Executive Summary Cato CTRL’s Vitaly Simonovich (senior security researcher) has discovered a new vulnerability (CVE-2026-25611 with a “High” severity rating of 7.5 out of 10) in all MongoDB versions with…
Overview On June 10, 2026, Oracle published a security alert for CVE-2026-35273, a critical vulnerability in the Updates Environment Management component of PeopleSoft Enterprise PeopleTools. Oracle released an out-of-band patch…
Introduction Just as we continually analyze the threat landscape, we also look to broaden and improve our telemetry to provide the best possible insights from our datasets. With this, in…
Agentic AI does not just answer, it acts. The moment an agent has a reachable control plane, you have effectively created a “remote hands” interface into your environment. In our…
Acrobat Reader Zero-Day Exploited in the Wild for Many Months A zero-day vulnerability in Adobe Acrobat Reader has been actively exploited since November 2025, and potentially earlier, as discovered by…
TL;DR Agentic AI promises to improve work processes in all domains and industries. R&D is no different. Recently, Cato R&D built an internal self-evolving pull request (PR) review agent that…
Building on the Cisco Live EMEA SOC, Cisco Live Americas placed the Security Operations Center (SOC) and Network Operations Center (NOC) at the center of the World of Solutions, demonstrating…
Security leaders rarely struggle to gather data, but they often struggle to turn that data into something clear and meaningful for the business. In a typical week, a CISO might…
Google Chrome – CVE-2026-6296 A critical heap buffer overflow vulnerability, identified as CVE-2026-6296 with a CVSS v3.1 score of 9.6, exists within the ANGLE (Almost Native Graphics Layer Engine) component…
AI has moved from experimentation to a strategic enterprise imperative. It’s no longer about whether organizations will adopt AI, but whether their security architecture can govern it at the speed…
