Check Point links three intrusion clusters to suspected supplier CopperDragon
SilentDelivery, OceanGate, and DarkWire share Sparrow code or infrastructure across Latin America, Asia, and Europe.
Stories per day · 30 days
4 RSS
Relatedantidetect-browser2exposure-management2phishing2session-cookies2account-fraud1account-takeover1adspower1agentic-hacking1agentic-security1agent-security1ai-agents1artex1brand-impersonation1caasm1china-nexus1copperdragon1ctem1cybercrime1
74 stories, newest first · one card per story
Stories tagged #check-point
Criminals run autonomous ARTEX agents for broad cybercrime
Check Point found 1,608 live public consoles and ten exposed databases; one operator burned 36 billion tokens stealing signing certificates.
3
HYFLOCK ransomware encrypts files and blocks recovery
Partial recovery of some Office documents possible but certain builds corrupt files permanently.
Check Point lists five tests for exposure management platforms
The vendor says customers often apply a safe interim fix within one hour when ownership and control context are already known.
Check Point pitches safe remediation to move unused protections to enforce
The partner piece says 47% of measured organizations had under 50% protection enablement and cites a 99.5% remediation success rate.
1
Check Point uses OpenAI Daybreak to speed vulnerability research
The company says analyst work that took hours now takes minutes and is building agentic network security that needs human approval.
Check Point: antidetect browsers hide large fake-account operations
Kameleo, AdsPower, and MultiLogin can isolate profiles, mask fingerprints, and reuse stolen session cookies at scale.
2
Antidetect browsers plus AI automation can scale account fraud, Check Point says
Check Point says Kameleo, AdsPower and MultiLogin profiles, proxies and stolen cookies can hide bulk fake accounts and phishing.
2
Microsoft led brand-impersonation phishing in Check Point’s Q3 2026 data
Apple and Google each had 8%, while later lures spoofed Claude, Google Antigravity, Apple, and Docusign.
2
Small Agents, Smaller Blast Radius: Controlling What AI Can Do, (Fri, Oct 16th)
SANS argues defenders should build small least-privilege AI agents rather than caging general-purpose ones, citing Check Point's tool-call deviation detection.
4
Luna Moth Leaks Shed Light on Ransomware Group's Inner Workings
Leaked internal files expose Luna Moth's phone-based social engineering operation, where paired callers and remote-access operators extort victims' data.
1
28th September – Threat Intelligence Report
Check Point's weekly report covers ShinyHunters' FBI jobs-site breach, Bitget's $351.6M wallet theft, and actively exploited critical RCEs in Check Point and F5 products.
9
Week in review: Gyazo breach exposes 23.6M user data, TASK#STOMP steals documents
Weekly roundup leads with a Gyazo breach of 23.6 million users and the TASK#STOMP document-stealing backdoor.
4
CISA Warns of Multiple Check Point Product Vulnerabilities Exploited in Attacks
CISA says two Check Point flaws, including unauthenticated remote code execution, are being exploited.
3
CISA Adds Multiple Check Point Product Flaws to Exploited Vulnerabilities List
CISA added two actively exploited Check Point flaws, including unauthenticated VPN code execution, to KEV.
2
Check Point Pre-Auth Flaws Under Attack
Check Point says two critical pre-authentication flaws, including CVE-2026-85102, are being actively exploited.
1
Jev Is Not a Language Model, but It Breaks Like One
Check Point shows TypeSafe AI's Jev decision model can be prompt-injected into flipping verdicts for about 50 cents.
8
Hackers Exploit Critical Check Point VPN Flaws to Gain Remote Access Without Login
Check Point confirms active exploitation of two CVSS 9.8 VPN and management flaws enabling unauthenticated code execution.
1
CISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
CISA says two critical Check Point VPN and management flaws are exploited in the wild.
2
Check Point hacked: The security software protecting your network has become a prime attack target
Attackers are exploiting two pre-authentication Check Point firewall flaws rated CVSS 9.8.
3
Check Point warns of hackers exploiting Security Gateway VPN RCE flaw
Check Point confirms active exploitation of pre-auth VPN RCE CVE-2026-85102 and zero-day CVE-2026-93616, now both in CISA KEV.
4
InfraTrust report warns network management systems under attack
Active exploitation of critical Cisco and SonicWall management system vulnerabilities is a major trend, with attackers chaining flaws and deploying ransomware.
4
Attackers hit Check Point Management Servers and Spark firewalls, F5 BIG-IP APM instances
CISA adds four actively exploited zero-days to KEV, forcing immediate patching of critical flaws in Check Point, Arista, and F5 systems.
3
Check Point Patches Exploited Management Server Zero-Day
Check Point patched exploited zero-day CVE-2026-93616 in Management Server, and CISA added it and CVE-2026-85102 to KEV.
3