27th July – Threat Intelligence Report
For the latest discoveries in cyber research for the week of 27th July, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Nichirei, a Japan-based frozen-food supplier and logistics…
-
-
How AI is Rewriting the Zero-Day Playbook for Preemptive Security
The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens, CISOs from every industry immediately…
-
Analyzing React2Shell Threat Actors | F5 Labs
The Sensor Intel Series is created in partnership with Efflux, who maintains a globally distributed network of sensors from which we derive attack telemetry. Introduction In this installment of the…
-
Resilient by Design: Cato’s Visibility and Backbone Performance Through the AWS Outage
Maintaining Continuity and Visibility Through the October 2025 AWS Outage On October 20, 2025, Amazon Web Services (AWS) experienced an outage affecting its US-East-1 region. The event caused temporary service…
-
Securing AI agent harness files from config attacks
Attackers have shifted from hiding from AI tools to running inside them. By poisoning the config files that govern AI coding assistants, a new worm class achieves silent persistence, evades…
-
The Journey towards Logically Air-Gapped Deployment
The need and ability to face the challenge with a clear plan In today’s technological landscape, organizations managing critical infrastructure face a complex paradox: how to leverage the agility of…
-
Rapid7 AI | What Happened Between OpenAI and Hugging Face?
The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a…
-
Weekly Threat Bulletin – January 21st, 2026
Evelyn Stealer Abuses Visual Studio Code Extensions in Multistage Attacks A sophisticated multistage malware campaign, dubbed “Evelyn Stealer,” is exploiting the Visual Studio Code (VSC) extension ecosystem to compromise software…
-
Cato CTRL™ Threat Research: Two Vulnerabilities in Anthropic’s MCP SDK Enable OAuth Token Theft and Supply Chain Attacks
Executive Summary The SolarWinds supply chain attack in 2020 reminded the world how a single weakness in trusted software can have global consequences. That incident reshaped how organizations view software…
-
Oracle July 2026 Critical Patch Update 1235 CVEs
Oracle addresses 1235 CVEs in its third quarterly update of 2026 with 1449 patches, including 261 critical updates. Key Takeaways The third Critical Patch Update (CPU) for 2026 contains fixes…
