CISA orders federal agencies to patch exploited Check Point VPN bug (CVE-2026-50751)

A ransomware group is actively exploiting an unpatched flaw in security tools used across the U.S. federal government. This prompted the U.S. cybersecurity agency CISA to order all civilian agencies to remediate the vulnerability Cybersecurity firm Check Point Software said the bug affects several of its remote access tools, firewalls, and VPNs. The tools act as digital gatekeepers to protect company networks from un The hacks began on May 7 but activity began to rise last week, per Check Point. Given the risk to the federal government's enterprise network, CISA on Monday ordered all civilian federal agencies such as Homeland Security, the Department of State, and the Treasury to fix any instances where agencies are using the affected products