Netherlands National Cyber Security Centre

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 17, 2026
Last mentionedSep 22, 2026

Timeline

2 articles · newest first

Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

Check Point says attackers exploited unauthenticated Management Server zero-day CVE-2026-93616 in targeted July attacks.

The Hacker NewsSep 22, 18:29 UTC · Sep 22, 2026Exploit / PoCExploitedCVE-2026-93616 CVE-2026-85102 CVE-2026-91843+13

Attackers exploit patched macOS Screen Sharing flaw to deploy cryptominer

Attackers actively exploit patched macOS Screen Sharing bug CVE-2026-65400 on systems with port 5900 exposed, gaining root to install a Monero cryptominer.

Help Net SecurityAug 17, 00:00 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2026-654001 · 1 read

Related CVEs

by mentions

CVE-2026-8510254%9.8
Unauthenticated RCE in Check Point Quantum Security Gateway via certificate flaw
published Sep 9, 2026Check Point Quantum Security Gateway (VPN negotiation functionality)KEVPoC
CVE-2026-6540018%9.8
Authentication Bypass in Apple macOS Screen Sharing
published Aug 6, 2026Apple macOS (Screen Sharing service)KEVPoC
CVE-2026-9361692%9.8
Unauthenticated RCE in Check Point Management Server via Directory Traversal and File Upload
published Sep 22, 2026Check Point Management ServerKEVPoC
CVE-2026-91843<1%9.8
Unauthenticated stack overflow gives root RCE in Check Point login process
published Sep 16, 2026Check PointPoC
CVE-2026-851039.8
Unauthenticated RCE in Check Point Quantum VPN Certificate ASN.1 Decoding
published Sep 9, 2026Check Point Quantum Security Management

Appears with

macOSproduct · 1
Applevendor · 1
Screen Sharingproduct · 1
Sparkproduct · 1
Monero cryptominermalware · 1
Security Gatewayproduct · 1
CERT Santéorganization · 1
Security Management Serverproduct · 1
Check Pointvendor · 1
Bynario Atlasorganization · 1

Entities are extracted by the model from each article. First seen Aug 17, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.