Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

December 2024

Enforce Policies for IoT/OT Devices with Cato SASE

Managing firewall rules for IoT/OT devices can be complex—but not with Cato Networks. This video demonstrates how to create precise access rules for IoT/OT devices, like blocking Siemens PLC devices, using Cato's flexible, native SASE platform capabilities. Learn how Cato ensures secure, seamless operations. Visit our website for more info!

Extend IoT/OT Device Visibility in Cato SASE Cloud

Discover how Cato Networks revolutionizes IoT/OT security with its SASE Cloud platform. Watch this demo to see how we ensure seamless visibility, precise policy enforcement, and real-time threat prevention for your enterprise, all while simplifying security management and enhancing operational continuity.

Correlate Device Classification and Event Visibility with Cato SASE

Managing IoT/OT devices can be challenging, but Cato IoT/OT Security simplifies everything. In this demo, see how Cato's SASE platform enables real-time device discovery, granular visibility, and advanced threat prevention. Watch as malicious IoT activity is detected and blocked seamlessly—no extra products or complex setups required!

Open NDR static file analysis powered by YARA

Enhance utility of evidence Identify malicious files from network activity and derive the right context without increasing false positives Improve detection coverage Analyze large volumes of files for detecting threats that can be missed by EDR Drive tool consolidation Consolidate tools and eliminate the need for file extraction, storage and custom scripts.

How to mitigate SSRF vulnerabilities in Go

Securing HTTP requests is crucial when developing Go applications to prevent vulnerabilities like Server-Side Request Forgery (SSRF). SSRF occurs when an attacker manipulates a server to make unintended requests, potentially accessing internal services or sensitive data. We will explore how to secure HTTP requests by employing URL parsing and validation techniques, and provide example code to fortify the http.Get HTTP GET request handler.

Solving Secrets Management Challenges for NHIs with GitGuardian Multi-Vault Integrations

Struggling with fragmented secrets management and inconsistent vault practices? GitGuardian new multi-vault integrations provide organizations with centralized secrets visibility, reduce blind spots, enforce vault usage and fight against vault sprawl.

The Results Are In: Cybersecurity Automation Is Crucial

Cybersecurity automation is no longer a “nice-to-have” — it’s a necessary component for security teams. The latest data reveals that organizations are increasingly recognizing the critical role automation plays in safeguarding their systems and enabling their teams to thrive. Here are the key insights.

Virtual Machine Backup Software: A Guide to Data Protection

Virtual machines form the backbone of most enterprise IT systems, which means effective virtual machine backup software is essential for safeguarding business operations. Companies need reliable backup solutions to protect their virtualized applications and data from unexpected failures, breaches, or system crashes.

Phishing Attacks Are Now Leveraging Google Ads to Hijack Employee Payments

Researchers at Silent Push warn that a phishing campaign is using malicious Google Ads to conduct payroll redirect scams. The attackers are buying search ads with brand keywords to boost their phishing pages to the top of the search results. “We have identified hundreds of domains primarily focused on Workday users and high-profile organizations, including the California Employment Development Department (EDD), Kaiser Permanente, Macy’s, New York Life, and Roche,” the researchers write.

Phishing Holds the Top Spot as the Primary Entry Point for Ransomware Attacks

New analysis of ransomware attacks shows that phishing is the primary delivery method and organizations need to offer more effective security awareness training to mitigate the threat. Hornet Security’s Q3 2024 Ransomware Attacks Survey report paints a pretty bleak picture of how organizations have fared this year against ransomware attacks. So almost one in five organizations is a victim. According to the survey data, 52.3% of the attacks started with a phishing email.

Fireblocks CEO Says Stablecoins, Tokenization Have "Enormous Untapped Potential" At SPARK Conference

The anticipated change in stance from US regulators will drive a huge boost to global stablecoin adoption, which is already rapidly gaining traction as their share in cross-border and business-to-business payments grows, according to Michael Shaulov, CEO of Fireblocks.