Response, New York. Noah Park: Check Point Patches Actively Exploited Management Server Path Traversal.
Always First. Fast SOC News.
Threat intelligence and threat hunting as they inform daily security operations.
THREAT INTEL · SINGAPORE
SINGAPORE - Arista Advisory 0183, published September 22, 2026 and revised to 1.1 on September 23, 2026, covers CVE-2026-93952 in the on-premises VeloCloud Orchestrator. The flaw was discovered externally and is actively exploited.
Priya Shah, Threat Intel, Singapore
Read the story
THREAT INTEL · SAN JOSE
SAN JOSE - Cisco Talos researchers have documented CLOSEDQUORUM, which they describe as the first publicly reported Windows implant in their knowledge that uses a panel of commercial large language models as tactical command and control after deployment. The finding appears in a Talos blog by Ryan Fetterman dated Tuesday, September 22, 2026, and was uncovered with CAIRN, Talos' new open-source toolkit for tracking AI-integrated malware. Talos has not confirmed in-the-wild deployment.
Priya Shah, Threat Intel, Singapore
Read the storyText desk note. No incident photograph.