Bulletin published on October 12, 2026 that reproduces, through machine translation, a weekly report from the Check Point Research feed on incidents, campaigns, vulnerabilities and trends. The information consists of reports and claims, not independent verification.
Denmark: a breach of the Central Person Register after access granted to a private vendor was exploited; reports point to about 8.8 million people affected. ASOS: a cyberattack using stolen employee credentials and unauthorized push notifications; the Xuanye group claimed the incident. ATB, a Ukrainian grocery retailer: online services disrupted after an extortion demand was posted on its site. The DataSuckers group claimed to have stolen 7.9 million customer records. Osaka Metropolitan University: an alleged ransomware attack affecting about 500 servers and possible exposure of data of 130,000 people.
AI: an AI-assisted campaign using the ARTEX toolkit against South Korean financial institutions; phishing aimed at AI email assistants using hidden prompt injections in HTML comments and invisible text; and CyberXero, an AI-augmented initial access broker that reportedly hit Ukrainian energy infrastructure and obtained data on more than 628,000 people.
Vulnerabilities: Veeam released fixes for Backup & Replication version 12, including CVE-2025-64393 (CVSS 9.4), which allows remote code execution by low-privileged backup users.
To verify, consult the original report at the cited source and the notices from the affected organizations and the vendor before acting.