All Articles

Check Point Research's annual AI security report documents a fundamental shift: AI is now executing attack chains autonomously, not just planning them. The numbers are stark.

On August 2, 2026, the European Commission's enforcement powers over general-purpose AI model providers under Chapter V of the EU AI Act become fully active. Systemic-risk GPAI providers face mandatory cybersecurity frameworks, adversarial testing obligations, and fines up to €15M or 3% of global revenue.

A new research paper describes an automated attack that poisons an AI agent's durable memory through a single email, with success rates above 70% against current frontier models. The planted lie loads into every subsequent session until manually audited.

Nebula Security's VEGA AI tool uncovered CVE-2026-43499 in the Linux kernel, a use-after-free flaw present since 2011 that grants root access to any logged-in user and escapes containers. Public exploit code is now available and a chain with a Firefox bug enables full remote compromise on Android.

A Huntress incident response investigation uncovered a PowerShell Active Directory recon script built by iteratively prompting an AI — the first documented case of 'vibe-coded' malware recovered from a live attack.