Organization
9 Interestana reports mention Check Point Research, newest first. Each is summarised from the original reporting and links back to its publisher.
Check Point Research disclosed a significant vulnerability in OpenAI's ChatGPT that could allow attackers to steal sensitive user data, specifically from connected Gmail accounts. The security firm detailed in a report published today that a single, carefully crafted instruction embedded…
Cybersecurity researchers have detailed JSCeal, a sophisticated malware compiled using the V8 JavaScript engine, capable of harvesting credentials, conducting surveillance, and intercepting network traffic. Check Point Research, a leading cybersecurity firm founded in 1993 and known for its extensive threat…
A cybercrime group identified as Gambling Goblin has been actively exploiting vulnerabilities to install malicious Apache modules on web servers belonging to Brazilian government and educational institutions. These compromised servers are then used to redirect unsuspecting visitors to attacker-controlled websites…
Check Point Research has disclosed a critical security vulnerability that allows attackers to weaponize a legitimate driver within Microsoft Defender to uninstall security software during the Windows boot process. The technique exploits the BTR.sys (Boot Time Removal Tool) driver…
Artificial intelligence has advanced beyond merely aiding cybercriminals to actively participating in live attack chains, according to a new report released by Check Point Research. This evolution signifies a critical shift in the cybersecurity landscape, where AI's sophisticated capabilities are…
The Lazarus Group, a state-sponsored threat actor linked to North Korea, has been identified as the perpetrator behind the exploitation of a newly patched zero-day vulnerability in Microsoft Windows. This sophisticated attack allowed the group to gain SYSTEM-level access…
An Iranian hacking group, linked to Iran's Ministry of Intelligence and Security (MOIS), has been actively employing a newly discovered modular command-and-control (C2) framework called Cavern (also known as Cav3rn).
The cyber threat infrastructure targeting the FIFA World Cup 2026 was already built, staged, and partially deployed by the event's opening on June 11, 2026. Threat actor activity was pre-planned and conducted months in advance across three sectors…
A threat actor has been observed using paid posts on legitimate news websites to promote warez, according to findings from Check Point Research. This campaign, dubbed "Crypto Clipper," employs a dedicated WordPress phishing page as its central hub.