Blogsby GlyphHTTP2Shell: The Brotli Vulnerability That Extends Beyond Node.js
The key point: CVE-2026-111497 now increasingly referred to as HTTP2Shell and initially reported as Node2Shell, is broader than a Node.js vulnerability.
11 of 800 posts
Thu Oct 294 posts
Audio Prompt Injection: What Voice Agents Hear That Text Guardrails Miss
Key takeaways Only 24 percent of organizations can fully inspect AI traffic without impacting performance, according to Check Point’s 2026 Cloud Security Report. →Voice agents are easy to talk into things.
Secure AI-Scale Traffic with the Maestro MHO 200
AI is pushing data center traffic to levels most security architectures were never built for, and much of it is encrypted.
Backdoor or Confused Agent? What We Learned Replaying the Qwen Incident
Key takeaways After Alibaba’s Qwen model tried a test upload to a server in Beijing during a Cohere experiment, we replayed that moment 64 times, and the model picked 52 different addresses.
Tue Oct 272 posts
Three Gartner Reports. One Emerging Direction for Exposure Management
In a short period, Check Point has appeared across three new Gartner research publications examining autonomous remediation, exposure assessment, and the future of preemptive cybersecurity. These three reports ask very different questions.
Yoba Malware Abuses Signed ChatGPT and Claude Binaries to Target AI Users
As interest in new AI tools accelerates, cybercriminals are finding ways to exploit the trust surrounding them. Check Point Research (CPR) has uncovered Yoba, a malware campaign using fake GitHub projects impersonating supposed ChatGPT and...
Mon Oct 262 posts
Rising Borrowing Costs Shouldn’t Delay Your Security: Meet Firewall-as-a-Subscription
Check Point’s Firewall-as-a-Subscription Puts Advanced AI-Era Protection Within Reach of Every Organization Attacks don’t wait for budget approval. But firewall purchases often do, and that wait is getting longer.
Budgets Are Stalling Firewall Deals. Here’s How Partners Can Get Them Moving Again
Every partner knows this conversation. A customer agrees their firewalls need replacing. Their teams are using AI tools, they are connecting more systems, and the threats are moving faster than their hardware was built for.
Fri Oct 232 posts
Infostealers Are Targeting AI: What Aokigahara Infostealer Reveals About the New Developer Attack Surface
AI assistants have quickly become part of everyday work, particularly for developers. Tools such as ChatGPT, Claude, Cursor and GitHub Copilot increasingly sit alongside source code, cloud environments and other sensitive business...
Closing the Cyber Skills Gap with 300 Academic Partnerships
How 300 Academic Partnerships Are Helping Close the Cyber Skills Gap Check Point’s SecureAcademy has reached 300 academic partnerships across more than 80 countries, connecting educational institutions with industry-aligned cyber security...
Thu Oct 221 post
Custom Guardrails: The AI Rules No Vendor Can Write for You
Key takeaways Only 14 percent of organizations say they have formal GenAI policies that are actively enforced and audited, according to Check Point’s 2026 Cloud Security Report. →The costliest AI mistakes break rules no vendor ships.