ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security

Check Point Research (CPR) discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven data exfiltration. The flaw could enable silent chat data theft, phishing and malware delivery, including zero-click data exfiltration in the ChatGPT desktop application. OpenAI fixed the vulnerability following responsible disclosure, but the finding raises a broader enterprise security issue: AI security controls are only as strong as the wider application environment around them. Key Findings Check Point Research bypassed ChatGPT Lockdown Mode, a security feature specifically designed to limit prompt-injection-driven data exfiltration. The vulnerability could enable multiple attack scenarios, including chat […]

The post ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/bYLfVM3
via

Why Pay Twice? One Platform for Enterprise WAF and CDN Speed

Two Teams. Two Priorities. One Application.  Application teams want fast, reliable application delivery without disrupting existing cloud native architectures, CI/CD pipelines, or deployment processes. They want fewer platforms to manage, predictable cloud economics, low latency, and the flexibility to scale without introducing additional operational complexity.  Security teams want enterprise-grade protection for mission-critical applications and APIs, including strong zero-day prevention, low false positives, centralized visibility, and consistent security policies without relying on basic native cloud controls or creating gaps between the CDN and the application.  Check Point WAF Enables Both Teams to Win.  Our WAF comes with a full enterprise-grade CDN […]

The post Why Pay Twice? One Platform for Enterprise WAF and CDN Speed appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/GLs1US9
via

Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk

Check Point Research (CPR) discovered Haiou, an OpenAI Codex jailbreak bundle that persistently modifies an AI agent’s trusted instructions to inject advertisements for a third-party AI gateway. CPR calls this behavior “prompt adware,” highlighting how natural-language prompts and configuration files can quietly influence an AI agent’s future behavior without traditional executable code. While the advertisement itself is relatively simple, the technique raises a broader concern for organizations adopting AI agents: how much visibility do they have into the third-party prompts, Skills and configurations influencing the AI systems they trust? Key Findings CPR identified “prompt adware,” where trusted AI instructions are […]

The post Prompt Adware: How Hidden AI Instructions Could Create a New Enterprise Security Risk appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/Fd9y0GW
via

Storm Ransomware Is Scaling Fast and Selling an AI Powered Image

A new ransomware operation appeared in August 2026 with an ambitious pitch: sophisticated infrastructure, aggressive affiliate payouts, global ambitions, and what it calls the “first AI powered, quantum resistant ransomware.”  Within approximately six weeks, Storm had claimed over 50 victims across North America, Europe, and Oceania. Its targets span healthcare, finance, manufacturing, business services, government, transportation, and critical infrastructure.   Storm arrived with the structure of an established Ransomware as a Service operation. Its affiliate program offers revenue shares reaching 90%, while its leak site looks closer to a commercial software platform, complete with an interactive victim map, search functionality, sector […]

The post Storm Ransomware Is Scaling Fast and Selling an AI Powered Image appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/6JgpDom
via

Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss

Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security Report. →Voice agents are easy to talk into things. Researchers got a leading realtime voice model to give harmful answers to about 70 percent of spoken requests by varying their speed, pitch and background noise →A transcript check can be blinded. An attacker can speak the instruction and tamper with the recording, so the transcript shows garbled words or nothing at all while the model still receives the original audio →Audio guardrails screen the sound itself. They check […]

The post Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/JYHq8dF
via

HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js

The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.  The vulnerability is associated with Brotli decompression, so defenders need to find vulnerable implementations across applications and infrastructure, confirm whether untrusted compressed data can reach them, and patch the affected component. AT A GLANCE ·       CVE: CVE-2026-111497 ·       Affected layer: Brotli decompression implementations used by multiple runtimes and infrastructure components ·       Primary risk question: Can attacker-controlled Brotli-compressed data reach a vulnerable decoder? ·       Immediate priority: Discover, assess reachability, patch, redeploy, and hunt Context HTTP2Shell emerged shortly after PHP2Shell, but […]

The post HTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/H3xmRNj
via

Three Gartner Reports. One Emerging Direction for Exposure Management.

In a short period, Check Point has appeared across three new Gartner research publications examining autonomous remediation, exposure assessment, and the future of preemptive cybersecurity. These three reports ask very different questions. But how do they connect? One examines how organizations can trust autonomous remediation. Another looks at the growing exposure management market and the increasing importance of exploitability. The third looks further ahead at the technologies Gartner believes will shape preemptive cybersecurity. Taken together, the reports capture a broader change already underway across the industry. Exposure management is expanding from identifying risk toward understanding exploitability and enabling action. Exploitability […]

The post Three Gartner Reports. One Emerging Direction for Exposure Management. appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/Mt6rb58
via