WaterPlum

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 21, 2026
Last mentionedSep 22, 2026

Timeline

2 articles · newest first

Japan Dismantles First North Korean Laptop Farm as US and Allies Detail Wider Scheme

Japan, US, Australia and Germany attributed WaterPlum's fake-employer scheme to North Korea; 30,000 devices infected and $10.71 million stolen since December 2025.

SecurityWeekSep 22, 08:37 UTC · Sep 22, 2026Threat actorExploited2 · 1 read

21st September – Threat Intelligence Report

Check Point weekly roundup covers Japan Digital Agency and Gyazo breaches, actively exploited Cisco ISE flaw, and multiple new APT campaigns.

Check Point ResearchSep 21, 23:13 UTC · Sep 21, 2026Threat actorExploitedCVE-2026-91843 CVE-2026-76460 CVE-2026-76461+14

Related CVEs

by mentions

CVE-2026-7646076%10.0
Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
published Sep 16, 2026Cisco Identity Services Engine (ISE)KEVPoC
CVE-2026-7646140%9.8
Unauthenticated SQL Injection to Root RCE in Cisco Secure Email Gateway
published Sep 14, 2026Cisco Secure Email Gateway (Cisco AsyncOS Software)KEVPoC ×3
CVE-2026-91843<1%9.8
Unauthenticated stack overflow gives root RCE in Check Point login process
published Sep 16, 2026Check PointPoC
CVE-2026-776927.5
Unauthenticated DoS in ISC BIND 9 via crafted SIG(0) DNS-over-HTTPS requests
published Sep 16, 2026Internet Systems Consortium (ISC) BIND 9

Appears with

FamousSparroworganization · 1
Oracleorganization · 1
Check Point Researchorganization · 1
Brevoorganization · 1
Handalaorganization · 1
FBIorganization · 1
Japan Digital Agencyorganization · 1
Ciscoorganization · 1
National Police Agency of Japanorganization · 1
Gyazoorganization · 1
Contagious Intervieworganization · 1

Entities are extracted by the model from each article. First seen Sep 21, 2026, last mentioned Sep 22, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.