CISA Mandates Urgent VPN Vulnerability Patch for US Federal Agencies
The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent directive requiring all civilian federal agencies to address a critical vulnerability in Check Point software. This vulnerability, which affects remote access tools, firewalls, and VPN systems, has been actively exploited by a ransomware group known as Qilin. The exploitation of this flaw poses a significant threat to the security of federal networks. The directive mandates that all affected agencies, including the Department of Homeland Security, the Department of State, and the Treasury, must remediate the issue by June 11. This action is part of CISA's Operational Directive BOD 22-01, which allows for the implementation of security measures in response to active cyber threats.