Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks

A September 22, 2026 security-news digest covering multiple actively exploited and critical vulnerabilities, malware campaigns, supply-chain attacks, phishing operations, and enterprise security threats. The highest-risk items include unauthenticated remote code execution in Bifrost (CVE-2026-90898), actively exploited VeloCloud Orchestrator and Check Point management-server flaws, Linux ARM64 KVM host-memory access, SharePoint authenticated RCE, WordPress RCE issues, and Zyxel/Veeam exploitation. The digest also reports malicious npm packages, credential theft, endpoint-defense evasion, North