CheckMates Go: Cyber Security Podcast from Check Point: Recent Episodes
Check Point CheckMates
Learn about Cyber Security topics through brief, informal conversations with experts from Check Point. Topics include: Incident Response, Customer Success Stories, Cyber Security Trends and Technologies.
In this episode, we talk about the Spark Management Portal, Cloud Workshops, troubleshooting legacy geo policy, Network Groups and Updatable Objects, Dynamic URL Lists for Application Control and URL Filtering, and the best way to upgrade a NIC to a higher speed while minimizing the work.
- Quantum Spark Management Unleashed TechTalk September 2025: Video, Slides, and Q&A
- Global Cloud Workshop Roadshow
- Troubleshooting Legacy Geo Policy
- Target version does not support Network Group objects that contain inner groups with Data Center objects
- Creating Application Control and URL Filtering Rules
- ClusterXL – Changing MGMT and eth2 from 1Gb to 10Gb
- Firewall Uptime, Reimagined: How AIOps Simplifies Operations and Prevents Outages
Wel talk about our latest integration with Wiz, more management features you may not be using, various tips and tricks related to VPNs, and an invitation to Check Point’s Usability Lab.
- Video: Wiz + Check Point: Cloud Security Integration | Visibility + Prevention in Action
- Unifying Cloud Risk and Network Defense: Wiz and Check Point
- This Month’s Spotlight - 3 Features You Should Start Using Today - September 2025
- PSA: Check Point and Palo Alto - GCM Phase 1
- HowTo: Configure a VPN between FortiGate & Check Point
- sk108600: VPN Site-to-Site with 3rd party
- Block VPN Traffic by Country
- Issue with DNS resolution in browser when connected via Check Point Mobile client
- Check Point Usability Lab
We have an excerpt from our recent Future of SD-WAN session and how Check Point products protect against BRICKSTORM.
This week, we’ve got some Maestro content, how well does Threat Prevention work without https inspection enabled, rad errors, improvements to Application Control signatures, a way to find IPS Signatures with the API, CloudGuard WAF updates, and a good reason not to run debugs on a production firewall.
- Check Point Acquires Lakera
- Introducing Lakera - Securing the AI Frontier TechTalk
- Maestro Best Practices FAQ
- Maestro and Asymmetric Connections
- What real production do we get from Threat Prevention Without HTTPS Inspection
- How to Deal with RAD Errors
- Advanced Technical Resource Guide: RAD
- Improved App Control Detection Without HTTPS Inspection
- How to filter for IPS signatures with a space in the name via the API
- CloudGuard WAF: Product News September 2025
- Run Debugs in a Maintenance Window
In this episode, PhoneBoy talks about the DigiCert issue, an excerpt from our External Cyber Risks session, four features you should be using, a SmartConsole extension to help you find zero hit-count rules, and new API calls in R82 JHF 38.
Upcoming Sessions the week of September 8 2025:
- The Future of SD-WAN
- Management API Best Practices
- Quantum Spark Management Unleashed
- Remote Access and SASE Best Practices
PhoneBoy plays an excerpt from the recent State of Ransomware Q2 2025 session as well addressing a bunch of questions on Web Filtering!
- Web Filtering Best Practices August 2025
- Not showing last matched layer in logs
- App Control/URLF Rules and Classification
- Unified Column-Based Rule Matching
- Best Practices for Websites and Applications
- Product & Feature Suggestions
- External RFE Ideas Portal (Pilot)
PhoneBoy plays an excerpt from our SharePoint CVEs Deep Dive, 3 Features You Should Start Using, different DNS servers per domain, using dnsmasq prior to R82, interpreting fwaccel stat output, ordered versus inline layers, and a SmartConsole cheat cheat.
PhoneBoy discusses Check Point's announcement of the Quantum Force 3900 Series Appliances, sk183199, Hotfix Installation Order, R82.10 Production Early Availability, and new updatable objects (including one for MCP Servers).
Make sure to register for our upcoming TechTalk showing off Veriti, a.k.a. Threat Exposure Management.
PhoneBoy discusses the latest TechTalk on AI Agents, Threat Prevention Performance Boost in R82, R82 JHF 25, SAML and Secondary Connect, SSH to a given VS, and the generic-object API.
We have a few TechTalks planned:
- 18 June 2025: Integrating Check Point Security Management with AI Tools
- 2 July 2025: New products for Superior Branch User Experience plus Higher Threat Prevention Throughput
- Mid-July: Veriti (exact date to be finalized)
I also discuss how to filter "wildcard domains" for web access and how to build your own Check Point lab.
Some recent discussions on the CheckMates community:
- IKEv2 Benefits
- sk166415
- Harmony Email and Collaboration and Microsoft DirectSend
- Show NAT Tables
- fwxalloc top users
- fw up_execute
- Maestro Masters Architectures and Optimization
- https://community.checkpoint.com/t5/Maestro/Maestro-Q-amp-A-R82-Highlights-and-Common-Questions/td-p/247980
- Check Point Quantum Management MCP Server
Professional Services Consultant Lari Luoma gives an introduction to Maestro and how it is different from ElasticXL, launched as part of the R82 release.
- Quantum Maestro Introduction session
- Quantum Maestro Architectures and Optimization session
- Join us for Maestro Migration and Upgrade Best Practices on June 3rd: EMEA, AMER
Product Manager Amit Navon discusses discusses the four ways Check Point provides a hybrid SASE solution.
Product Manager Bar Yassure discusses what we did to improve performance and stability in the E88.70 release of Harmony Endpoint.
An except from Tim Hall's Be Your Own TAC Part Deux session on User-Space Performance Pack (UPPAK) for Quantum Security Gateways.
An excerpt from a session with Danny Jung, Cyber Security Evangelist at SITS Group at CPX 2025 Vienna: Maestro for Everyone!
I talk about the highlights from CPX 2025 and include a mention to our upcoming Be Your Own TAC Part Deux session for EMEA and Americas on 27 March 2025!
Some recent threads on CheckMates worth further discussion.
- Properly defining the Internet within a security policy, let's discuss!
- NAT Tip
- AnyDesk - on DHS Compliant version
- sk182752: Harmony Endpoint Client blocks AnyDesk
- vpnconfig alternative
- R81.20 High CPU being reported by Solarwinds and TOP
- sk101878: CPView Utility
- sk178566: Skyline Deployment
- sk92402: How to query utilization of individual CPU cores via SNMP
- 2M DNS Queries Per Day
- Single Domain Solution
- Introducing CheckMatesAI
An excerpt from our GenAI Security TechTalk from September.
- GenAI Security from Check Point
- Unveiling the Future of Network Security in the Era of AI
An excerpt from our recent No Suit No Ties session from Incident Response called Vulnerabilities and Workarounds, where we explore a compelling case study in which attackers exploited vulnerabilities in an internet-facing device to gain initial access, escalate privileges, conduct reconnaissance, and infiltrate the internal network.
PhoneBoy talks about a paper written by Antoinette Hodes called Pay Now or Pay Later, understanding the costly consequences of neglecting OT/ICS Cybersecurity.
- https://www.checkpoint.com/solutions/iot-security/
- https://www.industrialcybersecuritypulse.com/facilities/throwback-attack-an-insider-releases-265000-gallons-of-sewage-on-the-maroochy-shire/
PhoneBoy talks about the new features and functionality in the R82 release for Quantum Security Gateways and Management.
- Now that R82 is out, how about an AI generated podcast about it?
- R82 Quantum Security Management Administration Guide: Self Managed Security Gateways
- Known Limitations for Scalable Platforms (Maestro Appliances, Chassis, and ElasticXL)
An excerpt from a great TechTalk we did back in June on Threat Hunting with Memory Forensics given by Monnappa who also teaches Check Point's Threat Hunting Using Memory Forensics course.
NO SUITS, NO TIES aims to shed light on how Check Point MDR and Incident Response Analysts play a pivotal role in proactively identifying and responding to these threats when they are least expected.
This is an an audio version of our first No Suits, No Ties session entitled Going Equipped To Compromise where we discuss real-world examples from real cases where ‘utilities’ were and are being used in compromise incidents.
The session will cover:
- The type of tools being used and how they are leveraged
- How to interpret detection events when these tools are deployed
- How much time you might have to respond once the first event is seen
- What visibility may be lost when ‘killer’ or ‘disruption’ tools are used
- What response and containment activities to focus on where these tools have been observed
PhoneBoy talks about some recent topics on the CheckMates community:
- DNS forwarding for Internal Domain
- Fun with Check Point Dynamic IP Gateways in R77.20 with Gaia
- How to create object for private cloud Kubernetes on SmartConsole
- How to read packet-captured file by fw monitor
- sk30583: What is FW Monitor?
- sk182438: R81.10.15 for Quantum Spark Appliances
- sk182467: Enterprise Endpoint Security E88.60 macOS Clients
- R81.20 Open Server Hardware Requirements
- MDS R81.20 on KVM, fresh install broken
- Deep Dive on the latest R82 TLS Inspection Enhancements! - Recording & Q&A
In this episode, we'll discuss some new features in Harmony Endpoint as well as best practices for deployment. These are excerpts from recent TechTalks:
- Harmony Endpoint: Packing a Punch
- Mastering Endpoint Security
In this episode, we discuss a handful of recent threads on CheckMates including:
- Adding multiple values using mgmt_cli
- Adding administrators via mgmt_cli
- CheckMates Live Canada: Management API Best Practices
- Interface Order on VMware
- Central management and certificate based VPNs
- Can I manually update AntiVirus and Antibot through cli
- iperf test speeds are different on internal and external for QoS testing
SKs mentioned:
- sk69261: How to change interface naming on Open Servers running Gaia OS
- sk21156: How to disable CRL validation when authenticating a VPN with certificates
- sk26628: Command to erase all Certificate Revocation Lists (CRL) from cache
- sk116340: Security Gateway tries to fetch CRL even though CRL is distributed over IKE
- sk143972: How to trigger an update for Application Control / Anti-Virus /Anti-Bot / IPS
- sk105179: How to clear Anti-Virus and Anti-Bot kernel cache
In this episode, we talk about how Check Point has shifted the paradigm in Email Security. This is an except from our Paradigm Shift TechTalk back in May.
In this episode, we talk about how Check Point has shifted the paradigm in Cloud Security. This is an except from our Paradigm Shift TechTalk back in May.
PhoneBoy discuses some recent threads in the CheckMates Cyber Security Community:
- Traffic Generated by Load Tester is Dropped
- dmd_mgmt Process Using Several CPUs at 100%
- HTOP ALL CPU SND STUCK 100%
- Update SNX for Linux on Gateway
- Weird Behavior with CPNotEnoughDataForRuleMatch
Referenced SKs:
- sk32578: SecureXL Mechanism
- sk178070: HyperFlow in R81.20 and higher
- sk178566: Skyline Deployment
- sk92402: How to query utilization of individual CPU cores via SNMP
- sk87522: Quantum Spark Appliances - How to connect to the office using the SSL VPN (SSL Network Extender)?
Documentation References:
- SSL Network Extender Administration Guide: Getting Started with SSL Network Extender
- R81.20 Mobile Access Administration Guide: The Legacy Mobile Access Portal
Want to see more episodes like this? Leave a comment on CheckMates on the thread for this episode: S06E12: Recently on CheckMates
In this episode, we provide an excerpt of our previous TechTalk on Harmony SASE where we include a case study where we were able to migrate a customer to Harmony SASE literally over a weekend!
In this episode, we provide an excerpt of our previous TechTalk on Infinity AI Copilot with focus around Quantum Security Gateway management use cases.
In this episode, we share some excerpts from our TechTalk on What's New in Quantum Spark back in March, provide information on the Early Availability of R81.10.15, and some Q&A around Quantum Spark appliances.
- What's New Quantum Spark 1900/2000 Appliances TechTalk: Video, Slides, and Q&A
- Join R81.10.15 Early Availability
In this episode, we share some excerpts from a couple of recent sessions we did on Identity Awareness Best Practices.
- Identity Awareness TechTalk with Peter Elmer
- Identity Awareness Best Practices with PhoneBoy
In this episode, PhoneBoy talks about CVE-2024-24919 and five ways generative AI will impact CISOs and cyber security teams.
- Preventative Hotfix for CVE-2024-24919 - Quantum Gateway Information Disclosure
- Preventative Hotfix for CVE-2024-24919 - Quantum Spark Gateways
- Infinity AI Copilot
In this episode, PhoneBoy talks about how AI can be used for Threat Hunting.
- How AI turbocharges your threat hunting game
- 5 ways ChatGPT and LLMs can advance cyber security
In this episode, PhoneBoy talks about how organizations can be better prepared for the use of AI.
- Two Thirds of Organizations Are Not Prepared for AI Risks
- NIST’s AI Risk Management Framework
- ISACA’s new online courses
- Australia’s Artificial Intelligence Ethics Framework
- Principles for the security of machine learning
- Check Point’s whitepaper concerning the prevention of next generation threats through AI and innovation.
- Global Skill Development Council Generative AI in Risk and Compliance
- The International Association of Privacy Professionals AI governance training
- The SANS Institute offers an AI Security Essentials for Business Leaders
In this episode, PhoneBoy talks about cybersecurity then and now along with how AI can be leveraged to improve your security posture.
Links:
- Check Point Software Rings the Opening Bell
- Hands on with Infinity AI Copilot TechTalk on CheckMates
- How AI Can Benefit Zero Trust
PhoneBoy talks about how XDR solutions should improve your cyber security posture, but not all do.
- XDR Researcher Turns XDR Software Into Perfect Malware
- What is XDR?
- Endpoint Security VPN configuration options are obscured in trac.config file
- Harmony Endpoint
- Sense of Urgency
A brief overview of the product announcements made at CPX 2024. The materials are available on CheckMates: https://community.checkpoint.com/t5/General-Topics/CPX-2024/m-p/208174#M34494
Reviewing some of the top cyber security stories for 2023. Hope to see everyone at CPX 2024!
In this episode, PhoneBoy talks about fraud and how to be resilient against it.
- 6 types of fraud to remain aware of (and other trends)
- 10 ways to reduce your risk of cyber fraud
- Quantum SASE
In this episode, PhoneBoy covers three stories:
- Kerberoasting attacks explained (and how to prevent them)
- 7 actionable security automation best practices
- 5 emerging malware threats, record-breaking malware activity
In this episode, PhoneBoy talks about the challenges with ensuring security with open-source software, which is in many products and services you use today.
In this episode, PhoneBoy talks with Aaron Brongersma about his exploration of AI tools, the issues with data residency and AI, the societal issues with AI, AI as a Service, and a few words about Quantum SASE.
Some questions and answers around Blockchain Security from our TechTalk on Blockchain Security.
PhoneBoy talks to Adam Gray, CTO of Novacoast about how ChatGPT is used by threat actors to compromise systems, the GPT-4 System Card, where ChatGPT seems to be useful in general with respect to cyber security, ChatGPT writing legal briefs, what early search engines and ChatGPT have in common, and how the more some things change, the more they stay the same.
A discussion between Check Point's Chief Strategy Officer Itai Greenberg and Idan Levin, Partner at Collider Ventures about the security trends related to blockchain security.
In this episode, PhoneBoy talks to Adam Gray, CTO of Novacoast to discuss some of what he's seen as part of their MSSP operations, including Living off the Land attacks, how AI is being actively used to exploit vulnerabilities, mobile security, CIS Controls, browser extensions, the data modern cars collect and share, password managers being a source of compromise, biometrics, why organizations use MSSPs like Pillr, automation and orchestration, vulnerability management, and Windows XP still being in use.
In this episode, I talk about how over-provisioning identities in the cloud leads to "shadow access" by malicious actors...and what you can do about it.
- Eight Key Success Factors for Cloud-Native Application Protection (CNAPP)
- CloudGuard Cloud Native Application Protection Platform
In this episode, PhoneBoy talks about some of the more rogue uses of GPT-like tools.
- ChatGPT generates 'convincing' fake scientific article
- 'DarkBERT' GPT-Based Malware Trains Up on the Entire Dark Web
- The WormGPT case: How Generative artificial intelligence (AI) can improve the capabilities of cybercriminals and allows them to launch sophisticated attacks
- Lowering the Bar(d)? Check Point Research’s security analysis spurs concerns over Google Bard’s limitations
In this episode, PhoneBoy talks with Aaron Brongersma about the challenges of ensuring your code is secure, particularly when people who traditionally haven't written code are having to do so to leverage certain technologies like ChatGPT.
- VSCode Security: Malicious Extensions Detected- More Than 45,000 Downloads- PII Exposed, and Backdoors Enabled
Ralph Bonnell did a great session on DNS as a CheckMates TechTalk. You can access the materials (including some Q&A) here.
In this episode, PhoneBoy covers a few recent stories related to the legal and cybersecurity issues related to generative AIs such as ChatGPT.
- Highly effective responses to the alarming democratization of AI
- Breaking GPT-4 Bad: Check Point Research Exposes How Security Boundaries Can Be Breached as Machines Wrestle with Inner Conflicts
- Authors Accuse OpenAI of Using Pirate Sites to Train ChatGPT
Cyber Security Evangelist Ashwin Ram talks about ChatGPT in the context of Artificial Intelligence and the Evolving Threat Landscape.
Full TechTalk: https://community.checkpoint.com/t5/General-Topics/AI-and-the-Evolving-Threat-Landscape-TechTalk-Video-Slides-and-Q/m-p/181992/highlight/true#M30319
Another series of headlines from our friends at CyberTalk.org
- What is purple teaming and why is it useful?
- One easy way to secure your Android
- 6 simple & straightforward Cyber Monday fraud prevention tips
- Canada advances cyber security via Indo-Pacific Strategy
Second in a series on business data and how organizations can protect it. Mazhar Hamayun is a Security Engineer with Check Point and a member of the Office of the CTO who covered this topic on CyberTalk.org. We discuss some of his tips in this episode.
The book I mentioned in this section: Building Internet Firewalls 2nd Edition.
Some articles from our friends at CyberTalk.org about passwords, phishing, and passkeys.
- 20 Password Management Best Practices
- 10 Signs of Phishing for Anyone Who Champions Security
- 5 Steps to Mitigate Credential Exposure Risks
- This is How We Will Replace Passwords in the Near Future…
First of a series on business data and how organizations can protect it. Mazhar Hamayun is a Security Engineer with Check Point and a member of the Office of the CTO who covered this topic on CyberTalk.org. We begin the series by discussing what business data is, where it might reside, who might want it that shouldn't, and why.
Some recent headlines from our friends at CyberTalk.org:
- FOMO on the latest cyber security tech?
- 8 mistakes CIOs make and how to avoid them
- American Airlines learns breach caused by phishing
- Adware installed 13 million times + how to uninstall it
Part 2 of my conversation with Cyber Security Evangelist Eddie Doyle about how organizations can create a culture of cyber security that goes beyond just the technical people, and it's easier than you think!
- Miller's Law
Part 2 of my conversation with Cyber Security Evangelist Eddie Doyle about how organizations can create a culture of cyber security that goes beyond just the technical people, and it's easier than you think!
- Miller's Law
From our friends at CyberTalk.org:
- How to prevent sneaky zero day attacks on fleets of smartphones
- CISO’s Guide to Mobile Security
- Hackers could crash power grids, but they’re mostly after…
- 10 mind-boggling cyber security statistics (and they might scare you)
- 7 actionable CISO strategies for effective executive-level communication
PhoneBoy talks with Cyber Security Evangelist Eddie Doyle about how organizations can create a culture of cyber security that goes beyond just the technical people, and it's easier than you think!
Some recent CISO-focused headlines from our friends at CyberTalk:
- 5 key traits of highly effective CISOs
- 6 different types of CISOs and the environments they thrive in
- Zero Trust Segmentation: A primer for CISOs
Part 2 of 2 of our conversation with Check Point Evangelist Mark Ostrowski about how to protect yourself from the threats out there today.
Full TechTalk here: https://community.checkpoint.com/t5/Threat-Prevention/Malware-2021-to-Present-Day-Building-a-Preventative-Cyber/m-p/152918#M4011
We're going to try something a little different with PhoneBoy reading and commenting on a few articles from CyberTalk.org. If you like this format, let us know by commenting!
Links:
- SmokeLoader distributes Amadey malware, what you need to know
- Xiaomi Phone Bug, Payment Forgery
- Researching Xiaomi's TEE to get Chinese Money
- Healthcare Payer CISO Shares Real World Insights
- MailChimp Breach Exposes Email Addresses and Callback Phishing
- 10 Key Facts About Callback Phishing Attacks
Part 1 of 2 with Check Point Evangelist Mark Ostrowski on the state of malware over the last 18 months or so.
Full TechTalk here: https://community.checkpoint.com/t5/Threat-Prevention/Malware-2021-to-Present-Day-Building-a-Preventative-Cyber/m-p/152918#M4011
PhoneBoy and fellow Cyber Security Evangelist Grant Asplund talk about the current state of the workplace in the era of Covid and some stories of pre-Covid business travel.
Part 2 of PhoneBoy's conversation with Adam Gray at Novacoast about Incident Response, Remote Access, and the challenges of doing cyber security in a distributed world.
Part 2 of PhoneBoy's conversation with fellow Cyber Security Evangelist who hosts the CISO's Secrets podcast as well as the Talking Cloud podcast. We talk a little bit about MetaInfo, a company Check Point acquired in 1998, and a bit more technology history that is still impacting cyber security today.
That diagram from 1997 mentioned in the show is on the CheckMates post for this episode.
PhoneBoy talks with Adam Gray, a founding and current member of the Board of Directors of Novacoast. We talk a bit about the early days of Cyber Security, how that led to the NovaSOC offering, then a bit about the potential security issues with browser extensions.
PhoneBoy talks with fellow Cyber Security Evangelist Grant Asplund, host of the CISO's Secrets podcast as well as the Talking Cloud podcast. Grant's got quite an interesting history, which we get into in this episode, talking his history opening up an Apple dealer back in the 1980s and what networking looked like back then.
PhoneBoy talks with Check Point Product Manager Yoni Nave about Check Point's upcoming Extended Detection and Response (XDR) offering which will also incorporate some Managed Detection and Response (MDR) elements if you need it.
PhoneBoy talks with Product Manager Yoni Nave about the evolution from Endpoint Detection and Response (EDR) to Extended Detection and Response (XDR).
PhoneBoy talks with Product Manager Yoni Nave to answer the question What is Endpoint Detection and Response?
In April of 2021, PhoneBoy talked with Tim Otis and Jon Niccolls of the Check Point Incident Response Team about Ransomware. Since then, things have gotten worse. How was Colonial Pipeline compromised with Ransomware? An older VPN account.
PhoneBoy talks with Tim Otis and Jon Niccolls from the Check Point Incident Response Team about what the recent Solarwinds Suburst attack and Microsoft Exchange Hack have in common from an incident response point of view.
Part 2 of our conversation with Product Manager Yoni Nave about Check Point's participation in the recent MITRE Engenuity Enterprise Attack Evaluation 2020, the excellent results Check Point received, and why it matters.
The report from MITRE: https://attackevals.mitre-engenuity.org/enterprise/participants/checkpoint/results.html?adversary=carbanak_fin7
Check Point's blog post on the topic: https://blog.checkpoint.com/2021/04/20/mitre-engenuity-attck-evaluations-highlight-check-point-software-leadership-in-endpoint-security-with-100-detection-across-all-tested-unique-attck-techniques/
Part 1 of the conversation: https://community.checkpoint.com/t5/CheckMates-Go-Cyber-Security/S03E09-MITRE-Engenuity-ATT-amp-CK-Evaluation-Part-1/ba-p/118020
Part 1 of a 2 part conversation with Product Manager Yoni Nave about Check Point's participation in the recent MITRE Engenuity Enterprise Attack Evaluation 2020, the excellent results Check Point received, and why it matters.
The report from MITRE: https://attackevals.mitre-engenuity.org/enterprise/participants/checkpoint/results.html?adversary=carbanak_fin7
Check Point's blog post on the topic: https://blog.checkpoint.com/2021/04/20/mitre-engenuity-attck-evaluations-highlight-check-point-software-leadership-in-endpoint-security-with-100-detection-across-all-tested-unique-attck-techniques/
PhoneBoy talks with Shay Levin and Val Loukine about some recent community projects:
- CloudMates: Our new cloud-focused community on CheckMates
- CheckMates Toolbox: A collection of useful tools developed by Check Point R&D and the CheckMates Community
- TechTalks: Our regular series designed to educate you on the latest information security technology and trends, including practical advice on protecting your critical assets from cyber attacks!
And register for our CPX 360 2021 Wrap-Up happening on April 20th @ 8am PDT/ 5pm CET.
PhoneBoy talks with Eric Anderson at Atlantic Data Security about the psychology of always being on the defense in cyber security.
What value does a value added reseller actually add? PhoneBoy talks with Eric Anderson at Atlantic Data Security about it.
Also, if you missed all the great content at CPX 360 2021, we have it on CheckMates!
The mics are turned around and PhoneBoy's the one being interviewed, this time by fellow Check Point Evangelist Grant Asplund for his Talking Cloud podcast.
In this episode, we'll hear from Gera Dorfman, Benny Shlesinger, Oded Gonda, and Itai Greenberg who will give you a preview of what we'll be speaking about in more detail as part of Check Point's CPX 360 2021 conference coming up on the 23-24 February 2021 around Network Security and how we will be expanding the Infinity vision. Make sure you listen to Part 1 of our CPX 360 2021 preview if you haven't already!
In this episode, we will hear from Dr. Dorit Dor, TJ Gonen, and Neatsun Ziv who will give you a preview of what we'll be speaking about in more detail as part of our CPX 360 2021 conference coming up on the 23-24 February 2021 around Cloud and Endpoint Security.
Is there really a talent shortage in Cyber Security? PhoneBoy talks with Eric Anderson at Atlantic Data Security about the reality of the situation.
As part of our CheckMates Fest, Check Point's Chief Security Advisor Dan Wiley gave us an overview of what Incidence Response saw in 2020 in terms of threats.
To see what Dan Wiley looked like during his presentation, head over to the show page on CheckMates.
A brief reflection about CheckMates Go in 2020 and our upcoming CheckMates Fest on 6 January.
PhoneBoy talks with David Ulloa, CISO at IMC Companies about their experience with Check Point CloudGuard SaaS, which he also posted a review of on IT Central Station. See also the full IMC Customer success story on the Check Point website and the customer Webinar with IMC Companies.
In a recent CheckMates event, put together by Check Point SE and CheckMates Ambassador Stacy Dunn, IT professionals gathered around the virtual campfire to tell some nightmarish tales, like that time a database was accidentally deleted, encountering malware or ransomware for the first time, or other disastrous IT situations that may have been miraculously recovered from.
In this excerpt, we have stories from David Hughes, Chris Young, and Skyler Tuter. Previous excerpts were pushed as S02E34 and S02E36.
PhoneBoy talks with David Ulloa, CISO at IMC Companies about their experience with Check Point Remote Access. See also the full IMC Customer success story on the Check Point website and the customer Webinar with IMC Companies.
It's that time of the year where people shop online. Check Point Research has seen a marked increase in the number of phishing-related emails, particularly those that claim to be from shipping companies.
PhoneBoy talks with Security Analyst Adi Rosenbaum about the report, what we found, and how to protect yourself from these scams. See the full report on Check Point's blog.
In a recent CheckMates event, put together by Check Point SE and CheckMates Ambassador Stacy Dunn, IT professionals gathered around the virtual campfire to tell some nightmarish tales, like that time a database was accidentally deleted, encountering malware or ransomware for the first time, or other disastrous IT situations that may have been miraculously recovered from.
The previous excerpt from this session was published as S02E34.
In this excerpt, we hear from Tracy Sargeantand Jeremiah Robinson.
PhoneBoy talks with David Ulloa, CISO at IMC Companies about their experience with Check Point SandBlast Agent. See also the full IMC Customer success story on the Check Point website and the customer Webinar with IMC Companies.
In a recent CheckMates event, put together by Check Point SE and CheckMates Ambassador Stacy Dunn, IT professionals gathered around the virtual campfire to tell some nightmarish tales, like that time a database was accidentally deleted, encountering malware or ransomware for the first time, or other disastrous IT situations that may have been miraculously recovered from.
In this excerpt from the event, we have stories from Stephen Hawkey and Joe Sullivan.
In case you need to double check, the new podcast RSS feed is: https://feeds.buzzsprout.com/1474780.rss
PhoneBoy talks with Tim Otis of the Check Point Incident Response Team about Wiper Malware... and The Cuckoo's Egg gets a mention.
A quick bulletin on the rise in Ransomware incidents observed over the last 48 hours.
- https://blog.checkpoint.com/2020/10/29/hospitals-targeted-in-rising-wave-of-ryuk-ransomware-attacks/
- https://us-cert.cisa.gov/ncas/alerts/aa20-302a
- https://us-cert.cisa.gov/sites/default/files/publications/AA20-302A_Ransomware%20_Activity_Targeting_the_Healthcare_and_Public_Health_Sector.pdf
- The Check Point Incident Response Team is standing by to help
PhoneBoy talks with Tim Otis from the Check Point Incident Response Team about Meme Warfare and Logo-ed Vulnerabilities
PhoneBoy talks with Tim Otis from the Check Point Incident Response Team about what threats we see related to elections.
Somehow, PhoneBoy's conversation with Ray Schippers and Tim Otis from the Check Point Incident Response Team around Ransomware led to Pee Chee folders.
This is my third conversation with Oren Koren on Infinity SOC. This time, we talk about the onboarding process and how little data we actually need from customers to show them tremendous value.
- Infinity SOC on CheckMates
- S02E23: Infinity SOC
- S02E26: What Can Infinity SOC Do For You
PhoneBoy talks with Ray Schippers and Tim Otis from the Check Point Incident Response Team about how the threat of DDoS is being used to extort money from organizations.
PhoneBoy talks with Oren Koren about the kinds of things you'll find in Infinity SOC to make your life as a cyber security analyst easier. See also our previous episode on Infinity SOC.
Check Point acquires Odo Security, which developed a cloud-based, clientless Secure Access Service Edge (SASE) technology that delivers secure remote access. Check Point Founder CEO Gil Shwed discusses the acquisition and Product Manager Eytan Segal talks about what our plan is to integrate this product into Check Point's portfolio.
- Press release
- More info about Odo Security's solution on CheckMates
PhoneBoy talks with Tim Otis and Ray Schippers from the Check Point Incident Response Team about how social engineering factors into cyber security incidents.
PhoneBoy Talks with Oren Koren about the evolution of Check Point Infinity SOC from its early days as a small R&D project and how Artificial Intelligence and Machine Learning are being used to quickly find cyber threats.
Shay Levin talks with Check Point researcher Sagi Tzadik about the discovery of SIGRed (CVE-2020-1350) and Ori Hamama about how we developed and deployed an IPS protection for it.
- Check Point Research blog on SIGRed
- Full SIGRed TechTalk on CheckMates
This is the final installment of our Ask Me Anything with Dr. Dorit Dor and team. Many of the questions asked involves features and functionality that will be in the R81 release, which is now in Public EA.
PhoneBoy talks with Global Security Architect Thomas Poole about common areas where organizations can improve their security posture.
Part 2 of our Ask Me Anything with Dr. Dorit Dor and team. In this episode, we wonder if there is any question Dorit can't answer? We also hear from Amnon Perlmutter, Eyal Fingold, and Itai Greenberg about DevSecOps and SD-WAN.
In this episode, PhoneBoy talks with Global Security Architect JP Edwards about the Secure Cloud Transformation and how it evolved from the Check Point Enterprise Security Framework.
- Download the whitepaper
First of three parts of our Ask Me Anything with Check Point VP of Products Dr. Dorit Dor and her team.In this excerpt, we hear from Dorit, Gera Dorfman, and Benny Shlesinger on how Covid-19 has changed Check Point's product roadmap and delivery, Remote Access, Linux Endpoint, and R81.
PhoneBoy talks with Global Security Architect JP Edwards about the Check Point Enterprise Security Framework
The last of our excerpts from our Ask Me Anything with Check Point Founder and CEO Gil Shwed back in May.
A conversation with Tim Otis and Ray Schippers from the Check Point Incident Response Team that starts off talking about OWA and leads to a conversation about how customers can leverage features in the Check Point Security Gateway better.
In this episode, we have another excerpt from our Ask Me Anything with Gil Shwed, this time talking about how Check Point is handling the business realities with Covid-19.
In this episode, I talk with Ray Schippers, Tim Otis, and Ashwin Ram about what's happening in the land of DDoS.
An excerpt from our Ask Me Anything with Check Point Founder and CEO Gil Shwed covering IoT, Zoom, and SD-WAN.
PhoneBoy talks with Tim Otis and Ray Schippers from the Check Point Incident Response Team about a recent investigation that led to APT41, which led to a discussion about attacks that "live off the land."
An excerpt of our Ask Me Anything with Check Point Founder and CEO Gil Shwed where we discuss how Covid-19 changed the cyber threat landscape.
PhoneBoy talks with fellow Cyber Security Evangelist Ashwin Ram about an idea for a talk he's putting together around lessons we've learned from dealing with Covid-19 in healthcare and how they can apply to Cyber Security.
PhoneBoy talks with fellow Cyber Security Evangelist Ashwin Ram about the mindset of Detection versus the Prevention mindset.
In this episode, PhoneBoy talks with Ray Schippers and Tim Otis from the Check Point Incident Response Team about phishing and where it can lead.
PhoneBoy's Conversation with Check Point Cyber Security Evangelist Ashwin Ram about his TechTalk on the cyber threats and opportunities (for malicious actors) in response to COVID-19.
PhoneBoy talks to Tim Otis and Raymond Schippers from Check Point's Incident Response Team about Ransomware: how it's getting into environments and what you can do about it.
PhoneBoy talks with Ray Schippers and Tim Otis from the Check Point Incident Response Team about recent exploits against Remote Access infrastructure and what steps you can take to protect it and your users.
PhoneBoy's conversation with Danny Shulman and Peter Elmer about HTTPS Inspection, which was covered in more detail in a TechTalk.
PhoneBoy Chats with Tomer Solé about Check Point's newest solution for securing SD-WAN: CloudGuard Connect
Joining Oded Awaskar in this episode are Tim Otis and Ray Schippers from the Check Point Incident Response team.
In this episode, we deep dive into CVE-2019-0708 dubbed “BlueKeep”, which was disclosed in the May 2019 “Patch Tuesday” of Microsoft.
We will share with you background on this vulnerability and reveal the “behind the scenes” of a security company when such a vulnerability is disclosed.
The episode concludes with recommendations on how to secure your environment from BlueKeep and similar vulnerabilities.
Joining Oded Awaskar in this episode is Avigayil Mechtinger, a cyber analyst from Check Point's Mobile Security team, telling us about the recent PreAMo clicker campaign (13:10).
In this episode, we also cover the following topics:
- A recent vulnerability discovered in Oracle WebLogic servers is being exploited to deliver the Sodinokibi ransomware (1:56).
- Check Point Research uncovered the activity of an Indonesian hacking group dubbed “plaNETWORK” (5:10).
- Over 200 online university campus stores were affected by a credit card skimming attack, dubbed “Mirrorthief” (7:00).
- Dell’s SupportAssist software was found vulnerable to remote code execution (9:50).
You may read the full PreAMo clicker campaign in the cp
Both of the Threat Intelligence reports are located here and here.
Oded Awaskar is joined by Aseel Kayal, a malware analyst from Check Point's Threat Intelligence group who tells us about her latest research dealing with the Muddy Water APT group’s activity.
In addition, we discuss these issues:
- Information regarding the operations and tools of the Iranian linked OilRig APT (APT 34) group has been disclosed online.
- Anubis, an Android banking Trojan, has evolved to contain encryption, RAT functionality and device locking capabilities which qualify it as Android ransomware.
The relevant Threat Intelligence reports are located here and here.
The second episode of the CheckMates GO Podcast is out.
Joining Oded Awaskar is Yoav Arad Pinkas and Hadar Wiesen, a security analyst in the Managed Security Service team
In this episode we cover the following topics:
- The Georgia Institute of technology suffered a data breach, which exposed the personal information of both faculty and students.
- ShadowHammer – A supply chain hack of Asus which led to the installation of backdoors in numerous computers.
- The emergency tornado alarm system in Texas was compromised, creating panic amongst residents.
- Check Point researchers have discovered a vulnerability in one of Xiamoi’s built-in security applications that could allow an attacker to remotely hack the phone.
You may read the full Xiaomi research in the cp
Both of the Threat Intelligence Reports are located here and here.
In this podcast, Oded Awaskar and Yoav Arad Pinkas review the latest cyber & intelligence incidents from the past 2 weeks.
On the agenda:
- “Simbad” – a mobile adware campaign spotted on Google’s Play Store by Check Point Researchers.
- ‘Norsk Hydro’, an Aluminum company, “Hexion” and “Momentive”, two American chemicals companies have been hit by the LockerGoga ransomware.
- 2 million emails of over 350,000 clients of the Oregon Department of Human Services (DHS) have been exposed after a successful spear phishing attack.
- Vulnerabilities found in implantable defibrillators expose patients to life-threatening hacks.
You can find our full weekly Threat Intelligence reports here and here.
Also, the full “Simbad” blog post can be found in the cp