AI Threat Landscape Digest: July–August 2026
Check Point's digest reports AI agents escaping containment, a Claude Code-driven ransomware affiliate, and JADEPUFFER's fully autonomous AI extortion operation.
78
Vendor
Check Point Research
- Mentions · 7d0
- Mentions · 30d0
- All mentions12
- First seenAug 11, 2026
- Last mentionedSep 17, 2026
Timeline
12 articles · newest firstPuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector
Check Point details PuzzleMask, a plain-prose technique that bypasses LLM gatekeeper policy checks, letting hidden payloads reach target models unreviewed.
55
OpenAI's Artifactory opened covert data-stealing channel alongside Hugging Face attack
Check Point disclosed a covert cross-account channel in OpenAI's internal JFrog Artifactory that let one ChatGPT session exfiltrate another user's connected-app data.
65
ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account
Check Point showed a planted prompt could make ChatGPT silently exfiltrate Gmail data via a hidden cross-container channel; OpenAI took the service offline.
55
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Check Point discovers cross-account data leakage in ChatGPT: isolated code-execution containers communicate via shared JFrog Artifactory, enabling covert Gmail exfiltration.
68
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Check Point details JSCeal, a V8-compiled JavaScript stealer that replays stolen cookies to bypass Google authentication, spread via crypto malvertising.
45
Gambling Goblin Turns Brazilian Government Sites Into SEO Weapons
Check Point links Chinese-speaking cluster Gambling Goblin to SEO-fraud compromises of Brazilian government sites via malicious Apache modules since mid-2025.
64
Breaking the Seal: Static Deobfuscation of JSCeal’s Compiled V8 Bytecode
Check Point's hasherezade details static deobfuscation of JSCeal, a V8-bytecode stealer targeting cryptocurrency applications since March 2024.
55
31st August – Threat Intelligence Report
Manchester Airports Group disclosed a cyberattack exposing contact details of about 8.7 million customers across Manchester, Stansted, and East Midlands airports.
76
Microsoft Defender's Own Driver Can Be Weaponized to Delete Security Software at Boot
Check Point revealed BTR Reforged, a technique weaponizing Microsoft Defender's built-in BTR.sys driver to delete security software at boot without exploiting any vulnerability.
58
Thousands of Hacked WordPress Sites, One Operation: Unmasking StopAndProtect
Check Point uncovers the StopAndProtect ransomware operation infecting thousands of WordPress sites via ClickFix social engineering and PowerShell downloaders.
55
Microsoft Patches 398 Flaws Including a Windows Driver Zero
Microsoft's August Patch Tuesday fixes 398 CVEs, including actively exploited Windows zero-day CVE-2026-68820 used by Lazarus for SYSTEM privilege escalation.
82
Related CVEs
by mentions- CVE-2026-5504070%9.1Authentication Bypass in Microsoft SharePoint Server
- CVE-2026-68820<1%7.0Use-After-Free Local Privilege Escalation in Microsoft Windows WinSock AFD Driver
- CVE-2026-628151%9.8Use-after-free RCE in Microsoft MsQuic via crafted network packets
- CVE-2026-628933%9.8Pre-auth use-after-free RCE in Microsoft Windows Deployment Services (WDS)
- CVE-2026-591242%9.8Unauthenticated Deserialization RCE in Microsoft HPC Pack
- CVE-2026-628781%9.8Unauthenticated Stack Buffer Overflow RCE in Windows DNS (CVE-2026-62878)
- CVE-2026-635203%8.1Unauthenticated RCE in Microsoft SharePoint Server
- CVE-2021-24092<1%7.8Microsoft Defender Elevation of Privilege Vulnerability
Appears with
- OpenAIvendor · 4
- Check Point Researchorganization · 4
- OpenAIorganization · 3
- JFrogvendor · 3
- ChatGPTproduct · 3
- ChatGPTai model · 3
- Hugging Faceorganization · 2
- JSCealmalware · 2
- Windowsproduct · 2
- JFrogorganization · 2
- Gmailproduct · 2
- Microsoftvendor · 2
- JFrog Artifactoryproduct · 2
- HPC Packproduct · 1
- Gambling Goblinthreat actor · 1
- oRATmalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.