Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Stop Destructive AI Agent Commands Before They Run | Cato AI Security

Coding agents now have real access to cloud resources, code repositories and identity systems. That access brings a new kind of risk: a single unclear request, or an attacker who takes over the agent, can trigger actions that are hard or impossible to undo. That’s why Cato now detects destructive commands before they execute.

Cato Engine Playground: Test Your AI Detectors Before Production

You've written your AI policies. Now prove they work before you publish them. Security teams build detectors to enforce their AI policies, and they need to see how those detectors behave before they go live. Too strict, and they block work that should go through. Too lenient, and nothing gets caught. The Engine Playground in the Cato Management Application lets security teams test detectors before they go into production.

Cato AI Security: Three Questions to Answer About AI in Your Organization

Do you know how AI is used in your organization right now? Cato AI Security helps you answer. AI is in the hands of employees, inside the applications teams build, and running as agents. That leaves security teams with three questions, spread across many tools and teams: which AI is in use, is it set up safely, and can you stop a threat inline? Cato AI Security answers all three on one platform: Cato AI Labs research finds AI-native attacks in the enterprise tools employees already use.

Cato CTRL Threat Research: PHP2Shell Exploitation Attempts in the Wild, and How Cato IPS Blocked Them

On 21 October 2026, PHP released fixes for CVE-2026-109618 and CVE-2026-109619, a pair of critical runtime vulnerabilities known as PHP2Shell. One day later, we described how our self-evolving CVE mitigation agent turned the patch into reviewed IPS protection in minutes. This report follows what happened next, including how quickly attackers moved, what their attempts looked like, and how Cato’s cloud-delivered IPS protection blocked them on inspected customer traffic.

Cato CTRL Threat Brief: eMudhra Certificate Compromise Highlights the Value of Protection Delivered by an AI-Native SASE Platform

Eight eMudhra intermediate certificate authority (CA) private keys were compromised after being generated with insufficient randomness. Attackers could use these keys to forge certificates and impersonate legitimate websites or services to clients that still trust them. An attacker able to intercept a connection could potentially read or modify sensitive traffic.

See the Real AI Experience with Cato DEM

AI is becoming part of everyday work. Employees rely on services such as ChatGPT and Claude to research, create, and solve problems, while developers increasingly use AI-powered tools like Cursor and coding agents in their development workflows. As employees increasingly rely on AI to work more productively, the AI experience is becoming a critical part of the digital experience IT teams are expected to support.

Cato AI Endpoint secures browser AI, desktop AI and coding agents on every endpoint

AI used to live in a browser tab. Today it also runs inside the apps employees use every day, like Copilot in Word, in dedicated apps like ChatGPT and in coding agents such as Claude Code, Codex and Cursor. Coding agents work differently from chat apps. A chat app answers a question and waits. A coding agent is given tools and takes actions on its own, with the developer’s access. So every endpoint is becoming an agentic endpoint.

Cato CTRL Threat Brief on Attacks Against Refrigeration Controllers

CERT-FR’s October 13 update reports compromises of refrigeration controllers, naming Danfoss AK-SM and AK-SC alongside Copeland/Dixell XWEB systems. The entry methods remain unconfirmed. CERT-FR warns that attacks are probably continuing and recommends removing public exposure, checking configurations, and securing remote access. Compromised operational technology (OT) can disrupt cooling, compromise stored products, and threaten cold-chain continuity.

Cato CTRL Threat Brief: Cato AI native SASE delivers PHP2Shell protection at machine speed

On 21 October 2026, PHP released fixes for CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities known as PHP2Shell that can enable unauthenticated remote code execution. Cato’s self-evolving CVE mitigation agent helped turn the investigation into concrete research output by creating a proof of concept and generating an IPS signature in minutes. The agent connects vulnerability analysis, controlled lab testing and protection generation.