19th October – Threat Intelligence Report
2026-10-19T20:52:18Z•d48742d42a79abe0284ae2249a1787f0511d5e5549ada4d2c1a04c0067cc6130
CVE-2026-35029CVE-2026-59823AI-securityEarth-BerberokaJSCealLLMLinux-malwareLiteLLMSEO-poisoningauthorization-bypasscritical-infrastructurecryptocurrency-theftdata-breachphishingprompt-injectionpublic-sectorransomware-and-extortionsupply-chain-riskthreat-intelligence
What happened
Check Point Research reporting from August–October 2026 covers major breaches, phishing and cyberattacks against public-sector, utility, aviation, legal, identity-verification and government organizations; AI security risks including prompt-injection techniques and cross-account sandbox leakage; LiteLLM authorization vulnerabilities fixed in version 1.83.9; and malware campaigns such as JSCeal cryptocurrency theft and Earth Berberoka-linked Linux compromises. The most directly actionable vulnerability disclosure concerns unauthorized authenticated modification of LiteLLM configuration via //
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- d48742d42a79abe0284ae2249a1787f0511d5e5549ada4d2c1a04c0067cc6130
- Enrichment time
- 2026-10-19T20:52:18Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.