7th September – Threat Intelligence Report
Check Point weekly bulletin: exploited SonicWall SMA 1000 zero-days (CVE-2026-83548/49), JFrog Artifactory auth bypass, and a 2.8M-patient Baylor Genetics breach.
70
Malware
JSCeal
- Mentions · 7d0
- Mentions · 30d0
- All mentions4
- First seenAug 31, 2026
- Last mentionedSep 7, 2026
Timeline
4 articles · newest firstJSCeal Hides Crypto Malware in V8 Bytecode
Check Point details JSCeal, a crypto-stealing malware delivered as compiled V8 bytecode, and built a decompiler pipeline to expose its capabilities.
58
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Check Point details JSCeal, a V8-compiled JavaScript stealer that replays stolen cookies to bypass Google authentication, spread via crypto malvertising.
45
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
Check Point's hasherezade details static deobfuscation of JSCeal, a V8-bytecode stealer targeting cryptocurrency applications since March 2024.
55
Related CVEs
by mentions- CVE-2026-835488%10.0Pre-Authentication SSRF in SonicWall SMA1000 Appliance Workplace Interface
- CVE-2026-8232914%9.8Improper Authentication in JFrog Artifactory Allows Unauthenticated Admin Access
- CVE-2026-8354910%7.8Authenticated OS Command Injection RCE in SonicWall SMA1000 Appliance Console
Appears with
- Node.jsproduct · 2
- Check Pointvendor · 2
- Bybitproduct · 2
- Ledgerproduct · 2
- Binanceproduct · 2
- Check Point Researchvendor · 2
- V8product · 1
- Claudeai model · 1
- Lazarus Groupthreat actor · 1
- CrowdStrike Falconproduct · 1
- Bitdefenderorganization · 1
- FBIorganization · 1
- JFrogvendor · 1
- Gambling Goblinthreat actor · 1
- PollCatmalware · 1
- SonicWallvendor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.