28th September – Threat Intelligence Report
2026-09-29T20:52:18Z•d14dbe1c301f539d728295f904adfda8430332683b2d45a9621eb5ad8f8d7d9f
AI securityChatGPTClickFixEarth BerberokaJSCealLLMLinux malwareMicrosoft DefenderPowerShellSEO poisoningShinyHuntersStopAndProtectVPN exploitationWordPress compromisecritical infrastructurecryptocurrency stealerdata breachdata leakagekernel driver abuseprompt injectionransomwarethreat intelligence
What happened
Check Point Research’s September 2026 feed covers major breaches and cybercrime campaigns, including ShinyHunters activity against FBIjobs.gov, exploitation of a VPN appliance affecting Japan’s Digital Agency, identity and court-platform data breaches, ransomware trends, and attacks against government and transportation organizations. It also details AI security issues such as prompt-injection techniques and cross-account data leakage in ChatGPT; malware research on JSCeal cryptocurrency stealer and StopAndProtect ransomware; a Chinese-speaking Linux campaign targeting Brazilian sites; and the
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- d14dbe1c301f539d728295f904adfda8430332683b2d45a9621eb5ad8f8d7d9f
- Enrichment time
- 2026-09-29T20:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.