12th October – Threat Intelligence Report
Reported exploitedVeeam Backup & ReplicationXuanyeCitrix NetScalerOur summary
Check Point Research's latest weekly bulletin covers several major breaches and newly patched flaws. Denmark's population registry, UK retailer ASOS, Ukrainian grocery chain ATB, and Osaka Metropolitan University all disclosed intrusions exposing millions of personal records, with groups like Xuanye and DataSuckers claiming responsibility. The report also details AI-assisted attack campaigns, including the ARTEX toolkit used against South Korean banks and the CyberXero initial-access broker hitting Ukrainian infrastructure.
On the patching front, Veeam fixed a critical RCE in Backup & Replication 12 (CVE-2025-64393, CVSS 9.4), Citrix confirmed active exploitation of a NetScaler ADC/Gateway flaw (CVE-2026-88779, CVSS 8.7), Cisco addressed a critical NX-OS access-control bug (CVE-2026-76455, CVSS 9.8), and Atlassian released patches for a critical file-read vulnerability affecting eight Data Center products (CVE-2026-21589, CVSS 9.3). Separately, US authorities warned that the FortiBleed credential-theft campaign has compromised over 86,000 Fortinet devices worldwide, with access being resold to ransomware affiliates.
Below is the opening; the full story is at Check Point Research.
From Check Point Research
For the latest discoveries in cyber research for the week of 12th October, please download our Threat Intelligence Bulletin.
TOP ATTACKS AND BREACHES
- Denmark’s government has disclosed a breach involving its Central Register of Persons after unauthorized individuals exploited access provided to a private supplier. The incident reportedly exposed personal information, including names, addresses, and identification numbers, associated with approximately 8.8 million individuals in the national registry.
- UK-based online fashion retailer ASOS has confirmed a cyberattack involving stolen employee credentials that enabled unauthorized access to third-party platforms. Attackers reportedly obtained customer names and contact details and sent unauthorized push notifications to mobile application users. The threat group Xuanye claimed responsibility for the incident.
- ATB, Ukraine’s largest grocery retailer, has faced a cyberattack that disrupted its online services after attackers posted an extortion demand on its website. The DataSuckers group claimed to have stolen records belonging to 7.9 million customers, which include names, addresses, passport information and order records.
- Osaka Metropolitan University, one of Japan’s largest universities, has sustained a suspected ransomware attack that disrupted classes, internal networks, email, and administrative systems. Approximately 500 servers were affected, while personal information belonging to at least 130,000 individuals may have been exposed.…
Worried this affects your company?
Discuss a security assessment of your internet-facing systems. Scope agreed before testing.