Check Point says VPN attacks caused by Qilin ransomware group — who had a month's head start on them

Laptop with warning symbols over the keyboard.

• Check Point patches critical VPN auth‑bypass flaw (CVE‑2026‑50751) used in ransomware attacks
• Zero‑day exploited since early May, with Qilin deploying ransomware in at least one case
• Customers urged to apply fixes and mitigations immediately

Check Point has declared it fixed a vulnerability in its VPN products being used in ransomware attacks against dozens of organizations worldwide.