US cybersecurity agency CISA to Homeland Security, Department of State, Treasury and several other government agencies: You have less than 24 hours to fix ...

▤ Summary

CISA has ordered several US federal agencies to patch a critical Check Point VPN vulnerability within 24 hours. The flaw affects Remote Access VPN and Mobile Access products and is already being exploited in the wild. Check Point says attackers can bypass authentication on older IKEv1-based deployments and that exploitation has already touched a limited number of organizations globally. The urgency reflects the high risk of ransomware-linked compromise and the need for immediate remediation or mitigation.

▦ Linked Companies