Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss

Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security Report. →Voice agents are easy to talk into things. Researchers got a leading realtime voice model to give harmful answers to about 70 percent of spoken requests by varying their speed, pitch and background noise →A transcript check can be blinded. An attacker can speak the instruction and tamper with the recording, so the transcript shows garbled words or nothing at all while the model still receives the original audio →Audio guardrails screen the sound itself. They check […]

The post Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/JYHq8dF
via

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.  The vulnerability is associated with Brotli decompression, so defenders need to find vulnerable implementations across applications and infrastructure, confirm whether untrusted compressed data can reach them, and patch the affected component. AT A GLANCE ·       CVE: CVE-2026-111497 ·       Affected layer: Brotli decompression implementations used by multiple runtimes and infrastructure components ·       Primary risk question: Can attacker-controlled Brotli-compressed data reach a vulnerable decoder? ·       Immediate priority: Discover, assess reachability, patch, redeploy, and hunt Context HTTP2Shell emerged shortly after PHP2Shell, but […]

The post HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/H3xmRNj
via

Three Gartner Reports. One Emerging Direction for Exposure Management.

In a short period, Check Point has appeared across three new Gartner research publications examining autonomous remediation, exposure assessment, and the future of preemptive cybersecurity. These three reports ask very different questions. But how do they connect? One examines how organizations can trust autonomous remediation. Another looks at the growing exposure management market and the increasing importance of exploitability. The third looks further ahead at the technologies Gartner believes will shape preemptive cybersecurity. Taken together, the reports capture a broader change already underway across the industry. Exposure management is expanding from identifying risk toward understanding exploitability and enabling action. Exploitability […]

The post Three Gartner Reports. One Emerging Direction for Exposure Management. appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/Mt6rb58
via

Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users

As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered Yoba, a malware campaign using fake GitHub projects impersonating supposed ChatGPT and Claude desktop applications, while abusing legitimate, signed OpenAI and Anthropic executables to help load malware. The campaign shows how the rush to access new AI tools is creating opportunities for social engineering, even when the AI platforms themselves have not been compromised. Key Findings Attackers used fake GitHub projects impersonating supposed ChatGPT and Claude desktop applications to distribute Yoba malware. Legitimate, signed OpenAI and Anthropic […]

The post Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/jonXm5P
via

Rising Borrowing Costs Shouldn’t Delay Your Security: Meet Firewall-as-a-Subscription

Why more companies are moving from hardware purchases to one predictable subscription. Attacks don’t wait for budget approval. But firewall purchases often do, and that wait is getting longer. Rising interest rates have made borrowing more expensive. For a midsize company, a single rate rise can cost the equivalent of a branch office firewall. A large hardware purchase now means a harder conversation with finance and a longer approval cycle. Meanwhile, the old firewall stays in place; the network grows, and so does the risk. Security is urgent. The way organizations pay for it isn’t keeping pace. Check Point Firewall-as-a-Subscription […]

The post Rising Borrowing Costs Shouldn’t Delay Your Security: Meet Firewall-as-a-Subscription appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/YrRQABw
via

Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface

AI assistants have quickly become part of everyday work, particularly for developers. Tools such as ChatGPT, Claude, Cursor and GitHub Copilot increasingly sit alongside source code, cloud environments and other sensitive business resources, making the credentials and sessions connected to these tools increasingly important to protect. New research from Check Point Research (CPR) into the Aokigahara infostealer shows how attackers are adapting to this shift. The malware specifically collects authentication files, session data and configuration files associated with popular AI applications and development tools. The significance goes beyond gaining access to an AI account. If stolen credentials or session tokens […]

The post Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/RwyB8eX
via

PHP2Shell: Log4Shell at AI Speed — A CISO’s Perspective

When the PHP2Shell vulnerabilities became public, my thoughts went back to Log4Shell.  Five years ago, Log4Shell showed how difficult it can be to respond to a critical vulnerability in software used across countless applications and services. PHP2Shell presents a similar challenge. The technical details are different, but the need to quickly understand where you’re exposed and take action is very familiar.  I believe we should expect more incidents like this. AI is making it possible to discover vulnerabilities in widely used software at a speed and scale we haven’t seen before. As these capabilities become more accessible, we are likely […]

The post PHP2Shell: Log4Shell at AI Speed — A CISO’s Perspective appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/RD7HKeV
via