Cyber Threat Intel Daily Briefing — 2026-09-13

CYBER THREAT INTEL

DAILY BRIEFING · 2026-09-13 12:15 UTC · REPORT BRIEF-20260913-121553

OPEN // LE

01

Dutch NCSC: Critical Check Point VPN Flaws Exploitation Is Imminent

The Dutch Nationaal Cyber Security Centrum warned of imminent exploitation of two critical flaws in Check Point VPN tracked as CVE-2026-85102 and CVE-2026-85103, both rated 9.8 and potentially enabling unauthenticated remote code execution in firewall and management products. The advisory urges immediate patching of affected Security Gateways and associated management appliances.

SRC: BleepingComputer 2026-09-12T10:14:32-0400 https://www.bleepingcomputer.com/news/security/dutch-ncsc-critical-check-point-vpn-flaws-exploitation-is-imminent/

02

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

Microsoft disclosed two campaigns in which threat actors abuse third-party email delivery infrastructure to blast financial fraud scam messages and use passkey-themed social engineering to breach cloud environments. Over a million scam emails were sent between August 3-5, 2026, with campaigns linked to extortion groups including ShinyHunters and Helix.

SRC: The Hacker News 2026-09-13T15:41:48+0530 https://thehackernews.com/2026/09/attackers-use-passkey-phishing-to.html

[ SOURCE ] OpenPhish (18 indicator(s))