Check Point says voters struggle to tell real campaign outreach from fraud, citing election-office warnings between July and September. Its researchers saw no activity aimed at voting systems or vote counting; the exposure they describe is in messages sent to voters.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+15
- Incentives55
- Confidence50
Check Point says organizations averaged 2,803 cyber attacks a week in September, up 48% on a year earlier. The figures come from the vendor's own count, and they support checking mail link filtering and AI prompt controls before spending anything new.
Reality
- Evidence35
- Adoption
- Insufficient
- Hype gap+20
- Incentives80
- Confidence45
South Africa's ATNS, which runs air traffic control for about 10% of the world's airspace, found early-stage ransomware tooling in a weather OT network. The state operator says its team stopped the attack yet is seeking outside forensics to learn how the attackers got in.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 60%
- Investor
- Investor 18%
Reality
- Evidence60
- Adoption
- Insufficient
- Hype gap+20
- Incentives35
- Confidence58
Check Point Research flagged 6.5% of September's 1,284 new Amazon- and Prime Day-themed domains as malicious or suspicious, about one in 16. Phishing aimed at the October 6-7 sale is already live, using old lures on batch-registered lookalike names that standard mail and DNS filtering is built to catch.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+20
- Incentives70
- Confidence40
TASK#STOMP, a Windows backdoor researchers dissected, uploads a victim's business documents and then stays to copy each new or edited one. Loss from a single infection keeps growing until someone finds and removes it.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+5
- Incentives
- Insufficient
- Confidence45
CVE-2026-91843 lets an attacker with no credentials run code as root through the login process, and Check Point has published indicators of compromise while saying it has seen no exploitation in the wild.
Perspective Coverage
4 publishers
- Builder
- Builder 16%
- Operator
- Operator 75%
- Investor
- Investor 9%
Reality
- Evidence80
- Adoption
- Insufficient
- Hype gap+10
- Incentives
- Insufficient
- Confidence78
The advisory confirming attacks on a Security Gateway VPN flaw three days after its September 9 fix also carries the first patch for a management path traversal that was used in targeted attacks in late July.
Perspective Coverage
6 publishers
- Builder
- Builder 21%
- Operator
- Operator 70%
- Investor
- Investor 9%
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap+5
- Incentives60
- Confidence70
Check Point's strongest attacker flipped TypeSafe AI's Jev decision model from high risk to invest in 25 of 27 runs, at about 50 cents a break. Marking the document untrusted made no difference, and Jev lacks the reasoning-effort setting that raised attack costs in the comparison models.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+18
- Incentives72
- Confidence57
Check Point followed the chain from a reply under a verified airline post to a WhatsApp thread to a half-finished $500 transfer, and counted thousands of impersonation accounts with hundreds more appearing daily.
Reality
- Evidence55
- Adoption35
- Hype gap+20
- Incentives70
- Confidence45
The vendor's sidecar reads an agent's execution trace and blocks each tool call before it runs. Check Point says the check adds under 100 milliseconds because the expensive context work happens while the agent is still working.
Reality
- Evidence34
- Adoption
- Insufficient
- Hype gap+38
- Incentives88
- Confidence58
Exploit windows in the Gulf have fallen from days to hours, Check Point says. That breaks patch schedules and phishing training written for a slower adversary, whatever the AI labelling.
Reality
- Evidence42
- Adoption48
- Hype gap+28
- Incentives72
- Confidence44