Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cheaters never win: large-scale campaign targets gamers who cheat with StealC and cryptojacking

A sprawling cyber campaign is turning gamers’ hunger to gain an edge into a massive payday for threat actors who are leveraging over 250 malware samples to steal credentials and cryptocurrencies. The operation has already netted wallets containing more than US$135,000. In this blog post, we will delve into a specific infection instance, explore its mechanisms. and share indicators of compromise (IoCs).

eCommerce and Retail Penetration Testing: Protect Payments, Customer Data, and Compliance

Penetration testing for eCommerce and retail has become critical as these industries face escalating cyber threats, making them prime targets for attackers seeking financial gain and sensitive customer data. According to IBM’s 2025 Cost of a Data Breach Report, the global average cost of a data breach reached $4.44 million.

Empower remote teams: Update your BYOD policy for 2025

The landscape of work has transformed dramatically over the past decade, with remote work emerging as a sustainable and sometimes preferred approach for many companies. As this trend accelerates, organizations face the dual challenges of maintaining productivity while securing a distributed workforce. One of the most effective ways to empower remote teams is to update and modernize your bring your own device (BYOD) policy.

Advanced Trash Compactor Repair

Modern kitchens and commercial facilities depend on technology that saves time, improves convenience, and streamlines daily routines. Among these innovations, trash compactors stand out as a piece of technology that often goes unnoticed until it stops working. By compressing waste into smaller loads, compactors combine mechanical engineering, electrical systems, and user-friendly design to deliver efficiency in waste management. But when problems arise, this technology requires skilled hands to restore its performance.

Why We Built CertKit

SSL Certificates have always been a pain in the butt. From the magical OpenSSL incantations to generate a CSR to the various formats that each webserver requires. Remembering what hardware needs which certificates. Managing scheduled renewals and runbooks for which file goes where. Screw anything up and your site is “Not Secure”. And now Apple wants us to do it every 47 days. Remember when we had HTTP-only websites? Or when certificates lasted three years? Then one?

When Google Says "Scan for Secrets": A Complete Guide to Finding Hidden Credentials in Salesforce

The Salesloft Drift breach affected hundreds of organizations through Salesforce, including Cloudflare, Palo Alto Networks, and Zscaler. Google now explicitly recommends running secrets scanning tools across Salesforce data—here's your complete guide.

Trustwave Security Colony's 8 Commandments for AI Adoption

The advent and continuing widespread adoption of artificial intelligence for basic research, document creation, code writing, or any other purpose increases an organization’s threat level if done incorrectly. However, when an organization implements AI as a tool in a thoughtful and well-considered manner, it can be a great benefit.

Cato Networks Statement on Salesforce-Salesloft Drift Incident

We want to share an important update in light of the recent security incident involving Salesloft Drift, a third-party application connected to Salesforce. The issue centers on the misuse of OAuth tokens associated with the Drift app. Salesforce and other vendors identified unauthorized access between August 8 and 18, 2025. The incident has impacted hundreds of Salesforce customers. The Cato SASE Cloud Platform, services and infrastructure, were not affected in any way.

Missed jury duty? Scammers hope you think so

Jury duty scams are on the rise. Learn how to recognize the red flags, protect your personal data, and verify real court notices. “You missed jury duty and there’s a warrant out for your arrest.” If you've received a call like this, take a breath. Odds are, it's not the court—it’s a scam. These jury duty scams are making the rounds again, and they’re catching people off guard.

SIEM vs. XDR: 5 Things to Consider

As IT environments become more complex, organizations face rising threat volumes, persistent cybersecurity talent shortages, and adversaries capable of dwelling undetected for days and moving laterally within hours. In this context, choosing between SIEM and XDR is no longer a technical preference; it’s a strategic decision that shapes how your organization defends itself.