TLDR Tech / InfoSec
Check Point Links VPN Zero-Day Attacks to Qlin Ransomware Gang
Check Point discovered a new critical vulnerability that allows remote attackers to bypass authentication on targeted Mobile Access/SSL VPNs, Remote Access VPNs, or Spark firewalls to establish a VPN connection. The vulnerability only impacts deployments configured to use IKEv1 key exchange, with security gateways that accept legacy Remote Access clients, and don't require a machine certificate for connections. While working on this vulnerability, Check Point uncovered another vulnerability in the IKEv1 certificate validation implementation, which could allow attackers to launch man-in-the-middle attacks.
Read the full story