Search: “Check Point”

292 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1490 Vulnerability 1345 Ransomware 789 Exploit / PoC 625 Data breach 550 Phishing & fraud 449 Threat actor 419 Policy & legal 313 Industry 304 AI safety & security 96 Research 95 AI tools & infra 53 Tools 40 AI research 34

SeverityAll critical 2159 high 1961 medium 1563 low 741 info 279

2026-012: Critical Vulnerabilities in Check Point Products

Check Point issued emergency hotfixes for two CVSS 9.8 flaws (CVE-2026-85102, CVE-2026-85103) enabling unauthenticated RCE on VPN-enabled gateways.

On 9 September 2026, Check Point released emergency security updates for CVE-2026-85102 (improper certificate-data validation in VPN negotiation) and CVE-2026-85103 (heap overflow in VPN certificate ASN.1 decoding), both CVSS 9.8, allowing unauthenticated remote code execution. The flaws affect Security Gateway, Security Management Server, and Spark Firewall deployments configured with Remote Access or Site-to-Site VPN, spanning versions R80 through R82.10. CERT-EU advisory 2026-012 urges immediate hotfix application, prioritizing internet-facing and perimeter appliances.

CERT-EU Advisoriesupdated 17:14 UTC · 4h agofirst Sep 10, 08:36 UTC · 6d agoVulnerability 9 sources CVE-2026-85102 CVE-2026-85103

Thousands of internet-facing devices vulnerable to Check Point VPN zero

The RecordMay 31, 21:08 UTC · May 31, 2024Vulnerability in the wildCVE-2024-24919

Mysterious findings emerged from the analysis of the SiliVaccine North Korea's antivirus software

Security AffairsMay 2, 13:01 UTC · May 2, 2018Vulnerability

Chinese Ink Dragon Group Hides in European Government Networks

Infosecurity MagazineDec 17, 09:30 UTC · Dec 17, 2025Vulnerability

New Man-in-the-Disk attack leaves millions of Android phones vulnerable

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2018Vulnerability

Improper Microsoft Patch for Reverse RDP Attacks Leaves 3rd

The Hacker NewsMay 15, 00:00 UTC · May 15, 2020Vulnerability CVE-2019-0887 CVE-2020-0655

Misfortune Cookie exposes more than 12 million home routers

Security AffairsAug 30, 12:19 UTC · Aug 30, 2018Vulnerability CVE-2014-9222

Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX

The Hacker NewsJul 4, 06:06 UTC · Jul 4, 2023Vulnerability

Two flaws in Microsoft Azure could have allowed taking over cloud servers

Security AffairsJan 30, 21:14 UTC · Jan 30, 2020Vulnerability CVE-2019-1234 CVE-2019-1372

Chinese cyberspies targeted the Afghan National Security Council

The RecordJan 18, 00:00 UTC · Jan 18, 2023Vulnerability

Researchers find vulnerability in Rarible NFT platform

The RecordApr 19, 00:00 UTC · Apr 19, 2022Vulnerability

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub

The Hacker NewsMar 11, 16:06 UTC · Mar 11, 2025Vulnerability CVE-2024-434511

sk185169 - CVE-2026-16232 - Authentication bypass with SmartConsole ...

Check Point issued a high-severity alert for CVE-2026-16232, an authentication bypass in the SmartConsole login process via application token.

Check Point published support article sk185169 describing CVE-2026-16232, an authentication bypass affecting the SmartConsole login process when using application tokens. The vendor rates the issue High. The brief advisory text provides no exploitation details, CVSS score, or affected-version list.

Web discovery (articles for new exploits & KEV entries)Sep 8, 09:04 UTC · 8d agoVulnerability CVE-2026-16232

Coinhive stops digging, but cryptomining still dominates

Help Net SecurityApr 10, 00:00 UTC · Apr 10, 2019Vulnerability in the wildCVE-2017-7269 CVE-2014-0160 CVE-2014-0346

Microsoft Azure Flaws Could Have Let Hackers Take Over Cloud Servers

The Hacker NewsJan 30, 12:37 UTC · Jan 30, 2020Vulnerability CVE-2019-1234 CVE-2019-1372

Hackers can use subtitles to take over millions of devices running VLC, Kodi, Popcorn Time and Stremio

Help Net SecurityMay 23, 00:00 UTC · May 23, 2017Vulnerability

Sharp Panda Using New Soul Framework Version to Target Southeast Asian Governments

The Hacker NewsMar 11, 06:28 UTC · Mar 11, 2023Vulnerability

Flaws in Popular RDP Clients Allow Malicious Servers to Reverse Hack PCs

The Hacker NewsFeb 5, 20:05 UTC · Feb 5, 2019Vulnerability

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2025Vulnerability in the wild1

SmugX: Chinese APT uses HTML smuggling to target European Ministries and embassies

Security AffairsJul 3, 18:25 UTC · Jul 3, 2023Vulnerability

Surge in Attacks on Surveillance Cameras Linked to Iranian Hackers

Infosecurity MagazineMar 4, 15:00 UTC · Mar 4, 2026Vulnerability in the wildCVE-2021-33044 CVE-2017-79211

Vulnerability found in Guard Provider, Xiaomi's pre-installed security app

Help Net SecurityApr 4, 00:00 UTC · Apr 4, 2019Vulnerability

Account Takeover Vulnerability Found in Popular EA Games Origin Platform

The Hacker NewsJun 26, 17:59 UTC · Jun 26, 2019Vulnerability

IcePeony and Transparent Tribe Target Indian Entities with Cloud

The Hacker NewsNov 11, 13:18 UTC · Nov 11, 2024Vulnerability CVE-2022-30190

Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration

The Hacker NewsFeb 26, 05:59 UTC · Feb 26, 2026Vulnerability CVE-2025-59536 CVE-2026-218521

Cryptocurrency Companies Targeted in Sophisticated 3CX Supply Chain Attack

The Hacker NewsApr 5, 02:33 UTC · Apr 5, 2023Vulnerability CVE-2023-29059 CVE-2013-3900

Water Curse Employs 76 GitHub Accounts to Deliver Multi

The Hacker NewsJun 20, 07:08 UTC · Jun 20, 2025Vulnerability

WhatsApp CVE-2020-1910 bug could have led to user data exposure

Security AffairsSep 2, 21:20 UTC · Sep 2, 2021Vulnerability CVE-2020-1910

Apache Issues 3rd Patch to Fix New High

The Hacker NewsDec 20, 05:02 UTC · Dec 20, 2021Vulnerability in the wildCVE-2021-45105 CVE-2021-45046 CVE-2021-44228

WhatsApp Photo Filter Bug Could Have Exposed Your Data to Remote Attackers

The Hacker NewsSep 2, 10:07 UTC · Sep 2, 2021Vulnerability CVE-2020-1910

Firewalls and middleboxes can be weaponized for gigantic DDoS attacks

The RecordDec 13, 00:00 UTC · Dec 13, 2022Vulnerability

Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access

Unisoc modem firmware flaw CWE-1189 allows VoLTE video call RCE chain to gain full Android kernel access on T606/T612/T7250 chipsets; no patch yet.

SSD Secure Disclosure published the second stage of an exploit chain, first disclosed in March 2026, that achieves full Android kernel access on Unisoc modem firmware via a VoLTE video call. The privilege-escalation flaw, classified as CWE-1189 (Improper Isolation of Shared Resources on System-on-a-Chip), exploits shared physical memory between modem and application processor with no hardware boundary, letting modem code map the entire 32-bit address space and modify Android kernel pages via ARM Memory Protection Unit registers. Confirmed affected chipsets include Unisoc T606 (Motorola E13), T612 (Realme C33), and T7250 (Xiaomi Redmi A5), sold across more than 140 countries. No CVE has been assigned, the August 2026 Android Security Bulletin does not address it, and Unisoc has not responded to researchers; exploitation requires an attacker-controlled private 4G network and a victim answering the call.

The Hacker NewsAug 17, 10:52 UTC · Aug 17, 2026Vulnerability CVE-2025-31718 CVE-2022-20210