Attacks Surge on Check Point's Recent VPN Zero-Day Flaw

Exploit activity has surged against Check Point VPN vulnerability CVE-2024-24919 (CVSS 8.6), an information-disclosure flaw in multiple Check Point gateway products; public proof-of-concept code and rapidly increasing scanning and exploitation attempts have been observed, with Censys identifying ~13,754 exposed systems and low patch adoption. Check Point published hotfixes and mitigations, Greynoise and WatchTowr reported rising exploit activity and ease of exploitation, and CISA added the vulnerability to its known exploited vulnerabilities catalog with a federal mitigation deadline.