AnalysisPublished 25 May 2026

25th May · Threat Intelligence Report

Source Check Point Research

Mentions 4 CVEs

Mentioned vulnerabilities

Description

For the latest discoveries in cyber research for the week of 25th May, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES 7-Eleven, the global convenience store chain, confirmed a breach after an unauthorized access to systems used for franchisee documents. ShinyHunters claimed responsibility and said it stole more than 600,000 Salesforce records containing personal […] The post 25th May – Threat Intelligence Report appeared first on Check Point Research .

Impact

The impact includes confirmed data breaches resulting in theft of personal and corporate information (7-Eleven, GitHub, Grafana Labs), exposure of internal source code, and potential risks to affected individuals and organizations. The phishing campaigns threaten Microsoft 365 users by enabling persistent unauthorized access to cloud services. The vulnerabilities mentioned have been actively exploited or targeted in the wild, potentially allowing privilege escalation, denial of service, code execution, or data theft. However, no direct customer-facing service disruptions were reported for some breaches. The report indicates ongoing risks from AI-driven attacks and supply chain compromises.

Defensive guidance

Several vulnerabilities referenced in the report have official patches available from vendors, including Microsoft, Trend Micro, and Drupal. Organizations should apply these updates promptly. Check Point IPS and Threat Emulation products provide protection against some disclosed threats. For cloud services like Microsoft 365, users should be aware of phishing risks and implement recommended security controls. The report does not specify any unpatched vulnerabilities or zero-day exploits requiring immediate emergency action. Users should consult vendor advisories for detailed remediation guidance and maintain vigilance against phishing and supply chain attacks.

Summary

The report details multiple cybersecurity incidents and vulnerabilities identified in late May 2026. Key events include a data breach at 7-Eleven involving unauthorized access to franchisee systems and theft of Salesforce records by the ShinyHunters group, a GitHub breach through a weaponized Visual Studio Code extension compromising employee devices and internal repositories, and a Grafana Labs breach via a compromised GitHub token. It also covers active phishing-as-a-service kits targeting Microsoft 365 users and the rise of AI-driven cyberattacks. The report references patched vulnerabilities such as CVE-2026-41091 and CVE-2026-45498 in Microsoft Defender, CVE-2026-34926 in Trend Micro Apex One, and CVE-2026-9082 in Drupal. Protection measures like Check Point IPS and Threat Emulation are noted for some threats. The report serves as a broad situational awareness update rather than a detailed analysis of a single vulnerability.

References

research.checkpoint.com/2026/25th-may-threat-intelligence-report/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 25 May 2026, 19:34 UTC

References

Community reviews

Related threats