2026-06-09: Check Point VPN users have three days to patch CVE-2026-50751

Show Notes - 2026-06-09

Stories Covered

• June 9, 2026
• Today:
• Check Point VPN Zero-Day Exploited by Qilin Ransomware (CVE-2026-50751) [Critical Alerts]
• Gogs RCE Zero-Day Affects Default Configurations [Critical Alerts]
• Google Patches Fifth Chrome Zero-Day of 2026 (CVE-2026-11645) [Critical Alerts]
• LiteLLM RCE Exploited in the Wild (CVE-2026-42271) [Critical Alerts]
• TeamPCP Supply Chain Campaign Continues with Hades PyPI Variant [Critical Alerts]
• Silent Ransom Group Uses DNS Fast Flux in Attacks [Ransomware & Extortion]
• Ransomware Closes Illinois High Schools [Ransomware & Extortion]
• Qilin NHS Breach Tally Grows [Ransomware & Extortion]
• Microsoft Teams Phishing Campaigns Bypass Email Defenses [Business & Infrastructure Threats]
• AI Brands Used as Social Engineering Lures [Business & Infrastructure Threats]
• NSO Group Spyware Campaigns Defy Court Injunction [Business & Infrastructure Threats]
• Linux Kernel One-Character Flaw Enables Local Root (CVE-2026-23111) [Vulnerability Disclosures]
• Android Framework Privilege Escalation Under Exploitation (CVE-2025-48595) [Vulnerability Disclosures]
• Multiple MSRC CVE Publications [Vulnerability Disclosures]
• Instagram Recovery Tool Bug Exposed 20,225 Accounts [Vulnerability Disclosures]
• Apple Announces AI-Powered Automatic Password Fixer [General Security News]

CVEs Referenced

CVE-2024-39930, CVE-2024-39932, CVE-2024-39933, CVE-2025-48595, CVE-2025-8110, CVE-2026-10879, CVE-2026-11463, CVE-2026-11645, CVE-2026-23111, CVE-2026-2441, CVE-2026-26194, CVE-2026-35429, CVE-2026-3909, CVE-2026-3910, CVE-2026-40930, CVE-2026-42208, CVE-2026-42271, CVE-2026-45321, CVE-2026-46250, CVE-2026-46272, CVE-2026-48027, CVE-2026-48710, CVE-2026-49975, CVE-2026-50031, CVE-2026-50256, CVE-2026-50260, CVE-2026-50262, CVE-2026-50292, CVE-2026-50751, CVE-2026-50752, CVE-2026-5281

Indicators of Compromise

Domains: ep6pheij[.]com, business-data-leaks[.]com., business-data-leaks[.]com, grupoconstat[.]bitrix24, com[.]br, ikhwancast[.]com, ghazacast[.]com, fr24cast[.]com., fr24cast[.]com

Read the full brief