Chinese APT Uses VPN Bug to Exploit Worldwide OT Orgs (Nate Nelson, Dark Reading)

Chinese cybercriminals have penetrated sensitive manufacturing companies worldwide through a virtual private network (VPN) bug. In an exclusive interview with Dark Reading at CPX 2025, Check Point researchers provided new information about a monthslong espionage campaign aimed at prized intellectual property (IP). In short: Through a months-old path traversal vulnerability in Check Point’s security gateways, attackers attributed with low confidence to APT41 (aka Winnti) managed to gain initial access into dozens of operational technology (OT) organizations globally.

Chinese APT Uses VPN Bug to Exploit Worldwide OT Orgs