How the 2026 World Cup affected Internet traffic
For 96 years, the World Cup has been a global phenomenon, uniting nations and communities through a shared love of sportsmanship. While its popularity is nothing new, what is novel…
-
-
Cato CTRL™ Insights: How One Threat Actor Turned Frontier AI Into an Offensive Platform
Executive Summary A Russian-speaking threat actor known as “Trim” has spent the better part of 2026 systematically dismantling the guardrails on publicly available frontier AI models and rebuilding them as…
-
DocuSign Phishing Kit Delivers RMM Tools to Windows and macOS
Phishing campaigns are increasingly shifting away from traditional malware in favor of trusted business applications and legitimate IT tools. Research from BlueVoyant shows attackers are using realistic DocuSign-themed pages to…
-
SOCs face a human challenge as AI speeds alerts and threats
“People who work in SOCs are now seeing overwhelming volumes of data, and they’re getting fatigued,” Griffiths tells CSO. AI can help automate portions of analysis, validate alerts, and improve…
-
HTTP Request Smuggling Explained: with seasoned bug bounty hunter NahamSec and world-class researcher James Kettle
Amelia Coen | Tuesday, 5 August 2025 at 11:08 UTC Ever wondered how attackers can compromise modern websites by exploiting invisible cracks in HTTP infrastructure to win big bounties? In…
-
What the Black Hat NOC Taught Me About MCP & Agentic SOCs (Chapter 3 of 4)
The first time an MCP (Model Context Protocol) server felt real to me, it wasn’t because of a clean demo. It was because of the noise.
-
Transforming Data into Defensive Velocity
Security Operations Centers (SOCs) are currently confronting scalability challenges on two fronts: structural and cognitive. The day-to-day reality of modern defensive operations is stark: an analyst frequently begins a shift…
-
CVE-2024-44000 (LiteSpeed Cache Account Takeover) Ranks in June’s Top Threats
Introduction June 2026 marked a significant escalation in hostile internet activity observed by honeynet sensors, with overall attack volume increasing by 55.5% month over month after three consecutive months of…
-
A Look Inside the HuggingFace Breach
Varonis security brief On July 16, 2026, HuggingFace disclosed a security breach in which an autonomous AI attacker infiltrated its internal infrastructure. The attacker chained two remote code execution (RCE) vulnerabilities in HuggingFace’s dataset processing pipeline,…
-
Cato CTRL™ Threat Research: HashJack – Novel Indirect Prompt Injection Against AI Browser Assistants
TL;DR HashJack is a newly discovered indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs. When AI browsers send the full URL (including the fragment)…
