Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

A Complete Guide to Transport Layer Security (TLS) Authentication

Data security is non-negotiable. Transport Layer Security (TLS) authentication stands as the cornerstone for the protection of data in transit. When it comes to protecting enterprise APIs, systems, and identities, the importance of TLS auth cannot be overstated.

Cato CTRL Threat Research: HashJack - Novel Indirect Prompt Injection Against AI Browser Assistants

HashJack is a newly discovered indirect prompt injection technique that conceals malicious instructions after the # in legitimate URLs. When AI browsers send the full URL (including the fragment) to their AI assistants, those hidden prompts get executed. This enables threat actors to conduct a variety of malicious activities.

The Dark Side of Black Friday: When Ransomware Attacks Join the Shopping Rush

As retailers gear up for the year’s biggest sales, cybercriminals are preparing for their own “Black Friday rush.” They’re not after TVs, they’re after data. Last year, phishing surged more than 600%1 during Black Friday week and ransomware attacks rose nearly 60%2.

We Tested 5 VPNs to See Which Really Cuts Gaming Ping in 2026

Your crosshair should fire the instant you click, yet anything over 40 ms feels sluggish. To find out, we spent mid-2025 wiring three gig-fiber connections into tournament-grade routers and hammered seven WireGuard-based VPNs with thousands of pings. What follows reveals which services trimmed latency, which ones added drag, and how you can replicate the test in about ten minutes.

Secure Web Gateway (SWG) vs. Firewall: What's the Difference?

Secure Web Gateways (SWGs) and Firewalls both protect your business, but they defend at different layers. One protects your web traffic and cloud apps the other secures your network perimeter. Let’s explore how they differ and how to use both for maximum protection.

FortiWeb CVE-2025-58034: Exploited Zero-Day Command Injection in WAF

Dissecting the active-in-the-wild OS command injection vulnerability and its implications for enterprise threat monitoring In November 2025, threat intelligence teams began warning of a newly discovered zero-day vulnerability in a widely-deployed web application firewall appliance. The vulnerability — CVE-2025-58034 — allows authenticated attackers to execute arbitrary OS commands via crafted HTTP requests or CLI commands.

Episode 2 - Inside the Black Hat NOC: Defending a hostile conference network

Richard Bejtlich talks with Corelight Principal Technical Marketing Engineer Mark Overholser about what it takes to run the Black Hat Network Operations Center and keep a “hostile” training network safe. They walk through how partners like Corelight, Cisco, Palo Alto Networks, Arista, and Lumen build and monitor the conference network, how the team tells lab traffic from real infections, and why misconfigured self hosted services still show up in surprising ways.

Network Security Policy Management (NSPM): Keeping Policy and Reality Aligned

Network Security Policy Management (NSPM) is the discipline of defining, enforcing, and maintaining the network policies that govern how systems communicate, what data moves where, and who can access what. It sits at the intersection of security and operations, helping organizations maintain consistent, enforceable rules across increasingly complex infrastructures.

Why a VPN Helps You Stay Safe Online

A VPN is one of those tools that sounds very technical at first, but it is actually very simple once you understand it. It works like a safe tunnel for your internet. When you turn it on, all your online activity goes through this tunnel so no one can peek inside. Many people use a VPN to stay safe, to stay private or to watch content that is not normally available in their area. Some people like using a high-speed VPN so their internet stays fast while they stay protected. A VPN simply gives you peace of mind every time you go online.