Bajaj Auto and its tech subsidiary detected a ransomware intrusion that disrupted their systems, prompting immediate containment and mitigation efforts. The company hasn’t revealed the attacker’s identity, any data theft, or a ransom demand, and there’s no link yet to a recent Tata Electronics breach.

• Bajaj Auto and its tech subsidiary Bajaj Auto Technology were hit by ransomware, disrupting systems at its Pune HQ and R&D arm
• No confirmed ransom demand or data theft so far, and containment efforts appear to be working
• No evidence links this attack to the same group (World Leaks) behind the recent Tata Electronics breach
• Highlights growing cybersecurity risks facing major Indian manufacturers, even industry leaders like Bajaj

CISA has directed U.S. federal agencies to fix a critical authentication bypass in Check Point Remote Access and Mobile Access VPNs (CVE-2026-50751) by June 11. The flaw, exploited by Qilin ransomware affiliates since early May, affects IKEv1 deployments without machine certificates. Check Point released updates and mitigation steps for unpatched environments.

• CVE-2026-50751 lets attackers bypass authentication entirely on Check Point Remote Access/Mobile Access VPNs using legacy IKEv1 setups without machine certificates.
• Qilin ransomware affiliates have been exploiting it since May 7, breaching a few dozen organizations, with exploitation spiking over the weekend.
• CISA added it to the KEV catalog and gave federal agencies until June 11 to patch, citing VPN flaws as a top ransomware entry point.
• If patching isn't immediate, mitigations include disabling legacy clients, enforcing IKEv2-only, enabling updated IPS signatures, and requiring machine certificates.