Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The Binance Hack Explained: What It Means for CISOs

An interview with Aseem Rastogi, global security researcher at Coralogix, on the Binance hack, what it means for CISOs, and some sage advice on resilience over prevention. In this video security advisory, Aseem walks through what's known so far about the incident, why the guardrails around a single authorization failed, and what security teams in any industry can do about it.

Beyond ARTEX: 45 Agentic Attack Frameworks, What They Hunt For, and How to Find Them

ARTEX was one framework. The field around it holds about 45 more, each an open-source project that wires a language model into a loop that runs tools and acts on their output. We read the code and used Shodan to find every one accessible. Four ship a secret scanner wired to the agent by default. Dozens of operator consoles answered a Shodan query today. This post is the catalog: where each tool's code lives, what it ships for hunting secrets on public GitHub, and how it looks on the Internet.

Say Yes To MCP, Safely A Guide For Governing AI Coding Agents With Evo ADS

When we announced that MCP Governance is generally available in Evo Agentic Development Security (ADS), the most common follow-up was practical: "Great. Where do I start on Monday?" It’s a fair question; across 10,000 developer environments, Snyk found 4,524 unique MCP servers in active use, and 1 in 12 developers with an MCP server installed had a confirmed high or critical finding.

How Human is AI?

How do AI agents behave when they collaborate, take shortcuts, and push beyond established boundaries? In this session at the Exabeam Security Intelligence Summit in Chicago, John Nowotny examines the reported OpenAI–Hugging Face incident to explore how autonomous AI agents can exhibit behaviors similar to human insider threats. Learn practical strategies for managing AI-related risks through stronger monitoring, access controls, and incident response.

Mind The Gap: Bridging the gap between knowing what to do and doing it to drive successful outcomes

Why do organizations struggle to turn knowledge into action and achieve consistent results? In this session at the Exabeam Security Intelligence Summit in Chicago, Kish Dill examines the gap between knowing what to do and successfully executing it. Learn how to overcome barriers to progress, build a culture where challenges are openly discussed, reward meaningful action, and measure the processes that drive continuous improvement.

The Next Insider Threat

How are AI agents changing the insider threat landscape, and what can organizations do to manage the risks? In this session at the 2026 Exabeam Security Intelligence Summit in Chicago, John Nowotny explores how autonomous AI agents are introducing new security challenges as they gain access to sensitive data and greater independence across business systems. The session examines why understanding agent behavior is critical to detecting emerging threats and how organizations can adapt existing security programs to strengthen governance, visibility, and response.

From Integration to Innovation

How can healthcare organizations integrate cybersecurity programs following a merger while staying ahead of evolving threats? In this session at the Exabeam Security Intelligence Summit in Chicago, Kish Dill and Rich Durost discuss how Froedtert and ThedaCare navigated the challenges of combining their cybersecurity programs following their merger. They explore the complexities of securing healthcare environments, addressing emerging risks from AI agents, and building a stronger, more unified approach to cybersecurity.

Cato CTRL Threat Intel: PHP2Shell in the Underground and the Search for a Working Exploit

On October 21, 2026, we observed participants in underground forums seeking PHP2Shell exploits, while others shared scripts presented as exploiting CVE-2026-109618 and CVE-2026-109619. Discussion included doubts about prerequisites and whether circulating code worked. This post examines that gap between interest, claimed capability, and verified exploitation. Our assessment covers selected forum posts and messages collected as of October 21.

Top 6 Cybersecurity Companies in the UAE for Crypto and Fintech Security

Paranoid Security ranks first among cybersecurity companies in the UAE for crypto and fintech security, offering penetration testing, Red Teaming and crypto forensics to clients in the region. Exchanges, payment platforms and digital banks hold customer funds and data, so regulators expect proof that controls work. This list compares six offensive security providers by services, strengths and ideal client.