CISA Issues Urgent Directive to Patch Check Point VPN Vulnerability Exploited by Ransomware

CISA has ordered federal agencies to remediate or disconnect Check Point VPN systems to address CVE-2026-42271, a critical zero-day command-injection vulnerability actively exploited by the Qilin ransomware group since early May; dozens of organizations have reportedly been compromised and agencies have 72 hours to patch or isolate affected systems.