Tag: check point
46 articles
Vulnerabilities in LiteLLM Gateway Expose AI Systems to Takeover
With two high-risk vulnerabilities discovered in LiteLLM, a popular open-source gateway tool, hackers can easily hijack AI systems, allowing them to wreak havoc and cause serious damage. Anyone with an account on a vulnerable deployment can take over the gateway and exploit it for malicious purposes.
Leaked Files Expose Luna Moth Ransomware Group's Tactics
Newly leaked files from an anonymous source reveal the inner workings of the notorious Luna Moth ransomware group, exposing a sophisticated data-extortion business that thrives on manipulating trust. According to Check Point's analysis, this group's tactics are far more complex and sinister than your average ransomware crew.
Hackers Exploit Check Point VPN Flaws
Hackers have been actively exploiting two major flaws in Check Point VPNs, including one that allowed for remote code execution and another that enabled script execution, putting customers at risk. The attacks, which began as early as July 23, have now been confirmed by the cybersecurity company itself.
Check Point Discloses Zero-Day Flaw in Management Server Exploited in Targeted Attacks
A high-severity zero-day flaw in Check Point's Security Management Server was exploited in targeted attacks on July 23, allowing hackers to upload and execute scripts without logging in. This critical vulnerability, scored 9.8 out of 10 on the CVSS scale, highlights the urgent need for patching and protection.
Check Point Discloses Zero-Day Exploited in Management Server Attacks
A critical zero-day vulnerability in Check Point's Security Management Server has been exploited in the wild, allowing attackers to upload and run malicious scripts with ease. This flaw, tracked as CVE-2026-93616, has already been used to target a handful of customers, prompting Check Point to release emergency hotfixes.
Check Point Flaw Enables Hackers to Execute Code with Root Privileges
A critical flaw in Check Point's Security Management Server has been discovered, leaving all deployments vulnerable to hackers who can exploit it to execute code with root privileges, putting the entire firewall estate at risk. This severe vulnerability, tracked as CVE-2026-91843, requires immediate attention with Check Point releasing security updates to fix the issue.
Check Point Flaw Lets Unauthenticated Users Execute Code as Root
A critical flaw in Check Point's Security Management and Log Servers, rated 9.8 out of 10, allows unauthenticated users to execute code as root via a simple login request with a very long username. Fortunately, there's no evidence that this vulnerability has been exploited in the wild - yet.
Check Point Discloses High-Severity VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point has uncovered two critical vulnerabilities in VPN certificates that could let hackers run code remotely without authentication, posing a huge threat to security. The flaws, with a near-perfect CVSS score of 9.8, affect various Check Point products, including Security Gateways, Security Management Server, and Spark Firewall.
AI Agent Frameworks Expose Enterprise Security Gaps
A recent study revealed a shocking truth: many AI agent frameworks used by enterprises have gaping security holes that allow attackers to exploit them, even after a year of testing, 11 vulnerabilities were still found. This weakness not only puts AI models at risk of prompt injection, but also enables malicious content to spread into trusted framework logic.
Firewalls Evolve to Secure AI-Driven Networks
As networks evolve into intelligent control planes for AI security, innovative solutions like the AI Network Firewall are emerging to safeguard AI-driven environments. Check Point's cutting-edge technology converts existing firewalls into intent-aware enforcement layers that detect, inspect, and control AI activity across entire networks.
Check Point Flaw Exploited as Researchers Release Public PoC
A critical flaw in Check Point's SmartConsole, known as CVE-2026-16232, allows hackers to bypass authentication and gain full administrative privileges with a staggering CVSS score of 9.3. This vulnerability lets unauthenticated remote attackers obtain a login token and take control, potentially modifying security policies and configurations.
ChatGPT Enters Top 10 Most Impersonated Brands in Phishing Attacks
ChatGPT has become a hot target for phishing attacks, entering the top 10 most impersonated brands in just the second quarter of 2026, with scammers sending fake emails that mimic OpenAI's billing notices to steal sensitive info. This new trend signals where attackers are focusing their efforts next.
Check Point Discloses Zero-Day Flaw in SmartConsole Exploited in Attacks
A critical zero-day flaw in Check Point's SmartConsole has been exploited in attacks, allowing hackers to modify security policies and configurations with ease. A patch is now available to fix this authentication bypass vulnerability, tracked as CVE-2026-16232.
Check Point Disrupts Exploited SmartConsole Flaw Granting Admin Access
A critical flaw in Check Point's SmartConsole has been exploited, allowing hackers to gain admin access with a CVSS score of 9.3, and Check Point has released updates to address the vulnerability. This authentication-bypass flaw lets attackers modify security policies and configurations with full administrative rights.
AI Fuels End-to-End Cyberattacks With Expanded Role Across Intrusion Stages
Criminal groups are now using AI as the main driver behind massive cyberattacks, breaching government agencies and carrying out thousands of commands with minimal human oversight. This marks a significant shift from AI as a supporting tool to a primary operator in end-to-end cyberattacks.
Qilin Consolidates Lead in Ransomware Market
Qilin is tightening its grip on the ransomware market, emerging as a leading player after a recent wave of consolidation, with an estimated 16% share of the cybercriminal market. This surge in power is a result of its technically mature infrastructure and strategic positioning in the ransomware-as-a-service (RaaS) market.
Perimeter Devices Exposed as Vulnerability in Authentication Bypass Attacks
A recent emergency directive from CISA revealed a shocking vulnerability in Check Point Remote Access VPN, allowing attackers to bypass authentication and gain trusted user access since early May. This critical flaw, with a CVSS score of 9.3, enables remote attackers to establish a fully authenticated VPN session without a valid password, essentially turning a security gateway into an entry point for intruders.
LangGraph Flaw Chain Enables Remote Code Execution in Self-Hosted AI Agents
A critical flaw in LangGraph's system could let attackers take control of your self-hosted AI agents with just a single exploit, allowing for remote code execution. Thankfully, the vulnerability has been patched after being discovered by cybersecurity researchers Check Point and Yarden Porat.
Check Point Discloses Zero-Day Auth Bypass Bug Under Active Exploitation
A critical authentication flaw, CVE-2026-50751, has been discovered in Check Point's Remote Access VPN and Mobile Access solutions, allowing attackers to bypass user authentication and establish a remote access VPN connection without a valid password. This severe vulnerability, scoring 9.3 on the CVSS scale, affects deployments using the outdated IKEv1 key exchange protocol.
CISA Mandates Patching of Exploited Check Point VPN Bug
A critical vulnerability in Check Point VPNs, known as CVE-2026-50751, has been exploited in dozens of organizations worldwide, with one incident linked to Qilin ransomware. This bug allows hackers to bypass authentication and establish remote access, putting targeted organizations at risk.
Check Point VPN Flaw Exposed, Bypasses Passwords in IKEv1 Setups
A critical flaw in Check Point VPN setups has been exposed, allowing attackers to bypass passwords and establish a VPN session without proper authentication in certain configurations. This vulnerability, tracked as CVE-2026-50751, impacts Remote Access VPN and Mobile Access deployments using the outdated IKEv1 protocol.
Ransomware Gangs Consolidate Power with Surge in Attacks
Alarming new data from cybersecurity firm Check Point reveals that just three ransomware gangs - Qilin, Akira, and Dragonforce - accounted for a staggering 40% of all ransomware incidents in March, with a whopping 269 attacks attributed to these groups alone. This concentration of power raises serious concerns about the growing threat of ransomware attacks.
Critical ChatGPT Security Flaw Enabled Alarming Data Theft
A recent security flaw in ChatGPT has raised alarming concerns about data theft, with hackers able to exploit a vulnerability using a single, carefully crafted prompt. This critical weakness highlights the urgent need for robust safeguards to protect sensitive information in AI-powered tools.
Critical ChatGPT Flaw Exposed Alarming Data Leak Vulnerability
A recent flaw in ChatGPT has exposed a startling vulnerability, allowing data to be secretly leaked through a clever technique - leaving users wondering if their conversations with AI are truly secure. This alarming discovery serves as a wake-up call for the industry, highlighting the urgent need for robust security measures in AI systems.