/span><\/span><\/span>Cybersecurity and Infrastructure Security Agency<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span> on Monday added CVE-2026-50751 to its Known Exploited Vulnerabilities catalog.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

During the investigation, Check Point found a second vulnerability, tracked as <\/span><\/span><\/span><\/span><\/span><\/span>CVE-2026-50752<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span>. The flaw affects certificate validation in deprecated IKEv1 key exchange. This could enable man-in-the-middle attacks that might impact site-to-site VPN communication if certain conditions are met. Check Point has not seen any exploitation of the second vulnerability.<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

CheckPoint is urging upgrades to a hotfix. In addition, the company <\/span><\/span><\/span><\/span><\/span><\/span>released security guidance<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span> to address the vulnerabilities, along with mitigation steps.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Researchers from Rapid7 confirmed <\/span><\/span><\/span><\/span><\/span><\/span>they have observed<\/span><\/span><\/span><\/span><\/span><\/span><\/span><\/span> at least one case involving CVE-2026-50751.\u00a0<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Researchers noted that of the…<\/span><\/span><\/span><\/span><\/span><\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Check Point warns of zero-day flaw targeted by ransomware affiliate https:\/\/www.cybersecuritydive.com\/news\/check-point-zero-day-ransomware\/822372\/ Publish Date: 2026-06-09 12:08:00…<\/p>\n","protected":false},"author":1,"featured_media":268461,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/imgproxy.divecdn.com\/WGUPY79LEktvH4NBkYMET1Bmh25ayeqkGTV8rAjjwCw\/g:ce\/rs:fit:770:435\/Z3M6Ly9kaXZlc2l0ZS1zdG9yYWdlL2RpdmVpbWFnZS9HZXR0eUltYWdlcy04MTc0ODYwMjguanBn.webp","fifu_image_alt":"","footnotes":""},"categories":[15],"tags":[90,89,57,27],"class_list":["post-268460","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-cve","tag-flaw","tag-security","tag-vulnerability"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/268460"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=268460"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/268460\/revisions"}],"predecessor-version":[{"id":268462,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/268460\/revisions\/268462"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/268461"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=268460"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=268460"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=268460"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}