4th May – Threat Intelligence Report
2026-05-06T20:52:31Z•db4d1e2e41928e2b2826b54c6a8fdb9d36e61bef5f68eb9e542c6aa8ff1eca6a
AI-assisted malwareCVE-2026-3502ChatGPT data leakageDFIRHandala HackIranian threat actorOAuth token compromiseRaaSSystemBCTeamPCPThe GentlemenTrueConfVECTVoidLinkdata breachransomwaresupply-chain attackwiperzero-day
What happened
Check Point Research weekly reports and investigations (Mar–May 2026) describe multiple high-impact incidents and research findings: a TrueConf zero-day (CVE-2026-3502, CVSS 7.8) actively exploited in targeted attacks against Southeast Asian government entities (Operation TrueChaos); the emergence and evolution of VECT RaaS (ransomware-as-a-service) that has exhibited wiper-like behavior and links to TeamPCP; multiple large data breaches and compromises (Medtronic, Vercel via stolen OAuth tokens, Booking.com, Stryker) including supply‑chain and OAuth-token based access; analysis of Iranian-alg
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- checkpoint_research
- Record identifier
- db4d1e2e41928e2b2826b54c6a8fdb9d36e61bef5f68eb9e542c6aa8ff1eca6a
- Enrichment time
- 2026-05-06T20:52:31Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.