All news with #check point tag

🔍 In March 2026, Check Point Research reported a modest moderation in global cyber attack volumes, with an average of 1,995 weekly attacks per organization — down 4% month over month and 5% year over year. Despite the dip, activity remains historically elevated, driven by automation, attack surface growth, and risks tied to cloud adoption and GenAI. The report also highlights a notable rebound in ransomware activity and continuing exposure for critical sectors.

🔐 Check Point Services offers PS Private Training (Custom ILT), a tailored instructor‑led program that turns complex security environments into operational control. The service replaces generic courses with environment‑specific labs, hands‑on exercises, and field‑proven best practices delivered by active Professional Services consultants. It focuses on closing hands‑on skill gaps, speeding issue resolution, and lowering operational risk even in well‑equipped organizations.

✨ The Check Point Portal has received its largest visual refresh to date, delivering a brighter, cleaner and more modern UI designed to improve task completion and reduce clutter. The redesign introduces a new design system that rethinks spacing, typography, and component hierarchy to surface what matters faster. Administrators will find familiar functionality preserved while navigation and workflows are streamlined. The update emphasizes clarity, performance, and a consistent visual language.

🧠 This article presents a blueprint architecture for securing AI data centers and AI factories as enterprises shift from consuming AI to producing it. It explains how organizations can protect LLMs, data pipelines, and compute infrastructure against emerging, AI-specific threats by combining network segmentation, identity and access controls, data governance, and advanced threat prevention. Check Point emphasizes operational practices and industrial-grade security controls to enable secure, revenue-generating AI deployments.

🔒 At RSAC, Check Point outlined how enterprises can secure their AI transformation by protecting sensitive data, models, and communications from emerging attack vectors. The company emphasized integrated controls—data loss prevention, access governance, model protection and runtime threat detection—paired with unified visibility across cloud and on‑prem environments. Check Point shared practical steps for safe AI adoption, from discovery and policy enforcement to automated response, helping organizations reduce leakage and compliance risk while enabling productive AI use.

🔒 Check Point has integrated with NVIDIA DSX Air’s cloud-based testing environment to let organizations pre-validate security-aware AI data center designs before deploying hardware. The capability enables large-scale simulation and end-to-end validation of AI Factory deployments across compute, networking, orchestration and security. By validating integrations, configurations and automation in advance, teams can reduce resource intensity and accelerate secure rollouts.

🤖 GenAI has accelerated social engineering and phishing, allowing attackers to produce hyper-personalized messages, convincingly cloned executive voices, and realistic video impersonations in seconds. Deepfake incidents have shifted from online curiosity to tangible business risk, causing financial loss and operational disruption while making identity verification on everyday collaboration platforms increasingly difficult. To address these threats, Check Point Services has expanded its training portfolio and advocates for modern defenses and smarter awareness programs designed for the realities of the AI era.

📈 The February 2026 Check Point Global Threat Intelligence report found UK organisations saw fewer weekly attacks per organisation (1,504) than the global average (2,086), but a 36% year‑on‑year increase — nearly four times the global 9.8% rise. Education, energy & utilities, government, healthcare and financial services were among the most frequently targeted UK sectors. Ransomware remained acute, with 49 active groups and a plurality of victims attributed to Qilin, Clop and The Gentlemen. The report also warned that widespread, unmanaged GenAI use is elevating inadvertent data‑exposure risk, with one in 31 prompts judged high risk.

🛡️ Check Point Services has launched CPR Act, an expert-led unit that unifies security across the full lifecycle with continuous intelligence, coordinated action, and measurable outcomes. The service addresses fragmented products and visibility gaps by connecting research, monitoring, and response so each phase feeds the next. A dedicated team of researchers, analysts, and responders delivers clear, research-based insight for decisive action.

🔒 Check Point recognized top partners across the Asia Pacific at its FY25 Sales Kickoff in Bangkok, honoring organizations that delivered exceptional customer outcomes and sustained growth. The awards spotlight partners advancing prevention-first, AI-powered cyber security amid rising AI-driven threats, expanding hybrid and cloud ecosystems, and regulatory complexity. The gathering of nearly 1,000 employees and partners underscored the company’s commitment to regional collaboration and partner-led resilience.

🔐 Check Point has been named a Leader in the GigaOm Radar for Cloud Network Security for the third consecutive year. CloudGuard Network Security delivers an open-garden, cloud-agnostic architecture with integrations across 22 public and private cloud vendors, enabling consistent policy enforcement and centralized controls. The solution is positioned for budget-minded IT teams seeking to reduce multi-cloud complexity, maintain geographic compliance, and mitigate AI-powered cyber threats by foreign actors through consolidated visibility and automation.

🔒 Check Point outlines a strategy to help security teams regain control as AI accelerates attacks and transforms workflows. Rather than piling on tools, organizations must revalidate foundational controls across network, endpoint, email, SASE and cloud, and adopt prevention-first architectures. Check Point offers integrated visibility, unified policy management, threat intelligence and AI-aware controls to harden environments and streamline operations.

🏆 Check Point Software Technologies announced the 2025 EMEA Partner Award winners, celebrating partners that deliver AI‑powered, prevention-first cyber security outcomes. The winners were honored at the EMEA Sales Kickoff in Vienna, attended by more than 1,000 employees and partners. As the threat landscape accelerates with AI‑enhanced attacks and hybrid‑cloud complexity, these top-performing partners are helping organisations strengthen resilience, meet regulatory demands, and operationalise advanced prevention through collaboration and integrated solutions.

🏆 Check Point today announced its 2025 Americas Partner Award winners, recognizing partners for outstanding performance, growth, and technical excellence. The awards highlight partners' role in driving customer success and innovation across the region. World Wide Technology earned Partner of the Year, while NTSec Group was named Latin America Partner of the Year. These honors reflect a commitment to helping organizations stay secure.

⚠️ Check Point Research says VoidLink, a modular Linux malware framework, appears to have been planned, structured, and largely written by AI rather than solely by human developers. Analysts found programmatically generated sprint-style plans, detailed technical specifications, and repetitive code patterns consistent with automated generation. The project reportedly grew to tens of thousands of lines of code in under a week, compressing months of work into days. That speed and planning raise concerns that AI can significantly lower the barrier to producing sophisticated, cloud- and container-focused threats.

🔒 In Q4 2025, Check Point Research found Microsoft to be the most impersonated brand in phishing campaigns, responsible for 22% of branded phishing attempts. Google followed with 13%, while Amazon rose to 9%, driven by Black Friday and holiday sales, displacing Apple. After a lengthy absence, Facebook (Meta) reappeared in the top ten at fifth, underscoring renewed interest in social media account takeover. The pattern reflects a multi-quarter trend of attackers abusing trusted enterprise and consumer brands to harvest credentials and gain initial access.

🚨 Check Point Research reports large-scale active exploitation of CVE-2025-37164, a critical remote code execution flaw in HPE OneView. The campaign, attributed to the RondoDox botnet, generated tens of thousands of automated attack attempts that were blocked by Check Point defenses. The issue was reported to CISA and added to the Known Exploited Vulnerabilities catalog on January 7, 2026; organizations should patch immediately.

🛡️ Researchers at Check Point disclosed VoidLink, a sophisticated modular malware framework targeting Linux servers and containers in cloud environments. Written primarily in Zig with supporting components in Go, C, and JavaScript, the platform uses a two-stage loader and an extensible plugin ecosystem (37 built-in modules) delivered via a professional web-based C2 dashboard to harvest credentials and access source code systems. It detects major cloud providers and container runtimes, adapts evasion strategies based on detected EDR and kernel hardening, and employs rootkits and covert C2 channels to maintain stealthy, long-term access.

🔍 A newly identified cloud-native Linux malware framework named VoidLink targets modern cloud and container environments, providing custom loaders, implants, rootkits, and memory-loaded plugins. According to Check Point, it is written in Zig, Go, and C and adapts behavior based on Kubernetes, Docker, and cloud metadata queries. Communications can use HTTP, WebSocket, DNS tunneling, or ICMP encapsulated in a custom encrypted layer VoidStream, and the framework includes extensive anti-forensics and runtime protections. Analysts assess it appears under active development and may be a commercial or customer-targeted framework rather than evidence of a current widespread campaign.

🔎 Check Point Research has identified a modular Linux malware framework, VoidLink, linked to Chinese-speaking developers and designed to target cloud and container environments. The framework includes custom loaders, implants, rootkits and over 30 plugins supporting reconnaissance, lateral movement, persistence and anti-forensic techniques. It detects AWS, GCP, Azure, Alibaba and Tencent and can enumerate containers, hypervisors and orchestration platforms. No live infections have been confirmed, but documentation suggests commercial intent and active development.