Check Point Extends Its Penetration Testing Capabilities

The Check Point Services organization is extending its penetration testing capabilities with deeper, adversary-led engagements. Customers can now choose anything from a scoped penetration test to an objective-based engagement. Each engagement shows three things: how an attacker could break into the environment, how far the attacker could get, and whether the security team would detect the attack. And because environments never stand still, the testing is proactive and continuous, not a one-time project. Key Takeaways Every engagement answers three questions: how an attacker gets in, how far they get, and whether your team detects the attack. You choose the depth: […]

The post Check Point Extends Its Penetration Testing Capabilities appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/8ga0Mkz
via

Security Advisory: Active Exploitation of PHP2Shell and Local Privilege Escalation

Check Point Research has identified active, in-the-wild exploitation of PHP2Shell, a vulnerability in PHP that also affects Check Point Security Gateways. In the observed incidents, the attacker exploited PHP2Shell to gain initial access, then used a local privilege escalation vulnerability to obtain root privileges and establish persistence. Security fixes for Check Point Security Gateway and Management were available one week before the attack, on October 23rd. Only a couple of dozen unpatched systems, in a single region, were compromised in the observed incidents. Affected customers were notified in real time. Check Point Research, through its Incident Response teams, worked to […]

The post Security Advisory: Active Exploitation of PHP2Shell and Local Privilege Escalation appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/rufP2xv
via

A Single Branch No Longer Operates in A Single Place

Branch Traffic Has Changed. Security Has to Follow. A traditional branch was simple in nature: a location that connects back to headquarters where applications, data, and security controls were housed. Today the landscape is wildly different. A branch may connect directly to SaaS apps, clouds, data centers, the open internet, and other locations within the enterprise. And while all those connections are being made, often many at one time, employees expect video calls and cloud applications to perform just as well in the office as they do at home. The branch itself has become more complex, too. Connected devices can […]

The post A Single Branch No Longer Operates in A Single Place appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/a3Qv0BJ
via

October 2026 Cyber Threat Landscape: Record Ransomware, Rising GenAI Risk and an AI-Powered Newcomer

Key takeaways Organizations experienced 2,550 weekly cyber attacks on average in October, down 9% month over month but up 32% year over year. Education remained the most targeted sector, averaging 5,934 weekly attacks per organization, a 33% year-over-year increase, as all 23 tracked sectors saw double digit growth compared to last year. Europe recorded the sharpest regional rise at 39% year over year, while Africa faced the highest volume at 3,834 weekly attacks per organization. One in every 35 enterprise GenAI prompts posed a high risk of sensitive data leakage, affecting 90% of organizations that regularly use GenAI tools. One […]

The post October 2026 Cyber Threat Landscape: Record Ransomware, Rising GenAI Risk and an AI-Powered Newcomer appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/IwE01ij
via

What 70 European CISOs told us about securing the AI era

Last week I spent three days in Bavaria with more than 70 CISOs from across Europe, the Middle East and Africa at Leaders Point EMEA. Led by our CEO Nadav Zafrir and hosted with Team8’s CISO Village, it was our second Leaders Point and the first in Europe. We kept it invitation-only so people could speak openly.  The timing was hard to miss. Over the past month, attacks on supermarket refrigeration systems have spoiled food and emptied shelves in stores across France and several other European countries. Nobody has yet been shown to be behind them. For anyone who still […]

The post What 70 European CISOs told us about securing the AI era appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/PYyIU95
via

CopperDragon: Uncovering a Global China-Nexus Cyber Espionage Framework

A year-long Check Point Research investigation has connected three China-nexus cyber-espionage clusters targeting government, telecommunications and critical infrastructure organizations across Europe, Asia and Latin America. While parts of this activity have previously been reported separately, the wider investigation reveals new insights and connections through shared malware and infrastructure, pointing to a broader ecosystem linked to an entity Check Point Research tracks as “CopperDragon”. CopperDragon may operate as a digital quartermaster, developing or supplying malware and infrastructure to multiple sophisticated China-nexus threat actors. By examining the connections between these campaigns, Check Point Research provides a broader view of an espionage ecosystem […]

The post CopperDragon: Uncovering a Global China-Nexus Cyber Espionage Framework appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/cWS9ouE
via

How Safe Remediation Reduces Exposure Without Disrupting Production

The exposure is critical, the exploit is public, and the affected system supports a production application. Security needs the risk reduced before attackers can use it. Infrastructure and application teams carry a different responsibility. They need to understand whether the proposed action could block legitimate traffic, consume additional resources, affect availability, or interrupt a system the business relies on. They also need a safe path back if the change behaves unexpectedly. Both sides are protecting the organization. Safe Remediation gives them the evidence to move forward together. Safe Remediation: Confident Remediation in Production examines how Check Point Exposure Management evaluates […]

The post How Safe Remediation Reduces Exposure Without Disrupting Production appeared first on Check Point Blog.

from Check Point Blog https://ift.tt/8mp3ZDL
via