Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

What's the Cheapest Way to Comply with HIPAA Online Tracking Technology Rules?

The U.S. Department of Health and Human Services (HHS) clarified in 2022 and again in 2023 that tracking technologies like Meta Pixel and GA4 can expose Protected Health Information (PHI). This applies even if PHI isn’t explicitly shared—contextual data such as appointment searches or logged-in status on a patient portal can qualify.

PoC Available for High-Severity Arbitrary File Write in Git CLI (CVE-2025-48384)

Arctic Wolf Customer, Proof-of-concept exploit code is now available for a high-severity arbitrary file write vulnerability in Git, which poses a risk to developers who regularly work with third-party code. If Git is used in your environment, we recommend reviewing this security bulletin and taking immediate steps to mitigate the risk.

A Leader Once Again: Cato Networks Recognized in 2025 Gartner Magic Quadrant for SASE Platforms

For the second consecutive year, Cato Networks has been recognized as a Leader in the 2025 Gartner Magic Quadrant for SASE Platforms. We believe this recognition validates our relentless commitment to innovation, excellence, and above all, our customers’ success. In a fiercely competitive landscape, we know that standing out means building SASE the right way, from the ground up, designed specifically for the needs of modern enterprises.

CISO Alert: Lessons from McDonald's Chatbot Breach

In June 2025, a disturbing security failure surfaced involving McDonald’s AI-powered hiring assistant, Olivia, operated by Paradox.ai. The platform, designed to screen job applicants via chatbot, exposed the personal information of over 64 million people. That included names, contact info, shift preferences, and even chat transcripts. The root cause? A combination of missteps that highlight the growing risk of insecure APIs in modern, AI-driven systems.

Securing Against Phishing Beyond Email

Phishing is no longer just an email problem. Reports state that 40% of phishing campaigns now span channels beyond email, hitting collaboration tools like Slack and Teams, plus SMS, and social media platforms. Voice phishing (“vishing”) in particular is on the rise: 30% of surveyed organizations reported at least one instance of attackers using spoofed or AI-cloned calls to steal credentials in the past year.