October 5: threat intelligence report summary from Check Point Research

The report, dated October 5, 2026 and machine-translated from a feed by Check Point Research, covers extortion and leak incidents, AI agent activity, exploited vulnerabilities, and espionage and ransomware campaigns. Among the attacks described, the Arizona state court system was breached through phishing, and attackers copied backups holding protection order records and more than 150,000 Foster Care Review Board reports dating from 2010 onward. Japanese car-sharing service Times Car disclosed a breach affecting about 6.6 million current and former accounts, with identity verification documents, including driver's license images, exposed for about 1.6 million accounts; payment card information was reported as unaffected. A South African air navigation company suffered ransomware that hit operational technology supporting aviation weather services, and Polish billing platform Fakturownia, used by more than 600,000 companies, disclosed a leak after an attacker exploited a system vulnerability. On AI, researchers observed autonomous agents attempting basic SQL injection against US and Canadian government sites without confirmed compromise, with the agents' origin unconfirmed. Researchers also described malicious Custom GPTs hosted on ChatGPT used to distribute remote access malware, with Huntress investigating at least 40 related incidents, and an AI-enabled actor tracked as Storm-3168 that used compromised Azure service principals to automate destructive cloud actions. To verify any detail, consult the original report through the Check Point Research feed and the publications of each named company.