Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

23rd March – Threat Intelligence Report For the latest discoveries in cyber research for the week of 23rd March, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Navia Benefit Solutions, a United States-based employee benefits administrator, has disclosed a breach affecting more than 2.6 million individuals after unauthorized access and potential data exfiltration occurred between December 22, 2025 and […] The post 23rd March – Threat Intellig…

https://research.checkpoint.com/2026/23rd-march-threat-intelligence-report

sha256:f700fcf0019f3d176cb7bfb46d056f2369b1bd52e9df65b8ec70003cf51044f0

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve6
md50
url0
ipv40
ipv60
sha10
domain1
sha2560
malware_token0
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
cve	CVE-2026-20131	Open →
domain	claude.ai	Open →
cve	CVE-2026-33017	Open →
cve	CVE-2026-3564	Open →
cve	CVE-2026-22557	Open →
cve	CVE-2025-66376	Open →
cve

Malware families

Allowlist token matches only.

None extracted.

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

MuddyWater

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports