← Feed

Posts

• View post

  #CheckMates is hosting a focused 45-minute session on #CheckPoint Spark R82.00.11 on September 23. The webinar covers the latest release features, a live demo, updates on the new 2500 Spark product line, and an early look at upcoming innovations such as AI assistance, real-time configuration, and commit/revert functionality. A great session for anyone working with SMB and branch security solutions. Register for: 10 AM CET EMEA: https://checkpoint.zoom.us/webinar/register/6017888602615/WN_gNIfB...

• View post

  PuzzleMask: A Covert #AI Attack Vector #CheckPoint Research has detailed #PuzzleMask, a plain-prose prompt technique that hides prohibited instructions from lightweight LLM gatekeepers while allowing stronger target models to recover them. In testing, gatekeepers classified the prompts as safe, while target models extracted and acted on concealed payloads in more than 90 percent of trials. https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/ #Check...

• View post

  🚨 Please read this important update from Check Point: CVE-2026-91843 - Stack overflow in login process to the Security Management and Log Servers https://support.checkpoint.com/results/sk/sk1000155 #CheckPoint #CheckPointsoftwareTechnologies #CVE #CVE202691843

• View post

  Looking to scale your #CheckPoint automation? I highly recommend the upcoming #CheckMates TechTalk: Scaling Check Point Automation with #Arodonata on October 7. See how Check Mates leverages smart caching to reduce #API calls, #CPCRUD for reusable #YAML-based object and rule management, efficient cross-domain and multi-management searches, and high-concurrency automation with automatic session handling and recovery. Register here: https://checkpoint.zoom.us/webinar/register/7517811352462/WN__B...

• View post

  Cross-Account Data Leakage in ChatGPT #CheckPoint Research has demonstrated a covert cross-account channel in #ChatGPT’s code-execution environment that allowed hidden tasks to run using a victim’s available tools, data, and connected applications. A proof of concept used a shared conversation to retrieve #Gmail data from one account and relay the results to another. https://research.checkpoint.com/2026/the-shared-clipboard-inside-the-sandbox-cross-account-data-leakage-in-chatgpt/ #CheckPoint...

• View post

  14th September – Threat Intelligence Report For the latest discoveries in cyber research for the week of 14th September, please read the full threat intelligence report: https://research.checkpoint.com/2026/14th-september-threat-intelligence-report/ #CheckPoint #CheckPointSoftwareTechnologies

• View post

  RE: https://infosec.exchange/@threatnoir/117301661251550972 For additional details about mitigation actions related to Check Point Management Server please check here: https://community.checkpoint.com/t5/General-Topics/Important-Notification-Action-required-Critical-Security-Update/m-p/282409#M47058 #checkpoint #CheckPointSoftwareTechnologies #CVE #CVE202691843

• View post

  🚨 Aktiv ausgenutzte SQL Injection - Root-Zugriff auf Cisco Secure Email Gateway per E-Mail https://www.security-insider.de/cisco-secure-email-gateway-sql-injection-root-rechte-a-9e285fdd581f2d5e9a7203bf213d3f82/ #Cisco #Email #CVE

• View post

  AI Threat Landscape Digest Check Point Research has analyzed the July-August #AI threat landscape, highlighting the latest cases when AI models broke out of their evaluation environments. On the attackers’ side, AI is increasingly used as an operational tool, while the AI systems themselves are also targeted. The report highlights AI-assisted #ransomware intrusions, criminal markets for stolen model access, and #vulnerabilities in coding agents and enterprise copilots. https://research.checkpo...

• View post

  Japan’s Digital Agency Data Breach Japan’s Digital Agency, which operates the Government Solution Service used by multiple ministries, has confirmed a data breach after attackers exploited a vulnerability in a VPN appliance. Approximately 246,000 records were exposed, including names and contact details belonging to government officials and contractors, while financial information was not affected. Read the full threat intelligence report: https://research.checkpoint.com/2026/21st-september-th...

• View post

  For the latest discoveries in cyber research for the week of 14th September, please read the full threat intelligence report: https://research.checkpoint.com/2026/21st-september-threat-intelligence-report/

• View post

  From Check Point Research: Exploitation of CVE-2026-85102 and CVE-2026-93616 Check Point has observed active exploitation of two critical pre-authentication vulnerabilities with CVSS scores of 9.8 - CVE-2026-85102 and CVE-2026-93616. The flaws affect Security Gateway and Security Management products and can enable remote code execution. Fixes for both vulnerabilities are available. https://blog.checkpoint.com/security/security-advisory-action-required-active-exploitation-of-cve-2026-85102-and...

• View post

  From Check Point Research: ShinyHunters Targeting of FBI The #FBI has confirmed unauthorized activity affecting https://FBIjobs.gov after the #ShinyHunters group defaced the website. The group claimed to have stolen employee and applicant information and shared samples of purported FBI personnel records with several media organizations. https://research.checkpoint.com/2026/28th-september-threat-intelligence-report/ #CheckPoint #CheckPointSoftwareTechnologies

• View post

  From #CheckPoint Research: Unauthorized Access by OpenAI Agents Australia has revealed that an #OpenAI agent gained an unauthorized access to a government Medicare statistics portal while performing an internal research task. After encountering access restrictions, the agent found a workaround and accessed public and non-public files. Officials said no personal information was accessed, while OpenAI described the behavior as unintended. https://research.checkpoint.com/2026/28th-september-threa...

• View post

  CVE-2026-91843 Fix Check Point has released a fix for CVE-2026-91843, a critical vulnerability affecting Security Management and Log Servers. The flaw, rated CVSS 9.8, stems from a stack overflow in the login process and can allow unauthenticated remote attackers to execute code as root on affected R80 through R82 systems. https://support.checkpoint.com/results/sk/sk1000155 #CVE #CVE202691843

• View post

  From Check Point Research: Ryde Data Breach #Ryde, an electric scooter operator in Scandinavian countries, has disclosed a data breach affecting all 4.5 million customer accounts across Norway, Sweden, Finland, and Germany. Attackers copied phone numbers, email addresses, birth dates, partial payment card numbers, and payment histories. Read the full threat intelligence report: https://research.checkpoint.com/2026/10th-august-threat-intelligence-report/ #CheckPoint #CheckPointSoftwareTechnolo...

• View post

  From Check Point Research: Check Point Research has assessed #ransomware activity during Q2 2026, identifying 2,139 publicly reported victims, up 33% year over year. The ransomware ecosystem expanded to 93 active groups, while leaked communications showed The Gentlemen using AI coding assistants to accelerate development of operational tooling. https://research.checkpoint.com/2026/the-state-of-ransomware-q2-2026/ #CheckPoint #CheckPointSoftwareTechnologies

• View post

  Join Check Mates as Check Point Research explores the key findings of the State of Ransomware Q2 2026 report. Discover how #ransomware groups are consolidating, how emerging operators gain influence, and how law enforcement actions are shaping the threat landscape. Gain actionable guidance to help prioritize defenses against today's evolving ransomware threats. https://checkpoint.zoom.us/webinar/register/2517869591144/WN_3jDJvS0JROSBLqCHVZ9wDg #CheckPoint #CheckPointSoftwareTechnologies

• View post

  From Check Point Research: Check Point Research has exposed a new wave of the #Lazarus-linked Operation Dream Job targeting defense organizations in Europe, India and Brazil. Attackers used fraudulent job opportunities and trojanized PDF software to deploy #malware, while exploiting Windows zero-day CVE-2026-68820 to obtain SYSTEM privileges and disable security visibility. https://research.checkpoint.com/2026/shattering-the-dream-when-a-job-offer-becomes-a-zero-day-attack/ #CheckPoint #Check...

• View post

  From Check Point Research: Check Point Research have reported that organizations experienced an average of 2,336 weekly #cyberattacks during July 2026, representing a 16% year-over-year increase. #Ransomware activity also accelerated, while generative AI usage continued exposing corporate information through high-risk prompts submitted to external #AI services. https://blog.checkpoint.com/security/july-2026-cyber-threats-surge-ransomware-attacks-double-year-over-year-as-genai-data-exposure-wi...

• View post

  From Check Point Research: Check Point Research has investigated #StopAndProtect campaign which abuses thousands of compromised #WordPress sites to distribute malware and store stolen data. The campaign combines #ransomware with data theft and uses #ClickFix technique to infect visitors. Operational mistakes exposed logs, screenshots and victim IP addresses. https://research.checkpoint.com/2026/thousands-of-hacked-wordpress-sites-one-operation-unmasking-stopandprotect/ #CheckPoint #CheckPoin...

• View post

  From Check Point Research: Check Point Research has investigated the #WindowsDefender Boot-Time Removal driver, BTR.sys, showing that the Microsoft-signed remediation component can be repurposed to perform privileged file and registry changes during startup. Researchers developed BTR_CLI to craft encrypted tasks and found that multiple versions share a hard-coded RC4 key. https://research.checkpoint.com/2026/btr-reforged-weaponizing-defenders-remediation-driver-as-a-kernel-operation-primitive...

• View post

  From Check Point Research: Check Point Research have uncovered increased targeting of the education sector ahead of the school year. Organizations averaged 4,696 weekly attacks from January through July 2026, increase of 8%. Attackers also registered education-themed domains and used seasonal #phishing lures impersonating schools and student reward programs to steal credentials. https://blog.checkpoint.com/research/back-to-school-cyber-risks-surge-as-education-remains-the-worlds-most-attacked...

• View post

  From Check Point Research: Debt-Relief Email Phishing Campaign #CheckPoint researchers identified a large-scale #phishing campaign using fraudulent debt-relief emails to manipulate victims into calling attacker-controlled phone numbers. The campaign targeted more than 9,000 organizations and distributed approximately 24,700 emails within 14 days. Phone conversations were then used to obtain victims’ personal and financial information. https://blog.checkpoint.com/securing-user-and-access/check-...

• View post

  From #CheckPoint Research: Manchester Airports Group, the UK operator of Manchester, London Stansted, and East Midlands airports, has disclosed a #cyberattack that exposed data belonging to about 8.7 million customers. The compromised information includes contact details, vehicle registration numbers, and information collected through car park, lounge, fast-track, and Wi-Fi registrations. Read the full threat intelligence report: https://research.checkpoint.com/2026/31th-august-threat-intellige...

• View post

  From Check Point Research: ATF Investigation Targets The U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives has confirmed a #cyberattack affecting a standalone computer containing information on #ATF investigation targets. The system was disconnected after the compromise, while the #Qilin #ransomware group listed the agency on its leak site and claimed responsibility. Read the full threat intelligence report: https://research.checkpoint.com/2026/31th-august-threat-intelligence-report/...

• View post

  Unsettling swarm behavior: OpenAI agents collaborate on a German wiki | heise online https://www.heise.de/en/news/Unsettling-swarm-behavior-OpenAI-agents-collaborate-on-a-German-wiki-11442933.html

• View post

  From Check Point Research: Brazilian Government Websites Compromise #CheckPoint Research has uncovered a Chinese-speaking #cybercrime cluster, dubbed Gambling Goblin, that compromises Brazilian government and education websites. The group installs malicious Apache modules to proxy visitors to gambling and phishing pages while manipulating search rankings. Its infrastructure spans multiple languages and shows links to Earth Berberoka. https://research.checkpoint.com/2026/gaming-the-system-how-a...

• View post

  From Check Point Research: JSCeal Stealer Analysis #CheckPoint Research has analyzed #JSCeal, a cryptocurrency-focused information stealer compiled into V8 bytecode and executed through a bundled Node.js runtime. Researchers developed a static deobfuscation pipeline that recovered readable code, revealing keylogging, browser credential theft, HTTPS interception, additional encryption, and newer variants targeting macOS systems. https://research.checkpoint.com/2026/breaking-the-seal-static-deob...

• View post

  [Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510 Check Point research team has identified and remediated two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, which could potentially allow unauthenticated remote code execution under specific conditions. These issues were discovered internally, and we have no indication of active exploitation. https://community.checkpoint.com/t5/General-Topics/Action-Required-Critical-Se...