AnalysisPublished 13 Apr 2026

13th April · Threat Intelligence Report

Source Check Point Research

Mentions 3 CVEs

Mentioned vulnerabilities

Description

For the latest discoveries in cyber research for the week of 13th April, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The Los Angeles Police Department has reported a data breach involving a digital storage system used by the L.A. City Attorney’s Office. The exposure included 7.7 terabytes and more than 337,000 files, […] The post 13th April – Threat Intelligence Report appeared first on Check Point Research .

Impact

The impact includes large-scale data breaches exposing sensitive personal and internal information, operational disruptions in healthcare and political organizations due to ransomware, theft of cryptocurrency assets worth millions, and potential full compromise of affected servers via critical vulnerabilities. AI-related attacks pose risks of silent data exfiltration and manipulation of autonomous agents. Active exploitation of critical vulnerabilities has led to remote code execution and unauthorized access, increasing risk to affected organizations. Supply chain attacks and hack-for-hire campaigns further expand the threat landscape, targeting diverse sectors and geographies.

Defensive guidance

Patches and hotfixes are available for several critical vulnerabilities mentioned, including Ivanti CVE-2026-1340, Marimo CVE-2026-39987, and Fortinet CVE-2026-35616; organizations should apply these updates promptly. Adobe Reader zero-day exploitation is ongoing; users should follow vendor guidance and apply any available mitigations. Check Point IPS and Endpoint solutions provide protection against some identified threats such as ransomware and specific exploits. Organizations should review the detailed vendor advisories linked in the report for comprehensive remediation steps. Given the broad scope of threats, targeted mitigation should focus on applying official patches and employing recommended security controls for the specific vulnerabilities and attack vectors described.

Summary

The report compiles recent cyber threat intelligence covering multiple breaches, ransomware attacks, AI-targeted exploits, and critical vulnerabilities actively exploited in the wild. It details a significant data breach at the Los Angeles Police Department involving sensitive files, ransomware impacts on healthcare and political entities, and cryptocurrency theft. It highlights critical vulnerabilities such as Ivanti Endpoint Manager Mobile code injection (CVE-2026-1340) with a CVSS of 9.8, Adobe Reader zero-day enabling local data theft, Marimo Python notebook remote code execution (CVE-2026-39987), and Fortinet FortiClient EMS improper access control (CVE-2026-35616), all with available patches or hotfixes. The report also discusses AI supply chain risks, malicious npm packages in software supply chains, and hack-for-hire campaigns targeting Middle East and North Africa. Protection technologies like Check Point IPS and Endpoint are noted as effective against some threats.

References

research.checkpoint.com/2026/13th-april-threat-intelligence-report/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 13 Apr 2026, 13:17 UTC

References

Community reviews

Related threats