Check Point has introduced a subscription-based firewall service called Firewall-as-a-Subscription, built on its R82.20 platform. The offering removes the need to buy hardware upfront but requires customers to commit to monthly or annual payments for at least three years. It bundles Check Point Force hardware firewalls, SandBlast AI-powered threat prevention, an 'agentic console' for managing bots and AI agents, live security updates, and premium support.
techspot.com
· 2026-10-28
Check Point Software researchers identified a new Windows-based infostealer named Aokigahara that, alongside typical data theft from browsers, VPN clients, crypto wallets and password managers, specifically harvests authentication files, session data and configuration files from AI tools including Claude, ChatGPT Desktop, Codex, Cursor, Windsurf, GitHub Copilot and Gemini CLI. Check Point said this focus on AI and developer tooling sets Aokigahara apart from most stealers currently seen in the wild.
darkreading.com
· 2026-10-27
Security researchers report that organizations are patching newly disclosed PHP vulnerabilities, dubbed PHP2Shell, much slower than attackers are exploiting them. Cloudflare's CEO said exploitation attempts rose from thousands to millions within hours of disclosure, while Check Point found 10% of organizations worldwide had already seen exploitation attempts. Ox Security and Flare separately found that over 97% of scanned instances had not advertised patched versions a day after fixes were released, and roughly half may never be patched, according to Cisco Talos.
darkreading.com
· 2026-10-23
A group calling itself Xuanye Group said it breached ASOS after impersonating a trusted contact to obtain one employee's login credentials, then used that access to reach multiple internal systems, including the platform used to send push notifications to ASOS's mobile app users. ASOS has around 17 million customers and 2,800 employees; the company says this incident is separate from a July breach at ASOS US that affected nearly 140,000 people via credential stuffing.
darkreading.com
· 2026-10-09
Check Point disclosed that hackers are actively exploiting CVE-2026-85102, a pre-authentication remote code execution flaw in its Security Gateway VPN certificate handling, and CVE-2026-93616, a path traversal bug in its Management web service. The company says the path traversal flaw has been exploited as a zero-day since July 23, while exploitation of the gateway flaw began September 12 using VPNs and proxies to mask attacker origin. CISA has added both vulnerabilities to its Known Exploited Vulnerabilities catalog, giving federal agencies until September 25, 2026 to patch.
bleepingcomputer.com
· 2026-09-23
Check Point Software has issued emergency hotfixes for CVE-2026-93616, a critical path traversal vulnerability in its Security Management Server that lets unauthenticated attackers upload and run arbitrary scripts. The company confirmed the flaw is being actively exploited, with a handful of customers already compromised, and released a fix in R82.20 Security Hotfix covering Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-Domain Log Server, and SmartEvent.
bleepingcomputer.com
· 2026-09-22
Check Point has issued security updates for CVE-2026-91843, a stack-based buffer overflow in the login process of its Security Management Server and Log Server products. The flaw allows unauthenticated attackers to remotely execute code with root privileges in low-complexity attacks requiring no user interaction. Check Point says it isn't aware of active exploitation but has provided detection guidance and interim mitigations for customers who can't immediately apply the fix.
bleepingcomputer.com
· 2026-09-18
The Dutch NCSC has issued an alert about two critical Check Point VPN vulnerabilities, CVE-2026-85102 and CVE-2026-85103, warning that attacks exploiting them are likely to begin soon even though no public proof-of-concept exploit exists yet. Check Point released patches for both bugs on September 9, covering Security Gateways and Management Servers across multiple supported and end-of-support versions.
bleepingcomputer.com
· 2026-09-12
GoKawiil