NewsBite analysis · Security
TechCrunch
CISA gives US federal agencies three days to fix a VPN bug under attack by a ransomware gang
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered all U.S. federal agencies to patch an actively exploited VPN vulnerability. This directive follows reports from Check Point Software that the flaw, affecting multiple security tools, has been exploited by a known ransomware group, Qilin, to breach dozens of organizations worldwide. The urgency of the request highlights the increasing risks posed by cybersecurity threats to government networks.
Act nowConfidence: HighImmediate horizonCybersecurity risk: High
Published 9 Jun 2026, 18:42 UTC1 min read
Visit original article ↗Lead image — TechCrunch
Summary
TL;DR
- CISA has given a three-day deadline for VPN bug fixes.
- The VPN vulnerability is exploited by ransomware gang Qilin.
- Check Point Software confirmed multiple product vulnerabilities.
- The hacks began on May 7, with increased activity last week.
- Civilian federal agencies must address this cybersecurity threat.
Interesting facts
- The vulnerability impacts various remote access tools and firewalls.
- CISA's response is based on potential threats to government enterprise networks.
Coverage gaps