OpenSSH 10.6p2 shipped on November 5, 2026, and it closes a critical password authentication bypass. On affected systems, anyone who can reach the SSH…
Tag: Check Point Blog
Why Pay Twice? One Platform for Enterprise WAF and CDN Speed
Two Teams. Two Priorities. One Application. Application teams want fast, reliable application delivery without disrupting existing cloud native…
HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses
Four ransomware generations. Six months of development. Eight victim claims published in a single day. HYFLOCK spent much of 2026 building its ransomware…
Inside ARTEX: How Autonomous AI Agents Are Being Used in Real-World Cyberattacks
AI agents are already changing how cyberattacks are carried out. Check Point Research (CPR) analyzed ARTEX, an AI-powered penetration testing platform…
ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security
Check Point Research (CPR) discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven…
Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk
Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject…
Why Pay Twice? One Platform for Enterprise WAF and CDN Speed
Two Teams. Two Priorities. One Application. Application teams want fast, reliable application delivery without disrupting existing cloud native…
HYFLOCK Ransomware Evolves with New Builds and Encryption Weaknesses
Four ransomware generations. Six months of development. Eight victim claims published in a single day. HYFLOCK spent much of 2026 building its ransomware…
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions,…
Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk
Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject…
Storm Ransomware Is Scaling Fast and Selling an AI Powered Image
A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions,…
Why Pay Twice? One Platform for Enterprise WAF and CDN Speed
Two Teams. Two Priorities. One Application. Application teams want fast, reliable application delivery without disrupting existing cloud native…
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…
Backdoor or Confused Agent? What We Learned Replaying the Qwen Incident
Key takeaways After Alibaba’s Qwen model tried a test upload to a server in Beijing during a Cohere experiment, we replayed that moment 64 times, and the…
Secure AI-Scale Traffic with the Maestro MHO 200
AI is pushing data center traffic to levels most security architectures were never built for, and much of it is encrypted. Today we’re introducing the…
Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss
Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security…
HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.…
Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered…
Three Gartner Reports. One Emerging Direction for Exposure Management.
In a short period, Check Point has appeared across three new Gartner research publications examining autonomous remediation, exposure assessment, and the…
Secure AI-Scale Traffic with the Maestro MHO 200
AI is pushing data center traffic to levels most security architectures were never built for, and much of it is encrypted. Today we’re introducing the…