The situation

Qilin Exploits Check Point VPN Zero-Day; Oracle PeopleSoft Under Attack

AI-powered phishing network disrupted; Check Point zero-day and PeopleSoft exploitation demand immediate patching.

Composed by SitRep’s AI editors from 3 sources — BleepingComputer, Help Net Security, Breaches.net

VPN Zero-day Exploited

BleepingComputer and Help Net Security reporting: the FBI and partners dismantled Outsider Enterprise, an AI-driven phishing service that generated over 1,000,000 fraudulent URLs and targeted hundreds of thousands of victims. Concurrently, a Qilin affiliate is actively exploiting CVE-2026-50751 against Check Point Remote Access appliances and CVE-2026-35273 is being used against Oracle PeopleSoft; immediate mitigations and patching are required.

Context

Why this matters now: combined technical exploitation and mass automated phishing scale credential and payment-data theft rapidly. Who is exposed: organizations running internet-facing Check Point Remote Access/Mobile Access appliances and PeopleSoft PeopleTools, plus any users subject to credential phishing. Likely blast radius: corporate VPNs, identity infrastructure, payment processing, and research systems tied to affected applications.

The move

5 things to do today

Patch Check Point Remote Access/Mobile Access appliances now or apply vendor mitigations for CVE-2026-50751 and restrict management interfaces.
Apply Oracle PeopleTools security updates for CVE-2026-35273 and isolate affected PeopleSoft instances until patched.
Update phishing blocklists and URL filters with domains and storefront indicators tied to the takedown and expand sandboxing.
Enforce MFA for all externally reachable accounts and elevate transaction monitoring for unusual payment activity.
Audit clinical trial systems for anomalous exports, rotate suspected credentials, and notify legal/compliance to prepare regulatory responses.

On the wire

P0Exploit

CVE-2026-50751 Actively Exploited Against Check Point Remote Access

Help Net Security reports active exploitation of CVE-2026-50751 against Check Point Remote Access/Mobile Access. Action: apply vendor patches or mitigations immediately, block administrative ports from the public internet, restrict management to hardened jump hosts, and monitor VPN session anomalies and administrative logins for compromise.

HELP NET SECURITY · Qilin Exploits Check Point VPN Zero-Day; Oracle PeopleSoft Under Attack

P1Exploit

Oracle PeopleSoft PeopleTools Exploited in the Wild (CVE-2026-35273)

Help Net Security confirms in-the-wild exploitation of CVE-2026-35273 affecting PeopleSoft PeopleTools. Action: prioritize PeopleTools patch deployment, review application and database logs for suspicious queries or exports, and segment or isolate affected instances until patched.

HELP NET SECURITY · Qilin Exploits Check Point VPN Zero-Day; Oracle PeopleSoft Under Attack

P1Phishing

FBI Disrupts Outsider Enterprise: Ai-scaled Phishing Infrastructure

BleepingComputer reports the FBI disrupted Outsider Enterprise, which generated over 1,000,000 fraudulent URLs and ran thousands of phishing sites. Action: update phishing blocklists, enforce MFA for all externally accessible accounts, increase email and URL sandboxing, and raise transaction monitoring for potential card theft.

BLEEPINGCOMPUTER · FBI Dismantles AI-Powered Phishing Network Outsider Enterprise Worldwide

P2Breach

Novo Nordisk Reports Clinical Trial Data Breach

Breaches[.]net reports a Novo Nordisk breach impacting clinical trial participants. Action: audit access to clinical systems, search for anomalous exports or data staging activity, rotate credentials where suspicious, and involve legal/compliance to assess notification obligations.

BREACHES.NET · Novo Nordisk Data Breach Affects Clinical Trial Data

Indicators named in this edition

Kind	Value	Note
CVE	CVE-2026-50751	Check Point Remote Access/Mobile Access zero-day exploited in the wild.
CVE	CVE-2026-35273	Oracle PeopleSoft PeopleTools vulnerability exploited in the wild.

Elsewhere in the edition

Also reported

BREACHES.NETUK Hotel Guests Warned After Data Breach at Major Chain
BREACHES.NETShinyHunters Claims Theft of 297GB From Council of Europe
NEWSAPI CYBER INSIGHTSComcast Settles $117.5 Million Over Xfinity Breach

End of the Sunday, June 14, 2026 edition.