Check Point Supports OpenAI’s Call for Collective Action on Cyber Defense

AI is reshaping cybersecurity at extraordinary speed. Check Point Research is already uncovering AI-powered attacks in the wild, revealing how threat actors are operating at greater scale and with growing sophistication. As these capabilities advance, cyber defense must advance just as quickly. That is why Check Point is proud to support OpenAI’s call for collective action on cyber defense, alongside organizations across the technology and cybersecurity ecosystem. We share the belief that meeting this challenge requires the industry to come together, expanding access to effective security tools, sharing intelligence and expertise, and helping organizations strengthen their defenses and resilience. For […]

The post Check Point Supports OpenAI’s Call for Collective Action on Cyber Defense appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/eYGQrqD
via

Stopping the AI Agent Actions No Rule Could See Coming

Check Point introduces a new class of contextual AI protection that understands an agent’s full context, intent and behavior across multiple steps, and prevents harmful actions before they execute. AI agents are already operating inside the enterprise. Coding agents write and execute code, interact with repositories, access cloud infrastructure and invoke tools. Workforce agents process documents and messages, retrieve enterprise data and complete business workflows. As these systems act with greater autonomy, security has to look beyond malicious prompts and individual payloads to the outcomes an agent’s actions can create. Harmful behavior does not always begin with something recognizably malicious. […]

The post Stopping the AI Agent Actions No Rule Could See Coming appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/cNfZnuP
via

Check Point Blocks Large-Scale Debt-Relief Email Phishing Campaign Targeting More Than 9,000 Organizations

Check Point has identified and blocked a large-scale email phishing campaign using fraudulent financial hardship and debt-relief offers to manipulate recipients into calling attacker-controlled phone numbers. Over the past 14 days, Check Point observed approximately 24,700 emails associated with the campaign targeting users across more than 9,000 organizations, demonstrating both the scale of the operation and the continued evolution of phishing beyond malicious links and attachments.  The campaign underscores a growing enterprise risk: phishing no longer needs an obvious malicious link, attachment, or spoofed sender to be effective. Attackers are turning routine-looking email into the entry point for trusted conversations that take users beyond traditional controls.  The Attack: […]

The post Check Point Blocks Large-Scale Debt-Relief Email Phishing Campaign Targeting More Than 9,000 Organizations appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/Z0cdeAQ
via

The Approved-App Blind Spot: When Sanctioned AI Becomes Shadow AI

At 9:03, an employee opens an approved AI assistant with a corporate account and asks it to summarize launch notes. At 9:27, a feature they need is unavailable in the enterprise version. They open the same service through a personal account and continue working. At 10:11, the CRM displays a new AI sidebar after a routine SaaS update. It can summarize customer records, draft follow-ups, and connect to the calendar. At 11:06, a browser extension offers to carry meeting notes from one application into another. One click later, a second AI service has joined the workflow. The employee has not […]

The post The Approved-App Blind Spot: When Sanctioned AI Becomes Shadow AI appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/jWeOyip
via

Back-to-School Cyber Risks Surge as Education Remains the World’s Most Attacked Sector

From record attack volumes to phishing campaigns targeting students and educators, threat actors are exploiting one of the busiest periods of the academic year. As students, teachers and families return to classrooms, campuses and online learning platforms at the end of summer, cyber-criminals are preparing for the new school year as well. According to Check Point Research, the education sector remains the world’s most targeted industry, facing significantly more cyberattacks than any other sector. Between January and July 2026, educational organizations such as colleges and universities, research institutes, and K-12 school systems alike, faced an average of 4,696 weekly cyberattacks […]

The post Back-to-School Cyber Risks Surge as Education Remains the World’s Most Attacked Sector appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/2LstHFN
via

The Mistake That Exposed a Global Cyber Crime Operation

Most cyber crime investigations reveal the aftermath of an attack. Few reveal the attackers themselves. That’s what makes Check Point Research‘s latest investigation into StopAndProtect so unusual. While analyzing a newly identified cyber crime operation, researchers uncovered a series of operational security (OPSEC) mistakes that exposed the attackers’ own infrastructure including: victim logs, screenshots, source code, internal management tools, and evidence of a campaign impacting more than 5,000 infected computers worldwide. The investigation also uncovered files referencing close to 2,000 compromised WordPress domains, providing a rare look inside how a modern cyber criminal operation is built and managed. According to […]

The post The Mistake That Exposed a Global Cyber Crime Operation appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/tdjMNHe
via

Reading the Signals in the OWASP LLM Top 10 2026

In this article OWASP has released the GenAI LLM Top 10 for 2026. The movement between rankings signals where AI security priorities are heading: toward agency, context and the consequences of AI actions. →prompt injection and sensitive information disclosure hold the top two positions →excessive agency jumps from LLM06 to LLM03, the biggest move in the ranking →hidden context exposure replaces system prompt leakage, widening what needs protecting →misinformation rises as AI output feeds workflows, code and automated actions OWASP has released the GenAI LLM Top 10 for 2026, updating one of the security community’s key reference points for understanding risk […]

The post Reading the Signals in the OWASP LLM Top 10 2026 appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/dRvWT6x
via