Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Navigating the Agentic AI Era: Forward's Perspective from Cisco Live EMEA

Cisco Live EMEA 2026 Amsterdam has officially wrapped up, and the path forward is clear: we have entered the Agentic AI Era. The event was centered around an industry shift towards a unified platform where AI agents don't just respond; they act. At Forward Networks, we aren’t just watching this shift happen; we are providing the foundation required to make it a reality.

Using NQE to Consistently Validate DNS Configuration During Network Changes

DNS is foundational to almost every application, yet it is often treated as background configuration rather than a critical dependency. During network changes, DNS settings are easy to overlook. A single device pointing to the wrong resolver, missing a required DNS entry, or retaining a legacy configuration can cause application failures that appear unrelated to the original change.

Corelight at SC25: A laboratory for securing the fastest conference network

I’ve worked as a threat hunter in several Black Hat Security Conference Network Operations Centers (NOCs) across the globe. So I didn’t expect to be surprised by much when signing on to be a part of the NOC for SCinet—a conference that has the “fastest conference network in the world.” And yet I was surprised by just how diverse the SCinet NOC team was, how collaborative the environment was, and how much we were able to achieve with automation in such a short amount of time.

How Cato Turns Identity Noise Into High-Confidence Detections

Jeremy, the Head of IT, thought it was a normal Monday until his help desk was overwhelmed with login complaints. 37 employees couldn’t log in. Password resets were happening that nobody could explain, and some devices seemed to vanish from the identity directory. The worst part was that the identity logs did not show a clear break-in. There was no obvious malware and no dramatic spike, only routine-looking admin activity.

Why Network Security Blind Spots Persist and How Behavior Monitoring Fixes Them

You are counting on lots of security measures to keep your network safe. The truth is that these measures can still have secret passages that bad people can use to sneak around without being noticed. You can have things like firewalls and special software, on your computers to watch for problems and still not catch people moving around inside your network taking data slowly or doing weird things that are not supposed to happen because these things do not always look like the problems you are expecting.

Public Wi-Fi vs Secure Mobile Data: What Remote Workers Need to Know

You can work from almost anywhere today, cafés, airports, hotels, even park benches. Free public Wi-Fi makes it easy to jump online fast. But is it really safe? Many remote workers don't think about security until something goes wrong. One weak network can expose emails, client files, passwords, and payment details in minutes. On the other hand, secure mobile data offers more control and privacy-but may cost more. So which option should you trust with your work? In this guide, we'll break down the real risks, clear up common myths, and help you choose the safest connection for your remote setup.

What Network Observability Reveals That Traditional Monitoring Misses

Modern enterprise networks have evolved into complex ecosystems that span multiple cloud environments, hybrid infrastructures, and countless interconnected devices. While traditional network monitoring has served organizations for decades, the increasing sophistication of cyber threats and the exponential growth in network traffic demand a more nuanced approach. Network observability emerges as the next evolution, providing unprecedented visibility into network behavior that traditional monitoring simply cannot match.

How to Protect Identity in a World Without VPNs

For years, cybersecurity relied on a perimeter-based model, where the network defined the boundary between what was secure and what wasn’t. With the adoption of cloud computing, SaaS applications, and hybrid working, that control has shifted to identity, making credentials the primary target for attackers.

Episode 8 - Enterprise Nervous System: Using Network Signal to Direct Business Strategy

In this episode of Corelight Defenders, I’m joined by Bernard Brantley, Chief Information Security Officer at Corelight, as we delve into the concept of the enterprise nervous system. Bernard shares insights from his extensive experience in network analysis, explaining how organizations can leverage their network traffic data to enhance security and drive business outcomes. We discuss the importance of understanding the interdependencies between assets, processes, and goals, and how security teams can position themselves as integral to business success rather than just risk mitigators.

Cato CTRL Threat Research: Foxveil - New Malware Loader Abusing Cloudflare, Discord, and Netlify as Staging Infrastructure

Cato CTRL has identified a previously undocumented malware loader we track as “Foxveil.” We observed evidence that the malware campaign has been active since August 2025, and we observed two distinct variants (v1 and v2). Foxveil behaves like a modern initial-stage loader: it establishes an initial foothold, frustrates analysis, and retrieves next-stage payloads from threat actor-controlled staging hosted on Cloudflare Pages, Netlify, and, in some cases, Discord attachments.