21st September – Threat Intelligence Report
Check Point weekly roundup covers Japan Digital Agency and Gyazo breaches, actively exploited Cisco ISE flaw, and multiple new APT campaigns.
The report covers major breaches including Japan's Digital Agency (246,000 records via VPN appliance flaw) and Gyazo image service (23M+ user records and 490M image metadata records). Cisco disclosed active exploitation of CVE-2026-76460 (CVSS 10.0) in ISE, while Check Point patched CVE-2026-91843 (CVSS 9.8) and Oracle's September CPU addressed 800+ vulnerabilities. Threat intelligence includes WaterPlum/Contagious Interview (30,000 devices infected, 7,000+ crypto wallets drained), FamousSparrow's new SparroWocky backdoor, the HEAVYGRAM Iranian surveillance backdoor, and the GhostCode device-code phishing kit.