28th September – Threat Intelligence Report
2026-09-28T20:52:18Z•9ee1c082168babd98503f394a687884d4ba57d6798d5240761cc6adee46d49c3
AI-securityChatGPTClickFixEarth-BerberokaJSCealLLM-securityLinux-malwareMicrosoft-DefenderPowerShellSEO-poisoningShinyHuntersVPN-exploitationWordPress-compromisecross-account-data-leakagecryptocurrency-stealerdata-breachkernel-driver-abuseprompt-injectionransomwarethreat-intelligence
What happened
Check Point Research’s September 2026 feed covers major breaches and threat activity, including ShinyHunters’ FBIjobs.gov defacement and alleged data theft, exploitation of a VPN appliance affecting Japan’s Digital Agency, AI-assisted attacks and prompt-injection techniques, cross-account data leakage in ChatGPT sandboxes, Earth Berberoka-linked compromises of Brazilian government sites, the JSCeal cryptocurrency stealer, abuse of Microsoft Defender’s signed remediation driver for kernel-level file and registry operations, StopAndProtect ransomware campaigns using ClickFix and PowerShell, and
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- 9ee1c082168babd98503f394a687884d4ba57d6798d5240761cc6adee46d49c3
- Enrichment time
- 2026-09-28T20:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.