When the PHP2Shell vulnerabilities became public, my thoughts went back to Log4Shell.  Five years ago, Log4Shell showed how difficult it can be to respond to a critical vulnerability in software used across countless applications and services. PHP2Shell presents a similar challenge. The technical details are different, but the need to quickly understand where you’re exposed and take action is very familiar.  I believe we should expect more incidents like this. AI is making it possible to discover vulnerabilities in widely used software at a speed and scale we haven’t seen before. As these capabilities become more accessible, we are likely […]

The post PHP2Shell: Log4Shell at AI Speed — A CISO’s Perspective appeared first on Check Point Blog.

Two critical vulnerabilities in PHP, the programming language behind a large share of the world’s websites, online stores and internet services, are being actively targeted. Since details of CVE-2026-109618 and CVE-2026-109619, known as PHP2Shell, leaked ahead of planned disclosure, 10% of organisations worldwide have been impacted (“impacted” means exploitation attempts, we have no way of knowing if the attack has been successful), according to Check Point Research. Hourly activity peaks at midnight, when fewer security teams are watching. Government institutions in the Netherlands and Finland have taken some of their websites offline as a precaution. What PHP2Shell is and why […]

The post PHP2Shell Update: One in ten organizations impacted as Europe bears the brunt appeared first on Check Point Blog.

As Amazon prepares for Prime Big Deal Days, its Fall Prime Day event on October 6-7, cybercriminals are already exploiting the anticipation surrounding one of the year’s largest online shopping events. New findings from Check Point Research reveal a significant increase in Amazon-related domains, alongside ongoing phishing campaigns and malicious websites designed to target online shoppers. Amazon-Related Domain Registrations Continue to Rise Check Point Research observed a steady increase in newly registered Amazon- and Prime Day-related domains in the months leading up to the event. New Amazon- and Prime Day-related domain registrations have risen for three straight months, climbing from […]

The post Amazon Prime Big Deal Days 2026: As Shopping Activity Surges, So Do Cyber Threats appeared first on Check Point Blog.

Where global enterprises lose ground Ask any global IT leader what slows their enterprise down, and they’ll rarely identify the network itself as the issue. The friction often shows up at the borders, where one country’s infrastructure meets another’s regulations and coherence quietly falls apart. Every new region a company enters brings its own regulatory regime, infrastructure boundaries, and performance challenges. Stitch enough of these together, and the result is a patchwork architecture, held up by exceptions rather than one unified design. AI adoption is stretching that patchwork to its limits. It’s compounding growing demands from distributed SaaS, always-on collaboration […]

The post SASE in the AI Era: Why Secure Global Connectivity Matters More Than Ever appeared first on Check Point Blog.