Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Why MCP Breaks the Financial Services Security Stack

A relationship manager asks the firm's AI assistant to "summarize my top wealth clients by AUM and flag anyone with a pending transfer over $500K." The agent calls a CRM MCP server, then a core banking MCP server, then a market data MCP server, and returns a clean answer in twelve seconds. Names, balances, account numbers, pending wire details, all rendered in plain text inside the chat window. No file moved. No email left the network. No DLP channel triggered.

Is GRC Cool Again? How Mythos and Frontier AI Models Are Bringing a New Focus to Governance and Risk Management

For the record, I always thought the GRC was cool. NIST Framework? Yes please. Vendor risk register? Tell me more! Not everyone shared my enthusiasm for effective and efficient cyber risk reduction. Until now. Suddenly, seemingly overnight, managing the digital supply chain became really, really important. AI governance (a phrase that didn’t even exist a year ago) is now the topic of boardroom discussions. Yes, it will look different and operate in a new way.

Ep. 60 - The Puppet Masters: Mustang Panda's Long Con Against ASEAN Diplomats

When a tired EU diplomat clicks "connect" on an airport Wi-Fi portal, his briefing—and his government's secrets—end up in Chengdu. Hosts Tova Dvorin and Adrian Culley unpack Mustang Panda (APT27 / Bronze President), the Chinese threat group running the long con against NGOs, ASEAN ministries, and Tibetan and Uyghur activists. Inside: captive-portal Wi-Fi Pineapples that bypass MFA, PlugX side-loading through legitimate apps, and the USB worm that jumps air-gapped military networks.

Cato CTRL Threat Brief: AI, Zero-Days, and the US-China Cyber Arms Race

Underlying the US–China AI race, there’s arguably a more sinister arms race—the race to identify zero-day threats. Frontier AI algorithms, such as Anthropic Mythos (here) and China’s Qihoo 360 (here), are compressing the zero-day discovery cycle. But how those discoveries are gathered and shared among cooperating entities is giving China significant defensive and offensive advantages.

The Security Illusion: Why Your AI Security Tool Won't Save You (And Neither Will Your Traditional API Security)

The enterprise security world is having two separate conversations that desperately need to collide. On one side, application security (AppSec) teams are scrambling to secure APIs – the connective tissue of every modern application. On the other, a new wave of “AI security” vendors promise to protect your LLMs from prompt injection, data leakage, and hallucinations. Both groups are solving real problems. Both are missing half the picture.

Three ways intelligent workflows enhance network security

Network security is operationally complex. It involves constant triage, approvals, and monitoring, spread across a range of tools, teams, and environments. Traditionally, this requires teams to do a significant amount of time-consuming, repetitive, and draining manual work, resulting in a longer MTTR and leaving many practitioners overwhelmed and burnt out. The problem isn’t in the tools they use – it’s in the work that happens between tools.

How Family-Focused Legal Services Help Protect Long-Term Stability

Families today are navigating a level of legal complexity that previous generations simply didn't face. Blended households. Digital assets. Aging parents who need care and protection. Custody arrangements that shift as kids grow. Any one of these challenges can unravel a family's stability if it isn't handled with care, and most families aren't prepared. That's not a criticism; it's just reality. The good news? Investing in family-focused legal services is one of the most meaningful decisions you can make for the people you love most.