Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

The supply-chain risk hiding in your MCP servers

In my last post I used an AI agent to work out the blast radius of a compromise, and the agent found something I had not been looking for: other AI agents inside the blast radius. On an administrator's workstation, AI coding assistants were running Model Context Protocol (MCP) servers that the administrator had set up, and those servers held privileged credentials for security tools and other administrative resources.

Cato CTRL Threat Intel: PHP2Shell in the Underground and the Search for a Working Exploit

On October 21, 2026, we observed participants in underground forums seeking PHP2Shell exploits, while others shared scripts presented as exploiting CVE-2026-109618 and CVE-2026-109619. Discussion included doubts about prerequisites and whether circulating code worked. This post examines that gap between interest, claimed capability, and verified exploitation. Our assessment covers selected forum posts and messages collected as of October 21.

Network rollout services and project deadlines. How to avoid delays during network expansion?

Delays in telecommunications infrastructure expansion can generate additional costs and postpone the launch of new services. Technical difficulties are not always the main cause of these problems. Delays often result from poorly coordinated activities, outdated documentation, or insufficient communication between contractors. Properly implemented network rollout services help organize project execution, monitor progress, and respond more quickly to potential scheduling risks.

How Carrier Network Management Strengthens Business Network Security

A business may have strong firewalls, secure devices, and clear rules for staff, yet still face risks through the networks that connect its offices, cloud services, and remote workers. These connections often depend on several telecom carriers and service providers. If no one has a clear view of how they work, a problem with one provider can affect security, access, and daily operations.

Why Small Businesses Need Professional IT Consulting to Improve Cybersecurity

Running a small business in Connecticut involves managing customers, employees, finances, and daily operations. With so many responsibilities, cybersecurity can easily become something business owners address only when a problem occurs. However, even a single security incident can disrupt operations, expose customer information, and create unexpected expenses.

Sophos Helps Organizations Secure the AI-Era Network as Demands on Performance and Protection Grow

New innovations give organizations greater visibility and control over AI use, deliver up to 4X higher protected throughput, and strengthen network detection and response across increasingly complex environments.

How to use inventory management in Forward Enterprise

See every network device, cloud object, and endpoint Forward Enterprise models in one sortable, filterable inventory. This walkthrough shows you how to find what's deployed, what it's running, and when it changed. Forward Enterprise collects configuration and state data from across your hybrid network. The Inventory application turns that data into a working view of your infrastructure, so you can answer asset questions with evidence instead of spreadsheets.