Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

How to use Path Search in Forward Enterprise

Can traffic get from A to B? If not, exactly where and why does it stop? This walkthrough shows you how to answer both with Path Search in Forward Enterprise. Path Search traces traffic across a mathematical model of your network built from collected configuration and state. It doesn't send live packets or probes. Forward indexes all possible paths, then returns the paths that match your query, with the forwarding, policy, and NAT decisions applied at every hop.

How to use inventory management in Forward Enterprise

See every network device, cloud object, and endpoint Forward Enterprise models in one sortable, filterable inventory. This walkthrough shows you how to find what's deployed, what it's running, and when it changed. Forward Enterprise collects configuration and state data from across your hybrid network. The Inventory application turns that data into a working view of your infrastructure, so you can answer asset questions with evidence instead of spreadsheets.

Hardening Edge Supercomputers: Securing the Deployment of Any Compact AI Supercomputer

Edge AI systems bring data center-class computing into offices, labs, and remote facilities where environmental controls and security practices may vary. Their compact size makes deployment easier, but it also creates new risks involving physical access, local networks, software supply chains, and sensitive data. Securing these systems requires a clear plan that covers the device, its operating environment and every service connected to it.

How much AI risk is acceptable? The compromise infrastructure leaders shouldn't have to make

Spend any time with senior infrastructure and IT leaders right now and one conversation keeps coming up. The business wants AI, and increasingly it wants agentic AI: systems that don’t just recommend an action but take it. Boards have seen the productivity numbers. Competitors are announcing pilots. The pressure to move is real. At the same time, those same leaders own the risk register. They answer to regulators, auditors, and, when something goes wrong, the front page.

PII and third-party apps: Don't trust, verify

You have likely heard the old Russian proverb: “доверяй, но проверяй.” It means “trust, but verify,” and it used to be a standard within the InfoSec community for decades. Slowly, many organizations have moved their infrastructure toward a Zero Trust Architecture, which has helped improve security postures further. But even still, unearned and unverified trust is rampant.

Cato CTRL Threat Research: PHP2Shell Exploitation Attempts in the Wild, and How Cato IPS Blocked Them

On 21 October 2026, PHP released fixes for CVE-2026-109618 and CVE-2026-109619, a pair of critical runtime vulnerabilities known as PHP2Shell. One day later, we described how our self-evolving CVE mitigation agent turned the patch into reviewed IPS protection in minutes. This report follows what happened next, including how quickly attackers moved, what their attempts looked like, and how Cato’s cloud-delivered IPS protection blocked them on inspected customer traffic.

How Residential IP Infrastructure Fits into Modern Internet Networking

Most people know their home internet has an IP address, but that's usually where it ends. Few ever check what it is or who it belongs to. Websites check all the time though. The address gives away which ISP you use, a rough location, and whether the connection is coming from someone's house or from a server somewhere, and that last part decides a lot more than you'd expect. Here's a look at how residential IPs get handed out and why the rest of the internet cares so much about them.

Forward Threat Exposure: Know What an Attacker Can Reach

Cybersecurity is reaching an inflection point. Attackers use AI to research vulnerabilities, develop exploits, and run increasingly automated campaigns, compressing the time defenders have to respond. As that window shrinks, defenders need to know which vulnerabilities an attacker can actually reach. Answering that question is difficult when security tools provide separate views of vulnerabilities, assets, and network controls.