Search: “Check Point Research”

309 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1127 Vulnerability 841 Ransomware 523 Exploit / PoC 427 Threat actor 301 Data breach 231 Phishing & fraud 221 Policy & legal 105 Industry 100 Research 72 AI safety & security 68 Model release 23 AI industry 21 AI tools & infra 16

SeverityAll critical 1362 high 1297 medium 1018 low 292 info 145

14th September – Threat Intelligence Report

Check Point weekly digest: Microsoft's record 974-vuln Patch Tuesday ships two actively exploited Windows zero-days; IDScan.net, Mathspace, Revolut suffer breaches.

Microsoft's September 2026 Patch Tuesday addressed a record 974 vulnerabilities, including two actively exploited privilege-escalation zero-days, CVE-2026-85880 and CVE-2026-81963, plus 20 flaws allowing unauthenticated remote code execution. Disclosed breaches include IDScan.net (identity documents), Mathspace (over 1 million people via Metabase CVE-2026-72898), Revolut, and Florida DMV (ShinyHunters). GitLab fixed critical CVSS 10.0 path traversal CVE-2026-85706, and MikroTik fixed chainable RouterOS flaws CVE-2026-67276 and CVE-2026-86060. The report also covers the PuzzleMask LLM jailbreak technique, GoldFactory's Gigabud Android fraud, and the BlueMoon Chromium exploit chain (CVE-2026-85046).

Check Point ResearchSep 14, 12:22 UTC · 2d agoExploit / PoC in the wildCVE-2026-72898 CVE-2026-85880 CVE-2026-81963+4 CVEs2· 1 read

'Man-in-the-disk' attack took advantage of Android data security flaws

CyberScoopAug 14, 14:59 UTC · Aug 14, 2018Exploit / PoC in the wild

Critical Flaw in Major Android Tools Targets Developers and Reverse Engineers

The Hacker NewsDec 6, 11:54 UTC · Dec 6, 2017Exploit / PoC

Zero-day patched by Microsoft has been exploited by attackers for over a year (CVE-2024-38112)

Help Net SecurityJul 16, 13:38 UTC · Jul 16, 2024Exploit / PoC in the wildCVE-2024-38112 CVE-2024-38021

Critical Flaw in OpenSea Could Have Let Hackers Steal Cryptocurrency From Wallets

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2021Exploit / PoC in the wild

Critical bug in popular chipsets exposes 2/3 of Android devices to hack

Security AffairsApr 21, 20:17 UTC · Apr 21, 2022Exploit / PoC CVE-2021-0674 CVE-2021-0675 CVE-2021-30351

How did a Chinese APT get a U.S. hacking tool before it was leaked? Check Point has a theory.

CyberScoopSep 6, 15:05 UTC · Sep 6, 2019Exploit / PoC in the wildCVE-2017-0145

3 Critical Zero-Day Flaws Found in PHP 7 — One Remains Unpatched!

The Hacker NewsDec 29, 10:45 UTC · Dec 29, 2016Exploit / PoC in the wildCVE-2016-7479 CVE-2016-7480 CVE-2016-7478+1 CVEs

TrueConf zero-day vulnerability exploited to target government networks

Help Net SecurityApr 2, 00:00 UTC · Apr 2, 2026Exploit / PoC CVE-2026-3502

North Korea's favorite anti-virus software is just an old, ripped off Trend Micro product

CyberScoopMay 2, 13:24 UTC · May 2, 2018Exploit / PoC in the wild

Two Iranian hacking groups appear to be actively snooping on critics around the globe

CyberScoopFeb 8, 13:15 UTC · Feb 8, 2021Exploit / PoC in the wild

‘War Dialing’ Tool Exposes Zoom’s Password Problems

Krebs on SecurityApr 6, 02:52 UTC · Apr 6, 2020Exploit / PoC

Security flaws allowed hijacking any TikTok account

Security AffairsJan 8, 13:27 UTC · Jan 8, 2020Exploit / PoC

X suffered a DDoS attack. Its CEO and security researchers can't agree on who did it.

CyberScoopMar 11, 20:01 UTC · Mar 11, 2025Exploit / PoC in the wild

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

The Hacker NewsJul 23, 06:05 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-4427 CVE-2025-4428 CVE-2025-53770+3 CVEs

Chinese hackers suspected of using Dropbox to snoop on Afghan officials

CyberScoopJul 1, 12:57 UTC · Jul 1, 2021Exploit / PoC in the wild

Malicious adware downloaded over 1.5 million times in Google Play store

CyberScoopJan 5, 14:00 UTC · Jan 5, 2018Exploit / PoC in the wild

ChatGPT Security Issue Enabled Data Theft via Single Prompt

Infosecurity MagazineMar 31, 13:01 UTC · Mar 31, 2026Exploit / PoC in the wild

Here's How Hackers Could Have Spied On Your DJI Drone Account

The Hacker NewsNov 8, 19:08 UTC · Nov 8, 2018Exploit / PoC in the wild

Flaws in Qualcomm chips could allow snooping, Check Point finds

CyberScoopAug 7, 19:46 UTC · Aug 7, 2020Exploit / PoC in the wildCVE-2020-11201 CVE-2020-11202 CVE-2020-11206+2 CVEs

Report: 'Faxploit' hack can penetrate networks with just a fax number

CyberScoopAug 13, 19:27 UTC · Aug 13, 2018Exploit / PoC in the wild

Microsoft patches zero-day exploited by attackers (CVE-2023-28252)

Help Net SecurityApr 11, 00:00 UTC · Apr 11, 2023Exploit / PoC in the wildCVE-2023-28252 CVE-2023-23376 CVE-2023-21554+4 CVEs

Chinese-linked hacking group gets crafty to avoid detection

CyberScoopOct 2, 12:00 UTC · Oct 2, 2019Exploit / PoC in the wild

CVE-2026-16232: Checkpoint Quantum Security Management auth bypass ...

Attackers exploit Check Point SmartConsole authentication bypass CVE-2026-16232 to take over Quantum Security Management firewall servers; CISA added it to KEV.

CVE-2026-16232 is an authentication bypass (CWE-287) in the SmartConsole login process of Check Point Quantum Security Management, exploitable via an application token. Disclosed July 22, 2026, it was added to CISA's Known Exploited Vulnerabilities catalog the same day with remediation due July 25. Rapid7, Check Point Research and other vendors confirmed exploitation in the wild, and a public PoC was released. A workaround is available, and federal agencies must comply with BOD 26-04 patching guidance.

Web discovery (articles for new exploits & KEV entries)Sep 5, 08:03 UTC · 11d agoExploit / PoC in the wildCVE-2026-16232