Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cato CTRL Threat Research: Analyzing LAMEHUG - First Known LLM-Powered Malware with Links to APT28 (Fancy Bear)

On July 17, 2025, Ukraine’s Computer Emergency Response Team (CERT-UA) publicly reported LAMEHUG, which is being documented as the first known malware that integrates large language model (LLM) capabilities directly into its attack methodology.

5 proven ways to secure your hybrid network environment during team convergence

Watch the experts edition panel discussion featuring ESG Principal Analyst John Grady and AlgoSec leaders as they explore: How security responsibility is converging across cloud and datacenter environments—and what that means for your team The top causes of cloud breaches—and how to stop them before they spread 5 proven ways to unify visibility, policy enforcement, and zero trust across hybrid multi-cloud networks How to automate security workflows without slowing down innovation Real-world insights on AI risks, agent sprawl, and tool fragmentation in a converged security world.

Inside Qubit Conference Prague 2025: Hacking Social Platforms and Securing AI

Qubit Conference Prague 2025 brought together some of the sharpest minds in cybersecurity—and Cato CTRL made sure to leave a mark. Not only did we share insights on AI-powered security, but we also marked a major milestone: the opening of our new R&D office in Prague. This expansion strengthens our global footprint and taps the best in the local engineering and development talent to help with the kinds of projects we present at Qubit.

Cato CTRL Threat Research: Investigation of RMM Tools Leveraged by Ransomware Gangs in Real-World Incidents

Remote Monitoring and Management (RMM) tools are essential for IT operations, but their powerful capabilities and trusted status within enterprise networks have also made them valuable to threat actors. In the second half of 2024 and first quarter of 2025, we uncovered a recurring pattern during a series of cyber forensic investigations and threat detections impacting two US-based organizations and one UK-based organization.

The Future of Cybersecurity: How SASE Security is Transforming Network Protection

For decades, enterprise networks resembled fortified castles: one or two drawbridges (MPLS links) funneled all traffic back to a central moat where hardware firewalls, proxy stacks, and IPS appliances examined every packet. Cloud computing, hybrid work, and an explosion of SaaS shattered that perimeter. Today, an employee might open a CRM record in Salesforce from a café, push source code to GitHub over home Wi-Fi, and join a Zoom meeting through a 5G hotspot-often in the same morning.

How does Fidelis NDR Delivers Proactive Asset Risk Mitigation?

Organizations operating in sprawling, hybrid IT environments often lack complete visibility into all assets and their communication patterns. This gap creates blind spots where vulnerabilities go undetected, third-party components remain unpatched, and unauthorized lateral movement can occur without raising alarms.

How CIOs Can Do More with Less Using Network Digital Twin Technology

Today’s CIOs are under intense pressure to deliver operational excellence without expanding headcount or overspending. Budget constraints, rising infrastructure costs, and growing expectations around uptime and security have forced IT leaders to rethink how they allocate resources. The challenge isn’t simply about doing more—it’s about doing more efficiently with the same staff and infrastructure.

Beyond the Firewall: Why Advanced Cybersecurity is Non-Negotiable for Modern Business

In today's hyper-connected digital economy, data is the new currency. From customer information and financial records to intellectual property and strategic plans, a company's most valuable assets are stored, processed, and transmitted as bits and bytes. This digital transformation has unlocked unprecedented opportunities for growth and innovation, but it has also opened the door to a new and persistent threat: sophisticated cyberattacks.

Cato CTRL Threat Actor Profile: IntelBroker

In June 2025, FBI New York and the U.S. Attorney’s Office for the Southern District of New York announced charges against “IntelBroker,” the online persona of 25-year-old British national Kai Logan West. IntelBroker operated one of the most sophisticated data brokerage operations documented in the recent history of cybercrime.

Network Segmentation Testing for PCI DSS: A Practical Guide

PCI DSS compliance isn’t just about ticking off controls, but it’s more about how your infrastructure is architected and enforced. Few decisions influence the scope of compliance as directly as the implementation of network segmentation. Every additional system brought into the PCI scope adds operational friction: more logs to review, more systems to harden, more controls to audit. One misconfigured firewall rule or a forgotten DNS server can quietly pull half your network into scope.