Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What Is SASE? And How Is It Different From A VPN?

Many companies are used to the idea of operating a virtual private network (VPN), but SASE is becoming much trendier lately. It's changing the way companies work and fundamentally rewriting their security architecture. So, what exactly is SASE, and how can it help your business?

Frontier AI and the Demise of Hardware Security

The cybersecurity industry has long relied on a simple idea: find vulnerabilities, patch them, and measure success by how fast you close the gap. “Time-to-patch” became a badge of honor. That model no longer holds. The rise of Mythos-class Frontier AI Models introduces a different kind of threat. AI-driven, agentic attacks operate continuously, discover weaknesses automatically, and execute at a scale no human team can match.

Data quality defines a ceiling for SOC performance

Defenders have long known that richer evidence improves security outcomes by enabling faster triage, deeper analysis, and more complete investigation. Although Corelight was founded on this premise, it’s been hard for us to quantify the impact of better network data - until now. Recently, we built an agentic test harness to measure the success of frontier LLMs in responding to real-world attack scenarios, using a range of source data.

Network modernization for a secure enterprise

Relying on legacy hardware for modern business is like trying to run a high-speed bullet train on old wooden tracks. The train has immense potential, but the underlying foundation simply can’t support the speed, capacity, or safety required for the journey. As companies migrate to the cloud and adopt artificial intelligence, their networks must evolve. Outdated systems create bottlenecks that drain resources and expose sensitive data to modern threats.

Cato CTRL Threat Research: Suspected China-Linked Threat Actor Targets Global Manufacturer with Undocumented TencShell Malware

In April 2026, Cato CTRL identified and blocked an attempted intrusion against a global manufacturing customer involving TencShell, a previously undocumented, Go-based implant derived from the open-source Rshell C2 framework. The activity appeared in traffic associated with a third-party user connected to the customer environment.

How to Prevent Ransomware on Networks: Proven Strategies for Protection

Organizations around the world are increasingly vulnerable to ransomware attacks, which have caused over $57 billion in damages globally by 2025, according to a report by Cybersecurity Ventures. These cyberattacks can shut down entire networks, disrupt services, and inflict severe financial and reputational damage. Knowing how to prevent ransomware on networks is essential to staying protected against these threats.

How Corelight identified a years-old network issue in 30 minutes

A global cruise line operating across maritime and resort environments was struggling with inconsistent detections, alert overload, and limited visibility from its existing NDR platform. In this customer story, Jay Miller from Corelight walks through how the organization evaluated its network visibility strategy, identified long-standing gaps in detection coverage, and improved investigation workflows across a complex environment with intermittent connectivity at sea.

Hybrid visibility done right: Visualize, monitor, and correlate your VPCs, Subnets, EC2, ECS, and RDS services with AWS Cloud Observability in DDI Central

Every enterprise today runs on two kinds of infrastructure. One half lives on-premises: the company’s data centers, internal networks, DNS zones, DHCP scopes, IP address spaces, and the systems that help every device find and connect to the right service. The other half lives in the public cloud: where applications, databases, containers, and storage run on infrastructure delivered by providers like Amazon Web Services (AWS). This hybrid model is no longer a temporary phase.

What You Need to Know About Perimeter Security

Your perimeter is the first thing an intruder sees and often the last line of defence before they reach what really matters. Yet for many organisations, a cohesive perimeter security solution remains overlooked. If you're responsible for protecting a site with a wide footprint or high-value assets, understanding modern perimeter security is vital. We cover what you need to know when choosing a perimeter security solution, from the core challenges facing exposed sites to the capabilities that define an effective solution, and the sectors where it matters most.