CVE-2026-44963 lets any low-privilege domain user execute code as root on Veeam Backup & Replication servers. With ransomware gangs actively targeting Veeam infrastructure, patching to version 12.3.2.4854 isn’t optional — it’s urgent.
CISA ordered federal agencies to patch Check Point VPN flaw CVE-2026-50751 within 3 days. Ransomware gangs, including Qilin affiliates, have been exploiting it as a zero-day since May.
A critical Check Point VPN flaw (CVE-2026-50751) lets attackers bypass passwords entirely by exploiting the deprecated IKEv1 protocol. Active exploitation is underway against dozens of organizations, with at least one Qilin ransomware affiliate already leveraging the access.
Check Point’s VPN zero-day CVE-2026-50751 is being actively exploited by the Qilin ransomware gang. Only affects deprecated IKEv1 setups, but patching can’t wait.
The Silent Ransom Group is using a 18-country fast flux botnet of hijacked routers and IoT devices to hide its C2 infrastructure. Law firms remain the primary target, with nearly a quarter of Q1 2026 ransomware incidents tied to the group.
