Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface

AI assistants have quickly become part of everyday work, particularly for developers. Tools such as ChatGPT, Claude, Cursor and GitHub Copilot increasingly sit alongside source code, cloud environments and other sensitive business resources, making the credentials and sessions connected to these tools increasingly important to protect. New research from Check Point Research (CPR) into the Aokigahara infostealer shows how attackers are adapting to this shift. The malware specifically collects authentication files, session data and configuration files associated with popular AI applications and development tools. The significance goes beyond gaining access to an AI account. If stolen credentials or session tokens […]

The post Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/RwyB8eX
via

PHP2Shell: Log4Shell at AI Speed — A CISO’s Perspective

When the PHP2Shell vulnerabilities became public, my thoughts went back to Log4Shell.  Five years ago, Log4Shell showed how difficult it can be to respond to a critical vulnerability in software used across countless applications and services. PHP2Shell presents a similar challenge. The technical details are different, but the need to quickly understand where you’re exposed and take action is very familiar.  I believe we should expect more incidents like this. AI is making it possible to discover vulnerabilities in widely used software at a speed and scale we haven’t seen before. As these capabilities become more accessible, we are likely […]

The post PHP2Shell: Log4Shell at AI Speed — A CISO’s Perspective appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/RD7HKeV
via

PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt

Two critical vulnerabilities in PHP, the programming language behind a large share of the world’s websites, online stores and internet services, are being actively targeted. Since details of CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, leaked ahead of planned disclosure, 10% of organisations worldwide have been impacted (“impacted” means exploitation attempts, we have no way of knowing if the attack has been successful), according to Check Point Research. Hourly activity peaks at midnight, when fewer security teams are watching. Government institutions in the Netherlands and Finland have taken some of their websites offline as a precaution. What PHP2Shell is and why […]

The post PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/Cp4xzSW
via

Custom Guardrails: The AI Rules No Vendor Can Write for You

Key takeaways Only 14 percent of organizations say they have formal GenAI policies that are actively enforced and audited, according to Check Point’s 2026 Cloud Security Report. →The costliest AI mistakes break rules no vendor ships. Air Canada was held liable for a refund its chatbot promised and the airline never offered →The usual fixes fall short. Models can be argued out of system prompts, keyword lists miss meaning, and US-centric DLP lists miss the data your regulators protect →Custom guardrails turn a sentence into an enforced rule. Describe it, test it in under five minutes, and run it on […]

The post Custom Guardrails: The AI Rules No Vendor Can Write for You appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/MroZgi0
via

How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers

A canceled flight. A missed connection. A refund that has yet to arrive. When travelers need urgent help, they often turn to search engines, social media, or AI tools to find a customer support number. Threat actors are increasingly exploiting that moment of urgency. In our previous investigation, Scammers Are Watching Airline Complaints and Posing as Customer Support, Check Point Exposure Management researchers uncovered scammers monitoring airline complaints on social media and impersonating customer support representatives. Check Point Exposure Management researchers identified a related campaign that targets an earlier point in the support journey: the search for help itself. Threat […]

The post How Fraudulent Airline Support Numbers Exploit Search Results and AI-Generated Answers appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/QSKkhqR
via

As AI Is Reshaping the Data Center, Security Has to Keep Up.

Modernizing the Data Center for the AI Era For years, the data center was treated as one of the most controlled parts of the enterprise. Critical applications and sensitive data lived behind a hardened perimeter, where access could be closely managed and where traffic followed relatively predictable paths. That environment has changed. Quickly. AI training and inference workloads, private models, GPU infrastructure, containers, APIs, and autonomous agents are joining the core applications and services already operating inside the data center. According to the 2026 Check Point Cloud Security Report, 29% of organizations are already moving AI workloads to on-premises or […]

The post As AI Is Reshaping the Data Center, Security Has to Keep Up. appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/ojh3rI6
via

Keeping AI Agents on Task: Check Point Advances AI Agent Safety with NVIDIA OpenShell Reference Architecture

How Check Point and NVIDIA collaborate an agent governance, control over how they run, and in-silicon security built into the AI infrastructure  Agents can go wrong without an attacker  AI agents now plan, use tools, work with sensitive data and hand work to other agents. Their value comes from doing things nobody scripted step by step. That also creates a new kind of risk: an agent can follow every rule and still do the wrong thing.  No attacker is needed. An agent can:  Access sensitive data, credentials, or internal systems  Absorb untrusted or misleading content as if it were a […]

The post Keeping AI Agents on Task: Check Point Advances AI Agent Safety with NVIDIA OpenShell Reference Architecture appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/UVD36AT
via