Zero-day flaw in Check Point VPNs is ‘extremely easy’ to exploit

Check Point disclosed a zero-day path-traversal vulnerability in its Quantum network security devices that attackers have been exploiting since around April 30 to retrieve sensitive files (including root credentials), potentially enabling broader network compromise; CISA added the flaw to its known-exploited catalog and Check Point urged customers to apply available patches.