DanSec

Vendor

Check Point

In 18 briefs, most recently 24 September 2026. RSS for this tag

Learn more: Vulnerabilities (NVD) ↗

Known exploited (CISA KEV)

5 Check Point vulnerabilities are on CISA's list of vulnerabilities exploited in the wild, 2 of them used in ransomware campaigns. Most recent:

Coverage in DanSec Daily

  1. Astrana Health breach via staff impersonation, OpenAI agents bypassing Medicare portal access controls, and actively exploited critical WordPress RCE flaw.
  2. The ShinyHunters FBI breach claim, the F5 BIG-IP APM zero-day CVE-2026-94127, and the Miljödata GDPR fine, plus other vulnerabilities and threat actor activity.
  3. Gyazo breach hits 23M user records, Brevo supply chain attack via stolen Cloudflare key plants ClickFix scripts on about 100,000 sites, plus Unbound and Check …
  4. Microsoft cloud account phishing and email-service fraud, CISA KEV adds for JFrog, ConnectWise and MikroTik, and Check Point VPN exploitation warnings.
  5. Attackers chain JFrog Artifactory flaws for backdoors, GitLab and Check Point urge patches, and Cisco FMC flaws see ransomware exploitation.
  6. The Minnesota water system OT attack, OpenAI's Hugging Face breach expansion, and Cisco FMC zero-day CVE-2026-20316 exploitation.
  7. Origin Energy customer data leak, Upbound's $13M fraud losses, and Laundry Bear's Zimbra zero-day stealing email and 2FA codes.
  8. Everest ransomware hits Stadler Rail, Upbound's $13M Acima lease fraud, and a Check Point SmartConsole zero-day exploited in the wild.
  9. The Check Point VPN zero-day exploited by Qilin, the NSO Group WhatsApp spear-phishing campaign, and a SoFi subsidiary breach affecting customer data.
  10. Basic-Fit and Booking.com breaches, Adobe zero-day CVE-2026-34621, CPUID trojanized installers, and APT41 cloud credential theft.
  11. Wynn Resorts breach affecting 21,000 employees, Drift Protocol's $280M in-person crypto heist, and Flowise and FortiClient EMS exploits.
  12. Ericsson US data breach via service provider, UNC4899 crypto firm theft, and Salesforce Experience Cloud data exposure by ShinyHunters.
  13. Chrome zero-day CVE-2026-2441, CISA's BeyondTrust order, and the Dior/Louis Vuitton/Tiffany $25M Korean fine tied to Scattered LAPSUS$ Hunters Salesforce …
  14. Odido breach hits 6 million customers, BeyondTrust RS/PRA CVE-2026-1731 exploited within 24 hours of PoC, and Chrome extensions steal Meta Business Suite …
  15. UNC3886 breaches Singapore's top telcos, Warlock exploits SmarterMail to hit SmarterTools, and a Firebase flaw exposes 300M Chat & Ask AI messages.
  16. Covers SonicWall firewall config breach by state-sponsored actors, Balancer V2 $128M crypto theft, and actively exploited CentOS Web Panel RCE flaw from CISA.
  17. Salesforce customer data theft by ShinyHunters, Clop's Oracle EBS zero-day, and Redis 'RediShell' RCE flaw.
  18. JLR extends shutdown after cyberattack; Microsoft and Cloudflare dismantle RaccoonO365 phishing network; DHS misconfigured data hub exposes sensitive …