AI agents help Cato slash ‘time-to-protect’ from new CVEs