CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang

A known ransomware group (Qilin) is actively exploiting an unpatched vulnerability in Check Point remote access tools, firewalls, and VPNs to breach organizations globally. Activity began May 7 and escalated recently, prompting CISA to order all U.S. civilian federal agencies to remediate affected products by June 11 under an emergency operational directive.