Check Point Software

Key takeaways Only 14 percent of organizations say they have formal GenAI policies that are actively enforced and audited, according to Check Point’s 2026 Cloud Security Report. →The costliest AI mistakes break rules no vendor ships. Air Canada was held liable for a refund its chatbot promised and the airline never offered →The usual fixes fall short. Models can be argued out of system prompts, keyword lists miss meaning, and US-centric DLP lists miss the data your regulators protect →Custom guardrails turn a sentence into an enforced rule. Describe it, test it in under five minutes, and run it on The post Custom Guardrails: The AI Rules No Vendor Can Write for You appeared first on Check Point Blog.

Initially published Oct 21st at 6 AM PT- last updated 8:40AM PT Patch Now: Ensure you are up to date with the latest version IPS protection- CPAI-2026-15172 – Check Point Software. PHP Remote Code Execution (CVE-2026-109618, CVE-2026-109619). Check Point WAF protects against this threat How does Check Point protect you? Check Point Intrusion Prevention System (IPS):  IPS protection was just released to active this evening – PHP Remote Code Execution (CVE-2026-109618, CVE-2026-109619).  Always  Make sure gateways pull IPS updates automatically and set new critical protections to Prevent, not Detect. Watch Check Point Advisories for a new CPAI entry covering these The post PHP2Shell: Leaked Critical PHP Vulnerabilities (CVE-2026-109618 & CVE-2026-109619) appeared first on Check Point Blog.

A canceled flight. A missed connection. A refund that has yet to arrive. When travelers need urgent help, they often turn to search engines, social media, or AI tools to find a customer support number. Threat actors are increasingly exploiting that moment of urgency. In our previous investigation, Scammers Are Watching Airline Complaints and Posing as Customer Support, Check Point Exposure Management researchers uncovered scammers monitoring airline complaints on social media and impersonating customer support representatives. Check Point Exposure Management researchers identified a related campaign that targets an earlier point in the support journey: the search for help itself. Threat The post How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers appeared first on Check Point Blog.

Modernizing the Data Center for the AI Era For years, the data center was treated as one of the most controlled parts of the enterprise. Critical applications and sensitive data lived behind a hardened perimeter, where access could be closely managed and where traffic followed relatively predictable paths. That environment has changed. Quickly. AI training and inference workloads, private models, GPU infrastructure, containers, APIs, and autonomous agents are joining the core applications and services already operating inside the data center. According to the 2026 Check Point Cloud Security Report, 29% of organizations are already moving AI workloads to on-premises or The post As AI Is Reshaping the Data Center, Security Has to Keep Up. appeared first on Check Point Blog.

How Check Point and NVIDIA collaborate an agent governance, control over how they run, and in-silicon security built into the AI infrastructure  Agents can go wrong without an attacker  AI agents now plan, use tools, work with sensitive data and hand work to other agents. Their value comes from doing things nobody scripted step by step. That also creates a new kind of risk: an agent can follow every rule and still do the wrong thing.  No attacker is needed. An agent can:  Access sensitive data, credentials, or internal systems  Absorb untrusted or misleading content as if it were a The post Keeping AI Agents on Task: Check Point Advances AI Agent Safety with NVIDIA OpenShell Reference Architecture appeared first on Check Point Blog.

Online platforms rely on digital signals to identify suspicious accounts and activity. Antidetect browsers make those signals harder to trust by allowing operators to create and manage large numbers of browser profiles that appear to belong to different users, devices and locations. While these tools have legitimate uses, Check Point Research found documented evidence of their use in criminal ecosystems for activities including account takeover and payment fraud. AI and automation can further increase the scale of these operations. Key Findings Antidetect browsers allow operators to manage large numbers of isolated browser profiles that appear to come from different users, devices The post The Risk of AI-Powered Antidetect Browsers in Online Fraud and Influence Operations appeared first on Check Point Blog.

Check Point and Amazon Web Services (AWS) have worked together to help organizations innovate in the cloud while enhancing security. As a global cyber security leader, Check Point gives AWS customers a practical way to strengthen protection across cloud networks, applications, workloads, and emerging AI environments. Available through AWS Marketplace, Check Point solutions are designed to help customers move faster on AWS while extending consistent, prevention-first security across the services they rely on every day. In 2026, that collaboration is expanding again, with a focus on helping customers secure AI initiatives built on AWS. As enterprises move generative AI from The post Check Point Expands Strategic Collaboration with AWS to Accelerate AI and Cloud Security Capabilities appeared first on Check Point Blog.

AI agents are moving into production fast. They read enterprise data, call tools, and take actions across business systems. That creates a new problem: an agent can be fully authenticated and authorized and still be manipulated into doing the wrong thing. Google Cloud’s Gemini Enterprise gives enterprises a central control plane for agents. Check Point extends that control plane with AI-specific risk assessment and real-time, context-aware protection. This post details where Check Point integrates and what it looks like for a security team. Google Cloud’s direction with agent orchestration, registries, and gateway layers signals a clear design pattern: centralized AI The post Securing AI Agents from Discovery to Runtime: Check Point on Google Cloud’s Gemini Enterprise appeared first on Check Point Blog.

In Q3 2026, Microsoft was the most impersonated brand in phishing attacks, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in Q2. Attackers favor Microsoft because stolen Microsoft credentials can unlock an entire corporate environment, including email, files and collaboration tools, while many of the other top brands mainly lead to personal accounts. Apple, Google, LinkedIn and Amazon completed the top five, and together these brands made up more than half of all attempts, showing how heavily attackers lean on a small group of trusted names. This quarter also brought examples showing The post Inside the Q3 2026 Brand Phishing Report: Microsoft Now Accounts for One in Three Brand Impersonation appeared first on Check Point Blog.

A calendar invite is one of the most routine messages in the modern workplace. It lands in the inbox, asks for a few seconds of attention, and is rarely questioned. Attackers know this, and they are now using fake meeting invitations to steal Microsoft account credentials. We have identified several large-scale phishing campaigns that abuse fake calendar invites to harvest credentials. Some arrive as an .ics attachment (example 1). The file is valid calendar data, so the attack abuses calendar features and user trust without exploiting a software vulnerability. Others use a link that appears to lead to a different The post Fake Calendar Invites Target Thousands of Organizations in Microsoft Credential-Phishing Campaign appeared first on Check Point Blog.