The VPN You Trust to Keep You Safe Was the Way In
If your employer uses Check Point VPN gear to let people work remotely, the very tool meant to lock down your network may have been quietly unlocked since early May. Attackers found a critical flaw before the company did, which means defenders have been playing catch-up from day one.
Bottom Line
A critical zero-day in widely used Check Point VPN software has been exploited since early May, with one incident linked to a Qilin ransomware affiliate. The deeper lesson isn't the single bug -- it's that the security devices guarding the network edge have become the favorite target for attackers, because compromising the gatekeeper bypasses everything behind it. Treat attribution cautiously: the evidence so far points to limited, opportunistic exploitation, not a confirmed mass campaign.