Check Point

Three critical vulnerabilities in Fortinet's FortiSandbox are being actively exploited by unknown attackers. Fortinet has patched two of the flaws (CVE-2026-39813 and CVE-2026-39808) in April and a third (CVE-2026-25089) last week, all rated 9.1 on the CVSS scale. Threat intelligence firm Defused reported ongoing exploitation attempts, including unpatched vulnerabilities allowing remote code execution and authentication bypass.

CISA has mandated U.S. government agencies to address a critical vulnerability in Check Point Remote Access VPN and Mobile Access deployments, which is being exploited as a zero-day by Qilin ransomware affiliates. The directive requires agencies to secure these systems within three days to mitigate the risk of exploitation.

Check Point has released security updates to address a critical flaw in Remote Access VPN and Mobile Access deployments exploited in zero-day attacks. The vulnerability was linked to the Qilin ransomware gang.

A New York-based autonomous offensive security startup raised $37 million in funding from Lightspeed Venture Partners, Cyberstarts, and angels including Wiz CEO Assaf Rappaport. The startup uses AI to simulate continuous cyberattacks, identifying vulnerabilities before real hackers exploit them, following Anthropic’s Mythos model revealing thousands of zero-day flaws.

The 2026 U.S. midterms face a significant cyber problem unrelated to ballot box security, as highlighted in a Check Point blog post. The article discusses broader cybersecurity challenges impacting the election process, with Hacker News users engaging in related discussions.

Threat actors linked to The Gentlemen ransomware-as-a-service (RaaS) operation are deploying SystemBC proxy malware, with a Check Point analysis revealing over 1,570 victims via a compromised C2 server. The discovery highlights a botnet tied to the ransomware campaign.