Adrian Johnson
TLDR:
- A zero-day vulnerability affecting Check Point VPNs has been discovered
- Exploitation attempts have been seen since April 7th, raising concerns among experts and government agencies
Thousands of internet-facing devices are vulnerable to a zero-day vulnerability in Check Point VPNs, allowing hackers to access sensitive information and potentially gain further network privileges. The bug, known as CVE-2024-24919, has prompted Check Point to release a fix, but exploitation attempts have been on the rise. The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed attacks using the bug and researchers have observed nearly 14,000 exposed devices globally. Most affected devices are Quantum Spark Gateways, indicating that smaller commercial organizations may be at risk. Check Point is working with affected customers to mitigate exploitation attempts, with the bug’s severity score being raised recently. Experts warn that products like these are prime targets for cybercriminals, particularly in industries such as banking and finance.
Full Article:
Thousands of internet-facing devices are vulnerable to a zero-day vulnerability in Check Point VPNs, allowing hackers to access sensitive information and potentially gain further network privileges. The bug, known as CVE-2024-24919, has prompted Check Point to release a fix, but exploitation attempts have been on the rise. The Cybersecurity and Infrastructure Security Agency (CISA) has confirmed attacks using the bug and researchers have observed nearly 14,000 exposed devices globally. Most affected devices are Quantum Spark Gateways, indicating that smaller commercial organizations may be at risk. Check Point is working with affected customers to mitigate exploitation attempts, with the bug’s severity score being raised recently. Experts warn that products like these are prime targets for cybercriminals, particularly in industries such as banking and finance.
