#SecurityGateways

Attacks Surge on Check Point’s Recent VPN Zero-Day Flaw

by

June 6, 2024 at 04:36PM A recent spike in exploit activity is targeting a critical flaw (CVE-2024-24919) in Check Point’s VPN technology. Attack attempts began in April, with a major increase after a public proof-of-concept was released. Over 13,000 exposed systems are at risk, prompting urgent patching. The US government has issued a deadline for … Read more

Check Point VPN Targeted for Initial Access in Enterprise Attacks

by

May 28, 2024 at 05:33AM Check Point advises customers to review VPN configurations to prevent abuse by threat actors, citing attempts to gain access through old VPN local accounts with password-only authentication. The company recommends using additional authentication measures, deploying products on security gateways, and disabling unnecessary local accounts. It also provides a script and … Read more