We observed activity consistent with exploitation of @CheckPointSW CVE-2026-62144 76 days before public disclosure.
Timeline:
5 April
Sustained increase in scanning targeting /web_api/login.
29 April
A source authenticated, then requested /web_api/show-gateways-and-servers just 238ms later, a sequence consistent with automated exploitation.
14 July
CVE-2026-62144 was publicly disclosed.
Attackers appear to have had operational exploit code while this was still a zero-day.
Patch status tells you what is known today.
Our telemetry tells you what attackers were already doing.
Try it out at https://t.co/j68uRQG0fn
@qatarairways My flight has been cancelled from Melbourne to London. I've had zero updates from the airline. Not a single Qatar rep here. No arrangements have been made for accommodation. WTF Qatar.
@Avis how do I speak to someone on the weekend. Not a single number answering. I am picking up a car in Spain tomorrow and need to speak to someone urgently. So far this booking has been the worst car rental I've ever experienced. I'm hoping it can get better from here!
@jk_rowling You’re still a legend in our house and in millions of others. It’s funny how people think something is true just because they said out loud. #yourestillontop
@Qantas It’s when you put a companies customer service and compassion to the test that they really show what sort of organisation they are. Charging my sister 1900 dollars to change her ticket to make it to our fathers funeral on time. Disgusting