Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The First Questions That Matter: Triaging AI Agent Security Incidents

I have lived through major incidents firsthand, including the urgent calls that come in the middle of the night. In my experience, the teams that contain damage quickly are not the ones with the most tools. They’re the ones that ask the right questions in the first hour.

Cato CTRL Threat Research: PHP2Shell Exploitation Attempts in the Wild, and How Cato IPS Blocked Them

On 21 October 2026, PHP released fixes for CVE-2026-109618 and CVE-2026-109619, a pair of critical runtime vulnerabilities known as PHP2Shell. One day later, we described how our self-evolving CVE mitigation agent turned the patch into reviewed IPS protection in minutes. This report follows what happened next, including how quickly attackers moved, what their attempts looked like, and how Cato’s cloud-delivered IPS protection blocked them on inspected customer traffic.

Malicious Claude Code extension distributed through Cursor marketplace

On October 29, 2026, Cursor reported that a malicious version of Anthropic’s Claude Code extension (2.1.313) was available in the Cursor extension marketplace between approximately 09:27 and 20:35 UTC. Cursor identified impacted macOS and Windows packages and estimates that up to 5,000 users were affected.

The Dishwasher Doesn't Need a Soul, The Film Does.

People say they can spot AI writing a mile off. The em dashes. The word “delve.” The LinkedIn posts that begin with “I’ve been thinking a lot about leadership” and end without a single thought. I understand the reaction. I’ve read enough of them to develop a thousand-yard stare every time someone says they’re “unlocking” something. But I also don’t believe that all AI uses need to be thrown into the waste bin.

The Hidden Cybersecurity Risks Facing Modern Gaming Communities

Gaming communities have evolved into enormous digital environments where millions of players interact, compete, trade collectibles, and develop friendships. From multiplayer servers and esports tournaments to online marketplaces and trading card communities, gaming now involves far more than simply playing a favorite title.

Physical Security Gaps Every Mobile Professional Overlooks

Mobile professionals often protect their accounts more carefully than the devices, documents and bags sitting beside them. A strong password offers limited protection if someone can enter a shared workspace, view confidential information on a screen or leave with an unattended laptop. Physical security deserves the same deliberate planning as digital security. For consultants, remote employees and frequent business travelers, that means controlling access to equipment and building repeatable habits for hotels, coworking spaces, transportation hubs and client offices.

How Residential IP Infrastructure Fits into Modern Internet Networking

Most people know their home internet has an IP address, but that's usually where it ends. Few ever check what it is or who it belongs to. Websites check all the time though. The address gives away which ISP you use, a rough location, and whether the connection is coming from someone's house or from a server somewhere, and that last part decides a lot more than you'd expect. Here's a look at how residential IPs get handed out and why the rest of the internet cares so much about them.

5 Best Penetration Testing Companies in 2026

Penetration testing companies simulate authorized attacks to identify exploitable security weaknesses and explain how to fix them. A useful engagement gives your team evidence of what failed, the business impact, and a clear path to remediation. Our five picks for 2026 are Bright Defense, Rapid7, Kroll, BreachLock, and NetSPI. Bright Defense leads this shortlist for small and midsize businesses that want testing with access to compliance support. The other providers offer options for broad technical coverage, threat-informed assessments, platform-based delivery, and enterprise testing programs.
Featured Post

AI Agents Are Rewriting the Rules of Identity Security

For years, identity security has been based on a fairly straightforward premise: organisations need to know who, or what, is accessing their systems, what they are authorised to do, and whether that access remains appropriate. However, the rise of autonomous AI agents has changed the game, and tore-up the traditional model of role-based access controls and privileged access management.