Skip to content

Check Point Research report: threats on October 12

The October 12 weekly report covers breaches, AI-assisted campaigns and security fixes, including a critical vulnerability in Veeam Backup & Replication 12.

By Wendelmaques ·

Source: Relatório de inteligência de ameaças de 12 de outubro (research.checkpoint.com). Text prepared with AI from this source.

What happened and what to do

In its October 12, 2026 report, Check Point Research compiled incidents and trends observed that week. Cases include the exposure of data belonging to about 8.8 million people in Denmark’s civil register after a vendor’s access was abused; stolen credentials used in an attack on ASOS; and service disruptions at Ukrainian retailer ATB and Osaka Metropolitan University. The report also describes AI-assisted campaigns targeting South Korean financial institutions and Ukrainian energy infrastructure, as well as phishing that uses hidden HTML instructions aimed at AI email assistants. On security fixes, it highlights CVE-2025-64393, a critical remote code execution flaw in Veeam Backup & Replication 12, rated CVSS 9.4.

A practical response is to review vendor access, reduce privileges on backup accounts, rotate exposed credentials and audit access logs for third-party services. A company can also prioritize Veeam updates, test defenses against phishing and malicious instructions in content processed by AI assistants, and monitor for signs of misuse. Wendelmaques can assess exposure and shape these measures around the organization’s systems and processes.

How the consultancy can help

Wendelmaques can assess vendor access, privileged accounts, phishing exposure and patch status, then define a scoped implementation of controls and monitoring, including ongoing operation for the company’s environment.

Next step

Send a short description of the systems involved and your concern; Wendelmaques can propose a diagnosis and a suitably scoped implementation.

Looking for something else?Frequently asked questionsGuidesContact