Check Point weekly brief covers Onamae intrusion, PHP exploits, GitLab RCE
The October 26 bulletin also flags an exploited Arista flaw, a LiteLLM package compromise, and the Aokigahara infostealer.
66
Victim
State Bank of India
- Mentions · 7d1
- Mentions · 30d8
- All mentions8
- First seenOct 20, 2026
- Last mentioned4d ago
Timeline
8 articles · newest firstSBI notifies customers whose data was in a cyber incident
The bank says balances and funds are safe but gives no cause, data types, customer count or date.
58
SBI notifies customers after finding 3,897 records exposed
SBI reviewed about 375,000 dark-web records and says balances are safe, with no confirmed core-system intrusion.
64
State Bank of India discloses leak of 3,897 customer records
BreachForums user Siriusim posted SBI files, while the bank reported a much smaller official count.
52
State Bank of India confirms 3,897 customer records on dark web
The October 21 filing says authenticity and the source remain unknown, and listed fields omit account numbers, passwords and Aadhaar.
62
SBI says 3,897 customer records appeared on the dark web
Investigators confirmed 3,897 PII records after reviewing about 375,000 rows; passwords, PINs, and stolen funds were not reported.
58
Siriusim claims leak of State Bank of India customer records
The unverified post cites 375,000 CSV rows and 2,722 PDFs, not a confirmed unique-customer count.
48
Unverified BreachForums post claims leak of SBI customer records
Siriusim allegedly posted 375,000 CSV rows and 2,722 PDFs; SBI had not confirmed the claim.
48
Related CVEs
by mentions- CVE-2026-1146251%9.4SQL injection in Arista VeloCloud Orchestrator grants superuser
- CVE-2026-109619100%9.2Use-after-free RCE in PHP via stale request globals
- CVE-2026-109618100%9.2OOM longjmp memory flaw enabling RCE in PHP
- CVE-2026-1102641%10.0Unauthenticated RCE in GitLab CE/EE via regex integer overflow
Appears with
- Defense Cyber Agencyorganization · 3
- CERT-Inorganization · 3
- Siriusimthreat actor · 3
- Onamae Desktop Cloudvictim · 1
- Fortinetvendor · 1
- ChatGPTai model · 1
- The Gentlementhreat actor · 1
- TeamUpdraftvictim · 1
- FortiGateproduct · 1
- Aokigaharamalware · 1
- GlobalProtectproduct · 1
- k0tthreat actor · 1
- Palo Alto Networksvendor · 1
- GitLabvendor · 1
- Claudeai model · 1
- Lazarusthreat actor · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.