Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Corelight's Vincent Stoffer on Why Enterprises Can't Rely Only on Endpoint Security

The cybersecurity industry's heavy reliance on endpoint detection and response tools has created significant vulnerabilities, particularly around IoT devices and operational technology that cannot be monitored using traditional security tools, according to Vincent Stoffer, field CTO at Corelight. This growing attack surface, combined with sophisticated threat actors who exploit any available entry point, has pushed organizations to reevaluate their security strategies and consider more comprehensive network monitoring approaches.

Introducing Always-Accurate Endpoint Collection with Forward Enterprise

For most enterprises, endpoint visibility remains one of the most elusive elements of network security. Devices connect, disconnect, or move constantly, making it nearly impossible to keep an accurate inventory with traditional tools. Without a clear picture of all endpoints—laptops, printers, IoT devices, and more—security and compliance teams are often flying blind. That changes with Forward Networks’ new endpoint collection feature.

Patching is Risky Business: By the Gartner Numbers

When I read Eyal’s blog, Why FWaaS is the Only Way Out of Endless Appliance Patching, I imagined a time in the immediate now (oxymoron intended); a time where the word “patching” is as quaint as rotary phones. In my mind, I was Marty McFly, jumping out of the DeLorean, shocked to discover that in the year 2025, we’re still patching appliance boxes. But here’s the kicker: everything has changed. Except the way we think about patching.

April 22, 2025 Cyber Threat Intelligence Briefing

This week’s briefing covers: Palo Alto Confirms Brute Force Campaign Against PAN-OS Devices Worldwide Following Kroll's previous bulletin highlighting a report from GreyNoise indicating a large uptick in activity targeting Palo Alto devices, it has been confirmed that Palo Alto has detected an ongoing campaign to brute force login credentials to PAN-OS devices.

It's All About the Network-Welcome, Circle!

If there’s one truth in payments, it’s this: the network always wins. Think of what Visa and Mastercard created: not just payment rails, but global ecosystems of merchants, issuers, acquirers, and processors. Their networks didn’t just move money—they connected entire economies. As digital assets move into the mainstream, the same principle applies. But the networks of tomorrow won’t be built on closed systems and settlement delays.

Cato CTRL Threat Research: Inside Shadow AI - Real-World Generative AI Application Usage Trends in SASE

The rapid adoption of generative AI (GenAI) in the enterprise is introducing a new category of unmanaged risk known as shadow AI. Organizations frequently lack insight into which employees are using GenAI tools and how they are being accessed, resulting in visibility limitations, policy enforcement challenges, and increased risk of data exposure. Security teams face potential data leaks and compliance violations, while IT teams struggle to integrate GenAI usage into existing governance models.

Why Swissport Chose Cato Networks to Secure and Streamline its Global IT Infrastructure

Swissport International AG is the world’s largest ground-handling company, ensuring seamless operations across 276 airports in 45 countries handling approximately 247 million airline passengers per year, as of the end of 2024. That kind of scale brings complexity. For Swissport’s new IT leadership, that complexity had grown into an unsustainable mix of legacy security controls, fragmented remote access solutions, and painfully slow troubleshooting. Then came the shift.

Cato CTRL Threat Research: Exploiting Model Context Protocol (MCP) - Demonstrating Risks and Mitigating GenAI Threats

Generative AI (GenAI) is advancing rapidly, offering significant potential for business transformation. However, it also introduces new security risks. The Model Context Protocol (MCP), an open standard introduced by Anthropic in November 2024, enables seamless integration between GenAI applications and external data sources and tools. MCP is commonly referred to as a USB-C port for GenAI applications.