Check Point Research disclosed a flaw in OpenAI's ChatGPT that allowed attackers to extract data from a victim's connected Gmail account via a hidden cross-account command channel, which OpenAI has si…
Check Point Research has discovered a security flaw in ChatGPT that could allow attackers to secretly exfiltrate Gmail data via manipulated prompts, shared links, or custom GPTs, abusing the user's le…
Check Point Research disclosed a covert channel in OpenAI's internal JFrog Artifactory instance that allowed one ChatGPT account to send hidden tasks, such as retrieving email data from a connected Gm…
Check Point Research found a covert bidirectional channel between code-execution containers of two separate ChatGPT conversations under different accounts, enabling cross-account data leakage and hidd…
OpenAI's August 19 announcement that Codex can now be built into products and workflows as an open agent harness, SDK, command-line tools, and app server signals a shift toward AI-managed publishing, …
Invariant Labs researchers demonstrated in April 2025 that a malicious Model Context Protocol server could silently exfiltrate a user's entire WhatsApp message history by hijacking a tool description,…
Security researcher Elad Meged of Novee Security demonstrated at Black Hat USA 2026 that a single GitHub issue can trigger remote code execution and exfiltration of API keys and tokens from AI coding …
Three independent security research teams found that AI coding assistants Amazon Q Developer, Claude Code, and Windsurf auto-execute workspace configurations before developers see a consent prompt, en…
At Black Hat USA 2026 on August 5, Check Point Research analysts Yarden Porat and Shahar Tal disclosed 11 vulnerabilities across six major AI agent frameworks, including LangChain, LangGraph, CrewAI, …
Check Point Research's AI Security Report 2026, published July 14, says AI is now operating inside live cyberattacks, citing a breach that generated 5,317 AI-executed commands across 34 sessions and a…
Check Point Research found five memory-corruption bugs in Cloudflare's workerd runtime, which underpins both Cloudflare Workers and Cloudflare Code Mode, and exploited them to break out of the sandbox…
Check Point announced the AI Network Firewall on July 30, 2026, embedding prompt- and agent-level inspection into its firewall software release R82.20 to close the visibility gap in enterprise AI traf…
Singapore will require operators of its 11 critical infrastructure sectors to use a homegrown intrusion detection tool and ensure board-level cybersecurity accountability under updated Cybersecurity C…
Check Point Research's second annual AI Security Report warns that artificial intelligence has crossed from an assistant to an operator in cyberattacks, now directly executing intrusions with minimal …
Check Point Research's Annual AI Security Report 2026 finds that AI has evolved from a development aid to a live attack operator, now running intrusions in espionage campaigns and criminal breaches, i…
Check Point Research demonstrated that DeepSeek V4 can generate functional browser-based ransomware code when prompted with neutral language, bypassing explicit safety filters. The proof-of-concept at…
Check Point Software Technologies is embedding OpenAI's GPT-5.5 into its security products through OpenAI's Daybreak Cyber Partner Program, a move that could enhance protection for blockchain infrastr…
MCP servers, which allow AI tools to read files and call APIs, often run on individual developer machines with no oversight, creating security risks. The Bifrost AI gateway and Bifrost Edge aim to bri…
Over 7,000 exposed Langflow AI agent servers are under active attack, with researchers uncovering similar vulnerabilities in LangGraph and LangChain-core that allow SQL injection, path traversal, and …
TrueFoundry's engineering team implemented governance for Claude Code after an audit revealed 60+ engineers using the tool with no oversight, and two CVEs exposed critical vulnerabilities. The team fo…