Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Smarter Security with New Integrations from Cato Networks and CrowdStrike

Today, Cato Networks announced a collaboration with CrowdStrike to integrate the Cato SASE Platform with the CrowdStrike Falcon platform. Together, the companies are helping security teams unify network and endpoint visibility, streamline investigations, and accelerate threat detection and response. If there’s one frustration that unites IT and security professionals, it’s this: too many tools that don’t talk to each other.

Bringing Claude Enterprise Activity into Cato AI Security

Claude is now a part of many employees’ everyday work. But even as a sanctioned application, it creates a visibility problem for security teams. Sensitive data can move into prompts, files, projects, and conversations, and teams need a practical way to see what happened and whether it violates policy.

Cato CTRL Insights: How One Threat Actor Turned Frontier AI Into an Offensive Platform

A Russian-speaking threat actor known as “Trim” has spent the better part of 2026 systematically dismantling the guardrails on publicly available frontier AI models and rebuilding them as offensive tools. What started in March as a knowledge-sharing post on a Russian cybercrime forum detailing how to break Claude Opus into writing malware, had evolved by June into a fully productized, commercially marketed AI-powered penetration testing platform.

Cato CTRL Threat Brief: AsyncAPI Supply Chain Attack Delivers Miasma Malware Through Trusted npm Packages

On July 14, 2026, attackers compromised release processes connected to the AsyncAPI open- source project and published malicious versions of four widely used npm packages with a combined reach of approximately 2.9 million weekly downloads.

The Agentic Attacker: One Objective, One Prompt, Forty Minutes, Domain Admin - Game Over

In a controlled enterprise lab, we tested how far an agentic attack stack could go by harnessing a frontier model with an agent platform, MCP-enabled tooling, operational context, and enough autonomy to execute a complete attack path.

The EU AI Act Is Here. Is Your AI Environment Ready?

AI has moved from experimentation to operational reality. Last year saw a 50% rise in access to AI for employees, with 88% of organizations using AI in at least one business function. Competitive pressure is accelerating AI adoption. While this creates opportunity, it also creates a new level of operational risk.

Secure Enterprise AI Innovation with Cato AI Security

Enterprise AI is spreading fast across employees, applications, and agents. Security teams need a way to enable AI adoption without losing visibility, control, or governance. In this demo, see how Cato helps organizations secure AI across three fronts: · AI employees use, including sanctioned and unsanctioned AI tools· AI applications teams build, including LLM apps connected to enterprise data· Agentic AI, where agents can access tools, data, and workflows.

Agent Tesla Doesn't Need Admin Rights to Steal Your Business

See how Cato helps stop an Agent Tesla-style malware credential theft attack before it becomes business impact. In this demo, a remote finance user opens what appears to be a routine invoice. Behind that simple action is a common attack path: malware designed to steal credentials, keystrokes, and sensitive business data.

Zero Trust for AI Agents Starts After Login

Zero Trust was built to fix an older assumption: if you were inside the network, you were trusted. Then, Cloud, SaaS and remote work broke that, so security moved toward identity, device checks, MFA, least privilege, and continuous verification. But now, with agents, the messy bit starts after access. The agent reads a prompt, pulls context, chooses a tool, calls an API, and may trigger a workflow. The login tells you the agent is “trusted”.

DuneSlide: Two Critical RCE vulnerabilities via Zero-Click Prompt Injection in Cursor IDE

Cato AI Labs has discovered two critical remote code execution (RCE) vulnerabilities in Cursor IDE, the popular development environment which, according to Cursor, is used by over half of the Fortune 500. Both RCE vulnerabilities, which we refer to as “DuneSlide,” achieved a 9.8 CVSS score, and involve breaking out of the IDE’s sandbox environment and were assigned CVE IDs CVE-2026-50548 and CVE-2026-50549.