Today, we published the Q3 2024 Cato CTRL SASE Threat Report, which summarizes findings from Cato CTRL’s analysis of 1.46 trillion network flows across more than 2,500 customers globally between July and September 2024.

A critical authentication bypass vulnerability has been identified in the WordPress plugin Really Simple Security (formerly known as Really Simple SSL), affecting both its free and Pro versions.

IONIX today announced the release of our Cloud Exposure Validator, a tool designed to reduce cloud vulnerability management noise shifting focus to findings that represent the biggest threats. The Validator addresses the growing challenges organizations face in managing cloud security risks effectively. This blog post explains how.

Cybersecurity threats grow more sophisticated by the day. Amid this constant change, one truth remains: people are simultaneously our greatest security vulnerability and our strongest line of defense. It’s time to empower organizations with a new approach that minimizes human risk and maximizes protection.

Based on our reading, the Digital Operational Resilience Act (DORA), is at a fundamental level, a transformative ICT challenge. DORA makes the speed and accuracy of security threat detection and response a board-level concern. Fail to stop, classify and report on cyber incidents accurately and, from 2025 onwards, your organisation could face a fine of 1% of global turnover.

Because cyber dangers are always changing, businesses are moving toward safer and more proactive ways to keep their data and networks safe. Zero Trust Security is one of these frameworks that is becoming more popular. It is based on the idea of "never trust, always verify." Zero Trust constantly checks and authorizes every user and device before letting them access sensitive data or systems. This is done instead of thinking that internal users or devices are reliable.

It is more important than ever to protect websites from hacking in today's digital world. One common type of attack is the Ping Flood, also called the "Ping of Death." This is when a lot of ping requests are sent to a website's server at once, slowing it down or even crashing it. Attacks like these are more likely to happen as websites get busier and more complicated. This is why it's important to have strong defenses in place.

Blind Cross-Site Scripting is a type of Cross-Site Scripting attack in which the injected script is executed in the context of another page and different circumstances compared to the page in which it was inserted. Blind XSS differs from regular XSS attacks as the attacker cannot see the effect of the injected script in his or her browser since the script is executed in a place that the attacker can not access.

Azure is Microsoft’s cloud, allowing for software and hardware-based or hosted in the cloud and providing computing, analytical, storage, and networking services. From these services, the users can selectively take what they want to build new applications in the public cloud or migrate other applications already running to the public cloud.

A critical vulnerability, CVE-2024-9264, has been discovered in Grafana, the open-source analytics and visualization platform widely used by organizations worldwide. According to Netlas.io, over 100,000 Grafana instances may be vulnerable globally, with nearly 19,000 in the U.S. alone. This vulnerability poses significant risks, enabling remote code execution (RCE), allowing attackers to execute arbitrary system commands and access sensitive files.