Malware: ACR Stealer, Amatera, AMOS, Atomic macOS Stealer, Atomic Stealer, bw1.js, CANFAIL, CanisterSprawl, CanisterWorm, CipherForce, DripDropper, gh-token-monitor, GlassWorm, GlassWorm v2, GoBear, Gomir, HEUR:Worm.Script.Shulud.gen, js.shai_hulud, LONGSTREAM, mcpAddon.js, mini Shai-Hulud, Mini Shai…
Executive Summary From September – November 2025, Cato Networks threat researchers observed a global campaign involving suspicious Modbus/TCP (transmission control protocol) activity against internet-exposed PLCs (programmable logic controllers). The targeted…
At Cisco Live AMER 2026 in Las Vegas, my work with the Cisco Event SOC centered on one outcome that makes these deployments valuable beyond the event itself: Education. The…
For the latest discoveries in cyber research for the week of 1st June, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Carnival Corporation, a global cruise line operator,…
The shift toward preemptive security is underway, but most organizations are still navigating the realities of limited resources, fragmented tools, and emerging AI risk. At Rapid7’s recent Global Security Summit,…
Take a Network Break! Greg Ferro asked ChatGPT to select virtual donut options for listeners. You can see the output below. On this week’s episode we start with some listener…
The first time an MCP (Model Context Protocol) server felt real to me, it wasn’t because of a clean demo. It was because of the noise.
Microsoft Defender Vulnerabilities Exploited in the Wild (CVE-2026-41091, CVE-2026-45498) Attackers are actively exploiting two Microsoft Defender vulnerabilities, CVE-2026-41091 and CVE-2026-45498, which Microsoft has acknowledged and CISA has added to its…
This post is also available in: 繁體中文 (Chinese (Traditional)) Frontier AI is moving faster than most governance and response systems were designed to handle. The corporate landscape across the Japan…
Executive Summary Cato CTRL has discovered high-severity vulnerabilities in NVIDIA NeMo (CVE-2025-33236 with a CVSS score of 7.8) and Meta PyTorch that turns AI model files into remote code execution…
