Now Playing
Check Point VPN Zero-Day, 44% Ransomware Surge & FBI Network Breach
Audio is available on Spreaker — see link below.
A Qilin ransomware affiliate is actively exploiting a Check Point VPN zero-day with no patch in sight, as new data shows ransomware now drives 44% of all breaches. Plus: an FBI network breach attributed to China, a supply chain hit on Trivy and Bitwarden, nation-state attacks on European energy grids, and a ransomware shutdown at a US school district.
Audio is available on Spreaker — see link below.
A Qilin ransomware affiliate has been running active exploitation of a Check Point VPN zero-day since early May, and dozens of organizations are already confirmed victims. CVE-2026-50751 is an authentication bypass in Check Point's Remote Access and Mobile Access products, and right now there's no confirmed patch timeline.
The Check Point exploitation lands in a broader environment that has shifted sharply in ransomware's favor. Ransomware now appears in forty-four percent of all data breaches, up from thirty-two percent the year prior.
Small businesses are bearing the sharpest edge of this. Eighty-eight percent of SMB breaches involve ransomware, compared to thirty-nine percent at larger organizations.
Pull back further and the threat picture gets more deliberate. Russia-linked actors have been targeting European energy grids and water systems across Poland, Sweden, and Norway.
Two other developments deserve attention. The FBI declared a major cyber incident after an unclassified network breach exposed phone numbers of surveillance targets.
Two operational disruptions round out today's picture. Evanston Township High School District closed through Tuesday after a ransomware attack, with summer programs and sports camps cancelled.
Chapter summary auto-generated from the verified script. Listen to the full episode for the complete content.