Check Point Quantum Security Gateways Information Disclosure Attack

A zero-day vulnerability (CVE-2024-24919) in Check Point Security Gateways is being actively exploited in the wild to read arbitrary files on affected appliances, potentially disclosing local account password hashes; exploitation was observed starting April 7, 2024. FortiGuard recommends applying the vendor emergency hotfix, reports that known IoCs are blocked by Web Filtering and IOC services, and continues to monitor the situation.