Cato CTRL™ Threat Brief: Middle East Escalation and Summary of Notable Iranian-Linked CVEs

**Executive Summary:** Cato CTRL reports heightened cyber risk following regional hostilities between Israel, the U.S., and Iran, with Iranian-linked actors and affiliated groups actively targeting exposed internet-facing systems (perimeter infrastructure, remote access, email/identity systems). The report cites multiple CISA-linked exploitation vectors (Fortinet FortiOS, Microsoft Netlogon/Exchange, Pulse Secure/F5, VMware Horizon and other public CVEs), notes likely espionage and destructive operations, and recommends centralized policy enforcement (SASE), threat modeling, and rapid CVE mitigation.