Check Point finds real campaign outreach and voter-verification scams hard to tell apart
Check Point says voters struggle to tell real campaign outreach from fraud, citing election-office warnings between July and September. Its researchers saw no activity aimed at voting systems or vote counting; the exposure they describe is in messages sent to voters.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence50
Check Point counts 2,803 weekly attacks per organization in September, up 48% on last year
Check Point says organizations averaged 2,803 cyber attacks a week in September, up 48% on a year earlier. The figures come from the vendor's own count, and they support checking mail link filtering and AI prompt controls before spending anything new.
Reality
- Evidence35
- Adoption
- Not scored
- Hype gap+20
- Incentives80
- Confidence45
South Africa's ATNS, which runs air traffic control for about 10% of the world's airspace, found early-stage ransomware tooling in a weather OT network. The state operator says its team stopped the attack yet is seeking outside forensics to learn how the attackers got in.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 60%
- Investor
- Investor 18%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives35
- Confidence58
Check Point flags one in 16 new Amazon-themed domains as malicious or suspicious before Prime Day
Check Point Research flagged 6.5% of September's 1,284 new Amazon- and Prime Day-themed domains as malicious or suspicious, about one in 16. Phishing aimed at the October 6-7 sale is already live, using old lures on batch-registered lookalike names that standard mail and DNS filtering is built to catch.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+20
- Incentives70
- Confidence40
TASK#STOMP backdoor keeps copying each new or edited document after its first sweep
TASK#STOMP, a Windows backdoor researchers dissected, uploads a victim's business documents and then stays to copy each new or edited one. Loss from a single infection keeps growing until someone finds and removes it.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence45
CVE-2026-91843 lets an attacker with no credentials run code as root through the login process, and Check Point has published indicators of compromise while saying it has seen no exploitation in the wild.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 75%
- Investor
- Investor 9%
Reality
- Evidence80
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence78
The advisory confirming attacks on a Security Gateway VPN flaw three days after its September 9 fix also carries the first patch for a management path traversal that was used in targeted attacks in late July.
Perspective Coverage
6 publishers
- Builder
- Builder 21%
- Operator
- Operator 70%
- Investor
- Investor 9%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+5
- Incentives60
- Confidence70
Check Point flipped Jev's high-risk verdict to low for about 50 cents a break
Check Point's strongest attacker flipped TypeSafe AI's Jev decision model from high risk to invest in 25 of 27 runs, at about 50 cents a break. Marking the document untrusted made no difference, and Jev lacks the reasoning-effort setting that raised attack costs in the comparison models.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+18
- Incentives72
- Confidence57
Fake support accounts are answering airline complaints under the brand's verified posts
Check Point followed the chain from a reply under a verified airline post to a WhatsApp thread to a half-finished $500 transfer, and counted thousands of impersonation accounts with hundreds more appearing daily.
Reality
- Evidence55
- Adoption35
- Hype gap+20
- Incentives70
- Confidence45
Check Point moves the agent guardrail into the tool-call path at a claimed sub-100ms cost
The vendor's sidecar reads an agent's execution trace and blocks each tool call before it runs. Check Point says the check adds under 100 milliseconds because the expensive context work happens while the agent is still working.
Reality
- Evidence34
- Adoption
- Not scored
- Hype gap+38
- Incentives88
- Confidence58
The UAE says attack attempts quadrupled to 800,000 a day. The number that matters is hours.
Exploit windows in the Gulf have fallen from days to hours, Check Point says. That breaks patch schedules and phishing training written for a slower adversary, whatever the AI labelling.
Reality
- Evidence42
- Adoption48
- Hype gap+28
- Incentives72
- Confidence44