Why We're Elevating the Compliance Conversation

Before the AI spectacle of RSA arrives, let’s talk about what actually keeps regulated organizations secure RSA is only weeks away. And if you’ve been paying any attention to the pre-conference buzz, or if you work in technology generally, you already know what it’s going to feel like walking that floor: artificial intelligence, everywhere, in everything. AI-powered detection. Autonomous response. Agentic security copilots in everything from threat monitoring to your morning coffee.

The 10 Types of Insider Threats Every Security Team Needs to Know

Insider threats account for 34% of all data breaches, yet most organizations are still building security programs designed to stop attackers from the outside. The harder truth? The risk is already inside your walls, and it doesn't always look like a criminal. Not every insider threat is malicious. Some are distracted. Some are overworked. Some are just trying to get things done faster.

Glassworm Strikes Popular React Native Phone Number Packages

On March 16, 2026, two React Native npm packages from the AstrOOnauta were backdoored in a coordinated supply chain attack. Both releases added an identical install-time loader that fetches and executes a multi-stage Windows credential and crypto stealer, triggered by nothing more than a routine npm install. The affected packages are react-native-country-select@0.3.91 and react-native-international-phone-number@0.11.8.

Fraud Prevention 101: How Accounting Services Can Save Your Business

Running a company involves many moving parts. Keeping the finances safe is a full-time job for any owner. Thieves often look for weak spots in your books to take what you have built. Professional eyes help spot trouble before it grows into a crisis. You can keep your profits safe with the right systems in place. Modern tools make this task much easier for everyone involved in the daily operations.

Maximizing Your Online Presence: Tips for Effective Advertising

Establishing a strong presence online is a major goal for many modern businesses. You need to reach your audience where they spend most of their time. This helps you stay relevant as technology changes. Digital advertising helps you connect with potential customers who are looking for help. It provides a way to grow your brand and find new leads. You can use these tools to show your value to the local community.

Building a CUI Enclave in SaaS: What CMMC Compliance Really Requires

Controlled Unclassified Information (CUI) occupies an unusual position in the data security landscape. It's sensitive enough to demand protection, yet it doesn't meet the threshold for formal classification. As more organizations migrate operations to cloud infrastructure, the challenge of protecting CUI has become a defining issue for Software as a Service providers-particularly those serving government contractors or handling defense-related data.

AI in Cybersecurity Certification

Positive feedback can lead to unintended consequences. A dog learned that saving kids from the River Seine earned food and praise. So he started dragging them in to “save” them. AI models optimize for feedback in a similar way. Cato’s AI in Cybersecurity course shows how to manage the risks. It’s free and earns you CPE credits.

Cato CTRL Threat Brief: Middle East Escalation and Summary of Notable Iranian-Linked CVEs

On February 28, 2026, Israel and the United States launched a joint attack against Iran. In retaliation, Iran launched its own attacks against Israel and US-allied countries and bases in the region. The escalation in the Middle East is ongoing. Cato CTRL is currently monitoring the threat landscape in the region.

You Can Create a Convincing Deepfake in Under an Hour

A non technical user can produce a credible deepfake in under an hour using off the shelf tools and footage from normal video meetings. Common habits such as recording calls for later review give attackers enough material to train models, so every routine sales or onboarding call becomes potential training data. ⸻ For more information about us or if you have any questions you would like us to discuss email podcast@razorthorn.com. We give our clients a personalised, integrated approach to information security, driven by our belief in quality and discretion..