Cynet’s September 2026 CTI Report gives every stakeholder, from CISOs to SOC analysts, the intelligence they need to act on emerging threats. This month, ShinyHunters hijacked Clop’s leak site, demanded an eight-figure payment from the gang, then turned on the FBI. Attackers also exploited an F5 BIG-IP zero-day with more than 14,000 devices exposed, and ransomware groups claimed 789 victims, led by The Gentlemen. Inside, the CyOps team breaks down three new malware families, including Majinahanashi, a ransomware that cuts security agents off from their cloud service while leaving them running.