Is it time to embrace automated threat hunting?
Should we let AI run our threat hunts? The debate usually splits into two camps. One says, “Yes, obviously! The sheer scale of our security telemetry is impossible for humans…
-
-
Cato CTRL™ Threat Research: New MongoDB Vulnerability Allows Instant Remote Server Takedown (CVE-2026-25611)
Executive Summary Cato CTRL’s Vitaly Simonovich (senior security researcher) has discovered a new vulnerability (CVE-2026-25611 with a “High” severity rating of 7.5 out of 10) in all MongoDB versions with…
-
Weekly Threat Bulletin – April 15th, 2026
Acrobat Reader Zero-Day Exploited in the Wild for Many Months A zero-day vulnerability in Adobe Acrobat Reader has been actively exploited since November 2025, and potentially earlier, as discovered by…
-
Understanding Claude Tag’s access model in Slack
Anthropic’s new AI agent for Slack acts under an admin-configured access bundle rather than each user’s own credentials. Here’s how that model works, what admins should understand and how to…
-
Investigating Persistence Mechanisms in AWS
Overview In the cloud, your infrastructure may be short-lived, but an attacker’s persistence doesn’t have to be. While your environment scales and changes in seconds, adversaries are embedding themselves into…
-
OpenClaw: Cato Governance Controls and Sector Exposure Insights from the Cato SASE Platform
Agentic AI does not just answer, it acts. The moment an agent has a reachable control plane, you have effectively created a “remote hands” interface into your environment. In our…
-
Weekly Threat Bulletin – April 22nd, 2026
Google Chrome – CVE-2026-6296 A critical heap buffer overflow vulnerability, identified as CVE-2026-6296 with a CVSS v3.1 score of 9.6, exists within the ANGLE (Almost Native Graphics Layer Engine) component…
-
SonicWall CVE-2026-15409 and CVE-2026-15410 zero-day exploited
SonicWall patched two recently exploited zero-day vulnerabilities in its SMA 1000 Series secure remote access appliances which may have been chained for unauthenticated remote code execution. Key takeaways CVE-2026-15409 and…
-
We tested Cisco Secure Firewall 6160 with NetSecOPEN for AI-scale
As the shape, speed, and scale of network traffic changes, our customers realize that their networks must rapidly accommodate more applications, more agents, more encrypted flows, more data movement, and…
-
Rapid7 MDR Team Discovers New SonicWall SMA1000 Zero Days being Actively Exploited (CVE-2026-15409, CVE-2026-15410)
Overview On July 14, 2026, SonicWall published a security advisory addressing two vulnerabilities affecting SMA1000 Series remote access appliances, including the critical server-side request forgery (SSRF) vulnerability CVE-2026-15409 (CVSS 10.0)…
