4th May – Threat Intelligence Report
2026-05-04T20:52:35Z•524abf433e54ce872731c72290eddffc2826ca5447cdd4ec87cddaf184855590
ai-assisted-malwaredata-breachdata-leakagehandala-hackiran-linked-actorsoauth-compromiseransomwareransomware-as-a-servicesupply-chainsystembcteampcpthe-gentlementrueconfvectvoidlinkwiperzero-day
What happened
Collection of Check Point Research alerts and weekly threat intelligence (Mar–May 2026). Key items: Operation TrueChaos — active exploitation of a TrueConf zero‑day (CVE-2026-3502, CVSS 7.8) against SE Asian government targets; emergence of VECT ransomware-as-a-service (RaaS) that can act like a wiper and a reported partnership with TeamPCP; DFIR on The Gentlemen RaaS and SystemBC; multiple high‑impact breaches and supply‑chain incidents (Medtronic, Vercel via stolen OAuth tokens from Context.ai, Booking.com, Europa.eu/Trivy, Stryker, Navia Benefit Solutions); detailed analysis of Iran‑linked
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 524abf433e54ce872731c72290eddffc2826ca5447cdd4ec87cddaf184855590
- Enrichment time
- 2026-05-04T20:52:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.