[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuPWL36i5XrzDt9UOpye1VZxpiYpwKdOA04e4QNEXVv0":3},{"article":4,"iocs":47,"watch_terms":55,"solutions":56,"lesson":146},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":29,"category":30,"article_tags":34},"8a1c7a5e-0757-4af6-aa5b-952e559fa4ee","Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent","dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent-59b3d7","The Dutch Nationaal Cyber Security Centrum (NCSC) is warning of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103. [...]","The Dutch NCSC has issued a warning about the imminent exploitation of two critical vulnerabilities in Check Point VPN, tracked as CVE-2026-85102 and CVE-2026-85103. These flaws could allow remote attackers to execute arbitrary code and gain full control over affected systems. Organizations are urged to apply security updates immediately.","Dutch NCSC warns of imminent exploitation of critical Check Point VPN flaws CVE-2026-85102 and CVE-2026-85103.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fdutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F07\u002F23\u002FCheck-Point.jpg","2026-09-12T14:14:32+00:00","2026-09-12T16:00:13.346347+00:00",9,[17,20,23,25,27],{"name":18,"type":19},"Check Point VPN","product",{"name":21,"type":22},"Check Point","vendor",{"name":24,"type":19},"Security Gateway",{"name":26,"type":19},"Security Management Server",{"name":28,"type":19},"Check Point LivePatch","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":29,"icon":31,"name":32,"slug":33},null,"Vulnerabilities","vulnerabilities",[35,40,42],{"category":36},{"id":37,"icon":31,"name":38,"slug":39},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":41},{"id":29,"icon":31,"name":32,"slug":33},{"category":43},{"id":44,"icon":31,"name":45,"slug":46},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[48,52],{"type":49,"value":50,"context":51},"cve","CVE-2026-85102","Improper validation of certificate data during VPN negotiation",{"type":49,"value":53,"context":54},"CVE-2026-85103","Heap overflow in VPN certificate ASN.1 decoder",[21,18,24],{"controls":57,"vendors":140},[58,87,112],{"slug":59,"name":60,"problem":61,"products":62},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":88,"name":89,"problem":90,"products":91},"patch-management","Automated patch management","Known holes get closed in days, not months.",[92,96,104],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":88,"product_name":93,"url":94,"description":95},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":46,"name":113,"problem":114,"products":115},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"dataminr","Dataminr","\u002Fvendor-logos\u002Fdataminr.png","dataminr-threat-intelligence","Dataminr Threat Intelligence","https:\u002F\u002Fwww.dataminr.com\u002Fproducts\u002Fcyber-defense\u002Fthreat-intelligence\u002F","Real-time alerts on emerging cyber threats, exploited vulnerabilities and attacks relevant to your organisation, detected with AI across a large set of public data sources.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"google","Google","\u002Fvendor-logos\u002Fgoogle.png","google-threat-intelligence","Google Threat Intelligence","https:\u002F\u002Fcloud.google.com\u002Fsecurity\u002Fproducts\u002Fthreat-intelligence","Threat intelligence from Mandiant's frontline investigations, Google's threat analysts, open sources and Google's own visibility, in one service.",[141],{"slug":142,"name":21,"logo_path":143,"roles":144},"check-point","\u002Fvendor-logos\u002Fcheck-point.png",[145],"affected",{"slug":147,"title":148,"body":149,"framework_refs":150,"framework_notes":161},"critical-check-point-vpn-flaws-demand-immediate-patching","Critical Check Point VPN Flaws Demand Immediate Patching","Two critical vulnerabilities in Check Point VPN (CVE-2026-85102 and CVE-2026-85103) allow remote attackers to execute arbitrary code and seize full control of affected systems, making them high-value targets for threat actors. The Dutch NCSC's warning of imminent exploitation underscores how quickly adversaries operationalize public vulnerability disclosures, especially against widely deployed network perimeter devices. VPN gateways are particularly dangerous targets because they sit at the edge of the network and often carry elevated trust and access privileges. Delayed patching of internet-facing infrastructure in this threat environment is tantamount to leaving the front door unlocked.",[151,152,153,154,155,156,157,158,159,160],"CIS Control 7: Continuous Vulnerability Management","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","NIST SC-7: Boundary Protection","ITIL Change Management: Emergency Change Procedure","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","CISA KEV (Known Exploited Vulnerabilities) Catalog",{}]