Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Cato CTRL Threat Research: Ballista - New IoT Botnet Targeting Thousands of TP-Link Archer Routers

Over the years, major IoT botnets like Mirai and Mozi have proven how easily routers can be exploited and threat actors have taken note. Two key issues have played in their favor: the fact that users rarely deploy new firmware to their routers, coupled with the lack of regard for security by router vendors. As a result, router vulnerabilities may persist in the wild for much longer than initially expected, even after patches are published publicly.

Jit + Google Cloud: Strengthening Cloud Security with CSPM and Google Chronicle Integration

We’re excited to announce our deepening partnership with Google Cloud, marked by two major milestones: Jit has received the “New Customer Acquisition” award from GCP Israel—recognizing our success in helping businesses enhance their cloud security on Google Cloud.

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

In February 2025, the Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Multi-State Information Sharing and Analysis Center (MS-ISAC) published a cybersecurity advisory to share information about the Ghost (Cring) ransomware and its techniques. The group behind this ransomware started its activities around 2021 by attacking public-facing applications running outdated versions.

DANGER: Phishing messages

DANGER: Phishing messages are easier than ever for someone to make and send, thanks to the likes of GenAI. That’s what Mostafa Hassanin, Group CISO at SMG, told our host Mark Dembo on this episode of The Connectivity Cloud Podcast. The pair, along with Cloudflare’s VP of Emerging Tech and Incubation, Sam Rhea, discussed the challenges of weaponized AI threats, alongside other real-life impacts of AI on enterprise security and operations.

The Harsh Reality of Ransomware Attacks: It's Not a 4-Hour Fix

Even well-prepared organizations with strong security are surprised by the intensity and length of cyber attacks. Heather Hughes notes that many expect quick solutions but are unprepared for the reality. "This process isn't over in two days," she explains, countering the myth of a 'big red button' fix. For more on how organizations should prepare, hear Heather, VP at Aon Cyber Solutions in the latest episode of podcast.

Understanding the IAM Blast Radius

In this episode of Into the Breach, James Purvis and Mike Schmidt delve into the concept of the IAM (Identity and Access Management) blast radius and its impact on modern security practices. They explore how DSPM (Data Security Posture Management) helps reduce noise, focus on sensitive data, and implement proactive least-privilege models to mitigate risks in cloud and SaaS environments. Learn how understanding the interplay between identities and data can enhance security outcomes and minimize the blast radius of breaches.

Random but Memorable - Episode 14.4: Security Audit App Ideas with Jacob DePriest

What’s it like to work as a CISO at a security company? This week, 1Password’s VP of Security and CISO, Jacob DePriest, reveals all. Jacob also shares his advice for building strong security teams with diverse perspectives, backgrounds, and skillsets. In Watchtower Weekly, we unpack a novel technique to break into businesses - pretending to offer audits of the company's cybersecurity. Plus, Matt & Roo share their best app ideas in Alternative Security Questions.