Sunday 13 September 2026

Major Incidents or Breaches

• Microsoft has disclosed two campaigns where threat actors leveraged third-party email delivery services to distribute financial fraud scams and used passkey-themed phishing to compromise Microsoft cloud accounts and exfiltrate data ^[1].

Newly Discovered Vulnerabilities

• The US Cybersecurity and Infrastructure Security Agency (CISA) has added five actively exploited vulnerabilities affecting JFrog Artifactory, ConnectWise ScreenConnect, and MikroTik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog ^[2].
• The Dutch National Cyber Security Centre (NCSC) has issued a warning about imminent exploitation of two critical vulnerabilities in Check Point VPN products, identified as CVE-2026-85102 and CVE-2026-85103 ^[3].

Notable Threat Actor Activity

• Threat actors have been observed abusing third-party email infrastructure to conduct financial fraud scams and using phishing campaigns themed around passkeys to hijack Microsoft cloud accounts ^[1].

Sources

1. Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data - thehackernews.com
2. CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV - thehackernews.com
3. Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent - bleepingcomputer.com