Q3 2024 Cato CTRL SASE Threat Report

Shadow AI: Data Privacy is #1 Security Risk

Cato CTRL (Cyber Threats Research Lab) has released its Q3 2024 Cato CTRL SASE Threat Report, which summarizes findings from Cato CTRL’s analysis of 1.46 trillion network flows across more than 2,500 Cato customers globally between July and September 2024. The report delivers actionable intelligence on threats and attacks that Cato CTRL has tracked and analyzed, providing a real view into what’s been happening and what to watch out for.

What’s Inside the Report

• Unsanctioned AI apps creating potential vulnerabilities for organizations: Cato CTRL tracked 10 AI applications (among hundreds monitored), and spotlighted data privacy as the top security risk.
• Threat actor hiring drive: Threat actors are recruiting pen testers for ransomware affiliate programs to successfully deploy ransomware against organizations.
• Avoiding TLS inspection is risky: Organizations are not using TLS inspection due to potential application and domain disruption, which puts them at risk of being attacked by threat actors using TLS traffic to remain undetected.
• Strategic recommendations: Guidance on how to combat ransomware gangs, how to gain visibility into shadow AI, and how to best utilize TLS inspection.

About Cato CTRL

• Cato CTRL is the cyber threat intelligence (CTI) team at Cato Networks.
• Cato CTRL protects organizations by collecting, analyzing, and reporting on external and internal threats, utilizing the data lake underlying the Cato SASE Cloud Platform.