2nd March – Threat Intelligence Report
2026-03-04T20:26:25Z•5fb8ebd527733c43f70c522b8377186e925c2f1d7d03e890df1cc0e1f47af78c
CVE-2025-59536CVE-2025-8088CVE-2026-21852AI-generated-malwareKONNISicariiVoidLinkanthropic-claudeapi-token-exfiltrationeScanespionageransomwareremote-code-executionsupply-chain-compromisethreat-intel
What happened
Check Point Research published a set of March 2026 reports covering multiple high-impact findings: critical vulnerabilities in Anthropic’s Claude Code that enable remote code execution and API-token exfiltration (CVE-2025-59536, CVE-2026-21852); a targeted espionage campaign nicknamed “Amaranth-Dragon” weaponizing CVE-2025-8088 in Southeast Asia; and numerous threat intelligence briefs documenting breaches and supply-chain attacks (including a malicious eScan updater). Additional research details emergence of advanced AI-enabled malware (VoidLink), KONNI’s AI-generated PowerShell backdoors, Ra
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 5fb8ebd527733c43f70c522b8377186e925c2f1d7d03e890df1cc0e1f47af78c
- Enrichment time
- 2026-03-04T20:26:25Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.