Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Top Automated Network Asset Discovery Tools & Their Benefits

Keeping track of every device on your network can feel overwhelming, especially as IT environments grow more complex. Automated network asset discovery simplifies this challenge by continuously identifying and monitoring all connected devices, ensuring complete visibility and stronger security. With the right asset discovery software, businesses can detect unauthorised devices, manage IT resources efficiently, and reduce security risks.

Understand and detect MITRE Caldera with Zeek

MITRE’s Caldera is a cybersecurity platform developed to simulate adversarial tactics, techniques, and procedures (TTPs). Built upon the MITRE ATT&CK framework, Caldera is an open-source tool designed to help cybersecurity professionals and organizations assess their defenses, uncover vulnerabilities, and enhance their overall security posture. By emulating real-world cyber threats, Caldera enables blue teams to test detection and response mechanisms under realistic conditions.

Alert Fatigue: The Hidden Risk & How NDR Solves It! #cybersecurity #ndr

Is your security team drowning in alerts? False positives, low-priority warnings, and overwhelming notifications can lead to alert fatigue—causing real threats to slip through the cracks. In this video, we break down: What alert fatigue is and why it’s dangerous. The costly impact on your security operations. How NDR (Network Detection & Response) leverages AI and behavioral analysis to filter out noise and highlight real threats. Why Fidelis Network helps your team focus on what really matters.

How to Maintain Network Security During a NetSuite Implementation

NetSuite is one of the most secure Enterprise Resource Planning (ERP) software systems available, including multi-factor authentication and token-based application authentication. However, implementing NetSuite is often a long process that can entail numerous contractors and other parties working within your system. During the transfer and adjustment period, you must take extra care with your data security to ensure that everything is moved properly and no data is lost. Today, we'll explore how you can ensure that your data is safe during this critical transition period.

Why FWaaS Is the Only Way Out of Endless Appliance Patching

There was a time when owning a cassette or video player came with a side gig as a repair technician. Whether it was cleaning tape heads, fixing jammed reels, or rewinding tapes, maintenance was unavoidable. With streaming services, all of that effort has become a relic of the past. Music and videos now live in the cloud, accessible at any time, without the headaches of hardware upkeep. It’s a seamless experience—no more troubleshooting, just pure content consumption.

Exploited! PANOS Authentication Bypass Vulnerability (CVE20250108)

Recently, Palo Alto Networks disclosed CVE‑2025‑0108—a high-severity authentication bypass in the PAN‑OS management web interface. Although the flaw does not enable remote code execution, it compromises the confidentiality and integrity of management functions. In this post, we’ll break down the technical details, discuss the exploitation methodology, illustrate configuration and code examples, and outline effective mitigation strategies.

Arctic Wolf Observes Authentication Bypass Exploitation Attempts Targeting SonicWall Firewalls (CVE-2024-53704)

On February 10, 2025, Bishop Fox published technical details and proof-of-concept (PoC) exploit code for CVE-2024-53704, a high-severity authentication bypass vulnerability caused by a flaw in the SSLVPN authentication mechanism in SonicOS, the operating system used by SonicWall firewalls. Shortly after the PoC was made public, Arctic Wolf began observing exploitation attempts of this vulnerability in the threat landscape.

Google Cloud Armor Vs Cloudflare WAF

Google Cloud Armor is a web application firewall (WAF) service from Google Cloud Platform (GCP) that safeguards web applications against DDoS attacks and security threats. It integrates seamlessly with the Google Cloud HTTP Load Balancer, providing protection for Google Cloud applications against internet-based attacks.

Every Enterprise Should Want Their SASE Platform to be PCI 4.0 Certified - Here's Why

Cato announced today that it’s become the first SASE platform vendor to achieve PCI DSS v4.0 compliance. More specifically, compliance with PCI DSS v4.0.1. While particularly significant for retailers handling payment data, PCI DSS v4.0 compliance will also benefit non-retailers strengthening their security posture, reducing risk exposure, and demonstrating compliance with industry best practice.

GigaOm and Frost & Sullivan Recognize Cato Networks for SASE Innovation

The latest recognition of Cato Networks in the 2025 GigaOm Radar Report for Secure Access Service Edge (SASE) is just the newest example of our continued excellence in secure networking. Cato was named a Leader and Outperformer for a second consecutive year. Recently, Cato has been recognized for its innovation and leadership in AI-driven security, overall security efficacy, and SD-WAN by Frost & Sullivan and GigaOm.