For the latest discoveries in cyber research for the week of 20th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES F5 has disclosed a cyber attack, reportedly carried out by a nation-state actor with long-term, persistent access to critical product development environments. The attacker exfiltrated files that included portions of BIG-IP source […] The post 20th October – Threat Intelligence Report appeared first on Check Point Research .
A comprehensive guide to configuring privacy and security in ChatGPT: data collection and usage, memory, Temporary Chats, connectors, and account security.
Attackers are embedding blocks of links that lead to porn sites, online casinos, and the like. We explain their objective, and how to protect your website.
Summary Check Point Research (CPR) identified a security vulnerability in January 2025 affecting the new Rust-based kernel component of the Graphics Device Interface (commonly known as GDI) in Windows. We promptly reported this issue to Microsoft and they fixed the vulnerability starting with OS Build 26100.4202 in the KB5058499 update preview released on May 28th 2025. In the following sections, we […] The post Denial of Fuzzing: Rust in the Windows kernel appeared first on Check Point Research .
For the latest discoveries in cyber research for the week of 13th October, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Qilin ransomware group has claimed responsibility for targeting Asahi, Japan’s largest brewing company, that had been hacked on September 29th. The attack resulted in the exfiltration of over 9,300 files totaling 27GB […] The post 13th October – Threat Intelligence Report appeared first on Check Point Research .
BIETA and its subsidiary CIII research develop and sell technologies supporting China’s intelligence, counterintelligence, and military operations. The post Security Firm Exposes Role of Beijing Research Institute in China’s Cyber Operations appeared first on SecurityWeek .
A recent cyberattack on Red Hat's GitLab instance by the Crimson Collective resulted in the theft of approximately 570GB of compressed data, including 28,000 internal repositories and sensitive customer engagement reports containing infrastructure and authentication details. This breach exposes critical intellectual property and sensitive information across multiple sectors. Additional significant incidents include ransomware and data breaches affecting global organizations, highlighting a trend of sophisticated attacks targeting supply chains, manufacturing, and service providers. Notably, vulnerabilities in widely used software such as VMware Aria Operations, Linux sudo, and Fortra’s GoAnywhere MFT have been actively exploited, increasing the attack surface. European organizations relying on Red Hat and related open-source infrastructure are at risk of indirect impacts from leaked credentials and infrastructure details. The threat landscape underscores the need for targeted mitigation strategies focusing on supply chain security, privileged access management, and rapid patching of critical vulnerabilities. Given the scale and sensitivity of the stolen data, the threat severity is assessed as high for European entities.
Researchers disclosed 'CometJacking,' a prompt injection attack targeting Perplexity's Comet AI browser that uses a malicious URL to hijack the AI assistant and exfiltrate sensitive data such as emails and calendar entries. The attack bypasses existing data protections using simple Base64 encoding and leverages the browser's authorized access to connected services, highlighting new security risks in AI-native browsers.
Signal has introduced Sparse Post-Quantum Ratchet (SPQR), a new cryptographic mechanism designed to enhance resistance against quantum computing attacks by integrating post-quantum key encapsulation with its existing double ratchet system. This hybrid 'Triple Ratchet' approach ensures forward secrecy and post-compromise security, with formal verification and continuous validation underpinning its implementation. The rollout will be gradual and backward compatible, requiring users only to keep their clients updated.
The article details the Netherlands' leadership role in the EuroQCI initiative to build a secure quantum communication network across Europe, leveraging both satellite and fiber-optic quantum links. It highlights the deployment of a new optical ground station and the integration of quantum key distribution (QKD) technology to protect critical infrastructure and governmental communications. This development represents a significant advancement in quantum-secured communications for EU member states.
Rhadamanthys is a sophisticated, multi-modular malware family sold on underground markets since September 2022, developed by experienced threat actors. It builds upon previous malware projects by the same authors, indicating continuous evolution and refinement. Although no known exploits are currently observed in the wild, its high complexity and modularity suggest it can be adapted for various attack scenarios, including espionage, data theft, or sabotage. The malware's design allows it to evade detection and maintain persistence, posing a significant risk to targeted organizations. European entities, especially those in critical infrastructure, finance, and government sectors, could be prime targets given the malware's capabilities and the strategic value of these sectors. Mitigation requires proactive threat hunting, network segmentation, and monitoring for indicators of compromise linked to Rhadamanthys. Countries with advanced digital economies and strategic geopolitical importance, such as Germany, France, the UK, and the Netherlands, are likely to be most affected. Given the malware's high potential impact on confidentiality, integrity, and availability, combined with its ease of adaptation by skilled actors, the suggested severity is high. Defenders should prioritize awareness of this threat, implement advanced detection mechanisms, and maintain updated incident response plans.
For the latest discoveries in cyber research for the week of 29th September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Stellantis, Automotive maker giant which owns Citroën, FIAT, Jeep, Chrysler, and Peugeot, has suffered a data breach that resulted in exposure of North American customer contact information after attackers accessed a third-party […] The post 29th September – Threat Intelligence Report appeared first on Check Point Research .
For the latest discoveries in cyber research for the week of 22nd September, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Several major European airports including Heathrow, Berlin, Brussels, Dublin, and Cork have experienced a cyber-attack, resulting in disruptions to electronic check-in and baggage drop systems using Collins Aerospace’s MUSE software. The incident […] The post 22nd September – Threat Intelligence Report appeared first on Check Point Research .
