S08E11: Downstream Damage

On this episode, we’ll talk about the release of Check Point Firewall R82.20, a new Critical Security Advisory, OpenAI and Safety, Anthropic Risk Report, CoSnitch, AI Agents finding and exploiting CI/CD flaws.CVE-2026-91843 - Stack overflow in login process to the Security Management and Log ServersCVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management ServerCheck Point Gateway and Management Hardening GuideCheck Point Supports OpenAI’s Call for Collective Action on Cyber DefenseSafety overview: GPT‑6 AstraDaybreak for Frontline Defenders: $1B to protect essential servicesAn Alien MindCheck Point Brings OpenAI Daybreak Models Across Its Security Platform to Help Defenders Find, Validate, and Remediate RiskASCII smuggling isn't just an AI security riskU.S. Lawmakers Propose Standards for Secure AI AgentsNSA and Others Warn China-Based AI Companies are Distilling U.S. Frontier AI Modelsfw monitor Under The Hood Part 1fw monitor Under The Hood Part 2fw monitor Under The Hood Part 3What is fw monitor?Check Point Live Patch: Why sk185114 Changes the Operational Security ModelCheck Point Live Patch (CPLP) – TAC Clarifications and Practical Guide Offline Installationhping/netcat removal from R82.10Max Power 2026 BookScaling Check Point Automation with Arodonata

On this episode, we’ll talk about the release of Check Point Firewall R82.20, a new Critical Security Advisory, OpenAI and Safety, Anthropic Risk Report, CoSnitch, AI Agents finding and exploiting CI/CD flaws.Check Point R82.20 ReleaseTechTalk: AI Network Firewall Deep DiveSimplify Admin Operations with R82.20FAQ for Security Gateways with Dynamically Assigned IP Address (DAIP)On-Premises SD-WAN Management with R82.20: Video, Slides, and Q&A[Action Required] - Critical Security Advisory: VPN Vulnerabilities CVE-2026-85102 and CVE-2026-8510Check Point Live Patch DiscussionOne or two thoughts on Live PatchingImportant Update For customers that installed manual LivePatch related to CVE-2026-85102OpenAI: Pacing model development in an era of cyber-critical capabilitiesOpenAI: How we think about safety and alignmentAnthropic Risk Report: August 2026AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical InfrastructureCoSnitchThe Approved-App Blind Spot: When Sanctioned AI Becomes Shadow AIWiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR 

On this episode, we’ll talk about MCP Servers, Hazmat, Patchmagedon, a LiteLLM Supply Chain Attack, Firewall rule limits, lab tools for Windows, Troubleshooting ARP and Layer 2 issues, DGA vs DNS Tunneling, and a tip when running debugs on a firewall.Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate SecretsWhat Is an MCP Server? A 2026 Technical GuideMCP Security - Risks and Best PracticesHow MCP Servers Can Expose Enterprise SecretsHazmat: Open-source containment for AI agentsPatchmageddonFBI: TEAMPCP COMPROMISED DEV TOOLS TO STEAL CLOUD CREDENTIALSLITELLM SUPPLY-CHAIN ATTACK – TECHNOLOGY, BANKING AND HEALTHCARE THE MOST AFFECTEDAI Data Center & AI Factory SecurityLocally managed R82.x.x policy rule count limitLab Tools: Windows Server CollectionPacket Loss and Traffic Drops Caused by ARP Table Overflow in Layer 2 Core TopologyDGA vs DNS Tunneling in Check PointTip for running debug on Firewall

On this episode, we talk on-premise SD-WAN management, IPS Optimization, Policy Auditor, and some AI News.On-Premises SD-WAN Management TechTalkAI Network Firewall TechTalkSimplify Admin Operations with R82.20 TechTalk (register link)IPS Custom Policy Best PracticesPolicy Auditor is now GAA GITHUB MISCONFIGURATION LET KIMI K3 CHEAT A CYBERSECURITY BENCHMARKThe AI governance confidence gap: Why trust in AI is running ahead of the capacity to govern it

On this episode of CheckMates Go, PhoneBoy talks about Check Point-specific CVEs, AI News, and Rulebase Evaluation, Maestro Troubleshooting, and Rate Limiting.CVE-2026-16232 - Authentication bypass with SmartConsole login process using application tokenCVE-2026-62144 - Management Authentication Bypass and Privilege EscalationCVE-2026-62145 - Local privilege escalation in Gaia PortalCVE-2026-18574 - Management Authentication BypassCheck Point Gateway and Management Hardening GuideWhen The Sandbox Stops Being a BoundaryAI Assist for Security ProfessionalsUnified Policy: Column-Based Rule MatchingMaestro Troubleshooting in PracticeExperience with SecureXL DoS FeaturesHow to configure Rate Limiting rules for DoS Mitigation in R82 and higherHow to configure Rate Limiting rules for DoS Mitigation in R80.20 - R81.20

In this episode, PhoneBoy talks about the AI Network Firewall and recent AI news.AI Network Firewall TechTalkThis Week in AI: Models, Mandates, and a Very Busy WeekWhen the Attacker is an AI AgentOpenAI shares unprecedented AI Cybersecurity incidentAI Agent Security just had it's catalyst moment

In this episode, I discuss Check Point’s AI Security Report, AI Appreciation Day, some recent posts from community members worth highlighting, and the introduction of Check Point Live Patch.The command "show ips-status" in the Management API which firewall IPS status was showed?VSX - Residual warp linksCheck Point + SDWAN + OSPF + SMB DAIP - TIP

In addition to the recent AI news, PhoneBoy discusses the R82.20 Public Early Availability Program. See also the TechTalk on SD-WAN On-Prem Management , a feature present in R82.20.

In addition to the recent AI news, PhoneBoy discusses updates with Web SmartConsole, Playblocks AI Agents Early Availability, other updates to Playblocks, and the Background Gateway Upgrade Early Availability.See also:Preliminary Report of the Independent International Scientific Panel on AI Executive SummaryWhen AI Invents the Attack: Browser-Native Ransomware

On this episode, we talk about The Great Exposure Reset and some recent AI news.See also: From Prompt Testing to AI Red Teaming at Enterprise ScaleLeave comments on CheckMates