Check Point Management Server (Product): news timeline & CVEs

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.

Helpfeel confirmed that hackers exploited a Gyazo server flaw and stole 23.6 million user records. The same weekly digest details TASK#STOMP, a Windows backdoor that uploads business documents and also takes Wi-Fi passwords, clipboard text, and screenshots. A Chinese-speaking actor exploited CVE-2026-7273 on 996 unpatched Zyxel GS1900 switches in 48 countries, and Check Point said CVE-2026-93616 has been exploited since July 23, 2026. Elsevier domains were briefly redirected to a LAPSUS$ page, while DarkMe is now spread by ordinary phishing email.

Help Net Security08:00 UTC · 2h agoData breach in the wildCVE-2026-7273 CVE-2026-85102 CVE-2026-93616

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances

CISA adds four actively exploited zero-days to KEV, forcing immediate patching of critical flaws in Check Point, Arista, and F5 systems.

CISA has added four actively exploited zero-day vulnerabilities to its KEV catalog, forcing US federal agencies to patch by September 25. The list includes critical flaws in Check Point Security Management (CVE-2026-93616) and Security Gateway (CVE-2026-85102), alongside zero-days in Arista VeloCloud Orchestrator (CVE-2026-93952) and F5 BIG-IP APM (CVE-2026-94127). Check Point confirmed exploitation against Management Servers and Spark firewalls globally.

Help Net Securityupdated Sep 25, 10:30 UTC · 1d agofirst Sep 23, 10:22 UTC · 3d agoVulnerability in the wild 15 sources CVE-2026-93616 CVE-2026-85102 CVE-2026-93952

Check Point Management Server

Timeline2 articles

Related CVEsby mentions

Appears with

Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents

Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances