Attackers are increasingly abandoning fake Microsoft login pages in favor of abusing Microsoft’s legitimate authentication infrastructure, allowing…
Category: Check Point Blog
AI Agent Security Just Had Its Catalyst Moment
There are certain moments in technology where you realize the conversation is about to change. I remember the first time I launched an EC2 instance. I…
Your AI Governance Policy Should Survive Your Next Model Change
The model migration is ready for approval. Tests show better performance and lower costs. The application will serve the same users, process the same…
The Branding and Attribution Behind Cybercrime
Threat actor names can sound simple. LockBit. Fancy Bear. BlackCat. Scattered Spider. Anonymous Sudan. Each name gives the impression of a clear group with a defined identity. In threat intelligence, however, the name is rarely the whole story. Some names…
Which Brands Are Impersonated Most? Inside the Q2 2026 Brand Phishing Report
Key Takeaways Microsoft continues to be the single most impersonated brand in Q2 2026, appearing in 23% of all brand phishing attempts, far ahead of any other company The top five impersonated brands, Microsoft, LinkedIn, Google, Apple, and Amazon, together…
Security Advisory – Action Required – July 2026 Security Update
As part of Check Point’s Frontier AI Readiness Program, we are releasing a jumbo hotfix with security and hardening fixes for our firewall and management products. This update includes a number of security hardening improvements and fixes, the most significant…
Inline Email Security and Microsoft 365: A Practical View of Mail Routing, Risk, and Prevention
Microsoft’s guidance on inbound and outbound mail routing for third-party email security has prompted a fair question from customers: how should organizations evaluate inline email security for Microsoft 365? The answer depends less on whether a solution is inline and…
The State of Hybrid SASE: Built-In vs. Bolted-On
Hybrid SASE is not a label – it is an architectural commitment. Many enterprises pay twice for SASE: once for the platform, and again for the overhead of integrating and managing components never designed to work as one architecture. Check…
AI Appreciation Day: Let’s Be Honest About What We’re Appreciating
Today is AI Appreciation Day, and honestly, we mean it. AI has changed how we write code, analyze threats, and get work done faster than anyone thought possible a few years ago. It deserves a moment of gratitude. But at…
AI Security Is Never Finished: Building the Continuous Red Teaming Loop
Security programs are built around moments of closure: the finding is closed, the control passed, and the release can move forward. AI security refuses to cooperate with that model. A passing test is useful evidence, but only for a specific…
AI Security Threats in 2026: Annual Insights from Check Point Research
Key Takeaways Vulnerability response times have collapsed from days to hours. AI can reason about code well enough to generate working exploits at scale, so defenders now face patch windows of 12 to 72 hours instead of the traditional timeframe…
AI Security Threats in 2026: Insights from Check Point Research
Key Takeaways Vulnerability response times have collapsed from days to hours. AI can reason about code well enough to generate working exploits at scale, so defenders now face patch windows of 12 to 72 hours instead of the traditional timeframe…
Email Agent Hijacking: The Hidden Threat That Breaks Post-Delivery Security
Key takeaways AI agents create a new email attack surface because they can process content before humans see it Email Agent Hijacking hides instructions in email content to manipulate AI interpretation, decisions, or outputs Post-delivery controls are too late when…
AI Agents are Only As Effective as Their Harness
Every AI vendor is talking about agents – autonomous systems that handle complex tasks without constant human input. The promise is real. But one question gets asked too rarely: what makes an agent reliable enough to trust with your network security? The…
How Check Point Email Security Stopped a Student Job Scam Before It Reached the Inbox
A student receives what looks like a routine summer job offer from a trusted school account. The link goes to Google Forms. The email passes authentication. There is no malware, no fake login page, and no strange-looking domain. To the…
Redefining the CISO Contract: From Securing the Business to Securely Doing Business
Walk into almost any executive leadership meeting right now and you’ll find the same dynamic playing out. The CEO is asking how the company can do more with AI, faster. Engineering teams are already three sprints deep into building something…
A New Ransomware Leader Emerges as June 2026 Attack Volumes Climb Worldwide
Key takeaways Weekly cyber-attacks per organization reached 2,270 in June 2026, up 10% from May and 17% higher than June 2025 Education, Government, and Telecommunications again sat at the top of the industry list, with Education and Telecommunications posting double-digit…
How Unified Policies Close Security Gaps
As organizations adopt both on-premises firewalls and cloud-delivered SASE, security becomes more distributed and complex. Users connect from headquarters, branch offices, and remote locations, expecting the same secure and seamless internet experience everywhere. When Internet Access policies across firewalls and SASE…
Under Pressure: Insights from the 2026 Exposure Gap Report
Risk is concentrating. The 2026 Exposure Gap Report shows vulnerabilities claiming a larger share of critical exposure, and that shift has real implications for how security teams prioritize their response. Two findings are central to this change. Vulnerabilities now represent…
Check Point and the AWS European Sovereign Cloud: Securing Europe’s Digital Future
Digital sovereignty in Europe is no longer theoretical; it’s operational. Regulatory pressure, geopolitical realities, and rising expectations around data control have pushed sovereignty to the top of the enterprise agenda. At the same time, organizations are accelerating cloud adoption, embedding AI into core processes,…