
Check Point Reports 48% Rise in Global Cyber Attacks for September 2026
Organizations faced an average of 2,803 weekly cyber attacks in September 2026, marking a significant surge from last year, according to Check Point Research data.

Organizations faced an average of 2,803 weekly cyber attacks in September 2026, marking a significant surge from last year, according to Check Point Research data.

Canonical's Ubuntu resources are currently inaccessible due to a confirmed distributed denial of service attack targeting web and download services.

WorkNest Secure has secured CREST STAR-FS accreditation, validating its capacity to conduct intelligence-led red team assessments for high-risk financial services organizations.

A community-built launcher for Halo: The Master Chief Collection enables massive multiplayer matches, expanded modding, and dedicated servers for PC users.

Over half of top sites support post-quantum key exchange, but research shows this edge protection masks deeper enterprise infrastructure gaps.

Italian officials report mitigation of an ongoing attack on ministry systems while coordinating with EU partners to identify the responsible threat actors.

Federal authorities disrupted scanning and spear-phishing infrastructure used by the China-linked Flax Typhoon threat group, according to a report by Hackread.

Russian tech giant Yandex warns that its ru-central1-b cloud zone may not be restorable in the near future after a drone strike halted operations.

Federal agencies urge operators to secure Fortinet gateways as a credential-compromise campaign continues to harvest data from SSL VPN appliances globally.

The FBI warns that the FortiBleed attack campaign remains active, with SOCRadar reporting more than 86,644 compromised Fortinet FortiGate devices across 194 countries.

The Justice Department and FBI seized two hacking tools used by a Beijing-based firm to scan and breach critical infrastructure globally.

A high-severity vulnerability in Nvidia’s DCGM Exporter allows remote attackers to crash monitoring services and disrupt AI workloads.

The Danish government reported that attackers exploited legitimate access to the Central Person Register to steal sensitive personal data from millions of citizens.

The US State Department is seeking information on Zhang Yu, a director at Shanghai Firetech accused of leading the 2021 Microsoft Exchange Server attacks.

Threat actors used stolen maintainer credentials to inject malicious workflows into hundreds of repositories, stealing secrets and cloud keys.

A zero-click flaw in AnyDesk Linux 8.0.2 enables remote attackers to execute commands as root without user approval or authentication credentials.

The Department of Justice accuses Zohar Pinhasi of secretly funding ransomware gangs for decryption keys while billing victims for recovery services.

A new attack chain dubbed AgentCorruption allows attackers to hijack AI agents via a single prompt, leading to credential theft and lateral movement within AWS accounts.

Researchers link a fake video conferencing tool and abused GitHub repositories to a cyberespionage campaign targeting government entities in Israel and the Kurdistan Region of Iraq.

A new campaign by GhostAction has expanded to over 500 compromised accounts, injecting malicious workflows into tens of thousands of repositories since October 2026.

Cybercriminals are exploiting visual similarities between rare Cyrillic and Latin characters to create deceptive URLs in Chromium-based browsers, according to a report by The Register.

Researchers found pre-installed malware on low-cost Android phones before users powered them on, targeting MediaTek hardware.

Cybercriminals compromised three country-code namespaces to obtain certificates for impersonating trusted services, according to new research from Malwarebytes Labs.

Researchers confirm the ASOS data breach includes shopping search history alongside personal details, raising phishing risks for customers.