Company > Blog News and views from the leading voice in secure digital transformation Menu Home Product Insights Security Research Company News Zscaler Life More From This Author Michael Sutton Zscaler Cloud Platform March 21, 2018 3 Min readThe Journey Has Just Begun In early 2008, I received a phone call that would ultimately change my career. The caller pitched his vision of the future of internet security and suggested that we should discuss the company that he was launching, then... Insights and Research September 09, 2017 3 Min readOn the Severity of the Equifax Breach It was recently revealed that that credit monitoring service Equifax was breached, leaking the information of 143 million customer, or about 57% of the US population over the age of 18. The potential acts of poor design,... Insights and Research December 15, 2016 18 Min read2017 Security Predictions As this year comes to an end, I am grateful that it is not in my purview to predict world events for the coming year. While I did fairly well with my security predictions for 2016, I’m not sure that Nostradamus himself c... Insights and Research October 21, 2016 3 Min readRecent IoT-powered DDoS attacks should serve as a wakeup call Earlier today, a large DDoS attack disrupted a significant portion of Internet traffic, starting on the US East Coast, spreading to the West Coast and ultimately Europe. This attack was particularly damaging as it wasn't... Insights and Research September 26, 2016 4 Min readYahoo breach affects half a billion users...world shrugs While the press and rumor mill turn full tilt in the wake of the announcement from Yahoo last week that it had been the victim of perhaps the largest known data breach ever (more records were breached than there are citi... Zscaler Cloud Platform March 24, 2016 1 Min readPrediction 10: The Encryption Showdown Encrypted communications have long been the bane of law enforcement and those in the intelligence communities. As privacy concerns mount, thanks in part to the Snowden revelations, leveraging strong encryption for messag... Zscaler Cloud Platform March 10, 2016 1 Min readPrediction 9: Say Goodbye To Browser Plugins The love affair with browser plugins has been on the decline and we’re finally at a point where the average user can do away with them once and for all. Flash had a particularly tough year after Firefox disabled the plug... Zscaler Cloud Platform March 03, 2016 2 Min readPrediction 8: Password Reuse Attacks Decline And now for some good news. Password reuse attacks will begin to decline. Attackers are quite happy to compromise virtually any site even if it’s not the endgame as they can generally recover information and resources th... Zscaler Cloud Platform February 23, 2016 1 Min readPrediction 7: Terrorists Catch The Hacking Bug This last prediction is one that saddens me to write, but I feel is inevitable and one that can’t be ignored. Terror organizations are continually searching for new avenues to instill fear and they require significant fu... Zscaler Cloud Platform February 16, 2016 2 Min readPrediction 6: Android Finally Cleans Up It’s Act Android is well on it’s way to becoming the Windows of the mobile malware world. With 99% of mobile infections, Android is the only game in town when it comes to infected tablets and smartphones. Love it or hate it, Appl... Zscaler Cloud Platform February 12, 2016 1 Min readPrediction 5: No AV? No Problem Foreshadowing the death of antivirus (AV) is hardly a bold prediction. Even AV executives are calling for it. While you won’t see a sudden wholesale move away from AV, as it remains the first line of defense for corporat... Zscaler Cloud Platform February 09, 2016 1 Min readPrediction 4: The Extortion Data Breach The Sony Pictures, Ashley Madison and Hacking Team breaches all share a common theme – the goal of the attacks was to humiliate the respective companies and perhaps inflict financial damage. There did not however appear ... Insights and Research February 02, 2016 1 Min read2016 Security Predictions (3 of 10) Prediction 3: Ransomware 2.0 Goes Corporate Ransomware has managed to hit a sweet spot. Users are all too willing to begrudgingly pay an expensive but not excessive ransom in exchange for the return of their precious ... Insights and Research January 28, 2016 1 Min read2016 Security Predictions (2 of 10) Prediction 2: Trusted Partner Attacks Breaking in through the front door isn’t always the best option as it tends to be be well defended. The same is true in cyber attacks. A head on assault is expected, but companies... Insights and Research January 21, 2016 2 Min read2016 Security Predictions (1 of 10) As we start the new year, we like to look back at the year that was and do our best to prepare for the year ahead. Yes, it’s time to join my colleagues in the security industry, peer into my magical crystal ball and prov... Insights and Research December 22, 2015 13 Min read2016 Security Predictions As the year comes to a close and winter sets in, we like to look back at the year that was and do our best to prepare for the year ahead. What would the holiday season be without yuletide cheer, excessive commercial... Insights and Research April 17, 2014 1 Min readHeartbleed Check Added To ZULU Many of you already regularly use ZULU, our free service for analyzing any URL to determine it's overall risk and we've just made it better by adding a 'heartbleed' check. ZULU operates by applying a variety of checks t... Insights and Research April 08, 2014 2 Min readWhy You Should Care About The OpenSSL Heartbleed Vulnerability Yesterday, researchers from Google and Codenomicon made quite a splash when they revealed details of a vulnerability in OpenSSL's implementation of the heartbeat extension, which they have affectionately dubbed heart... Insights and Research March 21, 2014 2 Min readScams Taking Advantage Of Malaysia Airlines 370 Disappearance I spent some time today looking for sites that are taking advantage of the disappearance of Malaysia Airlines flight 370 (MH370) to profit from the tragedy. Unsurprisingly, it was all too easy to find examples of this as... Zscaler Cloud Platform January 17, 2014 2 Min readObama Seeks to Appease Security and Intelligence Community The changes that President Obama proposed today are akin to a renovation project, not an overhaul. To further the analogy, he focused on the kitchen, not the less visible basement den. Overall, few of the recommendations... Zscaler Cloud Platform September 17, 2013 2 Min readBeyond the Hype: The APT Defense Lifecycle Today, Zscaler announced the industry’s first comprehensive cloud-based solution for advanced persistent threat (APT) security. The big news here is not only that we’re delivering this solution through the cloud, but als... Zscaler Cloud Platform June 20, 2013 2 Min readSutton on Security: Viewing Online Privacy through PRISM The revelation of the NSA PRISM program has a lot of people talking about online privacy. I recently spoke with USA Today and American Public Radio about PRISM and online data privacy, which got me thinking about some pr... Insights and Research February 05, 2013 1 Min readSuper Bowl 2013 Web Traffic It's always fascinating to see how a major global event can impact Internet traffic patterns. There aren't many sporting events larger than the Super Bowl, so we took a look at the web traffic that we were seeing on the ... Insights and Research January 17, 2013 4 Min readMobile App Wall Of Shame: ESPN ScoreCenter ESPN ScoreCenter Price: Free Category: Sports Updated: Dec 19, 2012 Version: 3.0.0 Build 361 Size: 13.1 MB Language: English Vendor: ESPN Inc. Operating System: iOS Update: [01/18/13 4:19pm EST] Zs... Insights and Research December 21, 2012 5 Min read2013 Security Predictions Ah, my favorite time of the year – chestnuts roasting on an open fire, a brisk chill in the air and of course…predictions of all that await us in the coming year. Given my amazing historical accuracy (all archived ... Insights and Research October 08, 2012 3 Min readIntroducing ZAP Access ZAP - http://zap.zscaler.com View a video walkthrough for ZAP ZAP Home Page After many months of hard work by the ThreatLabZ Team, I'm very pleased to unveil ZAP (Zsca... Insights and Research January 25, 2012 3 Min readIntroducing Project Zulu I want to personally and publicly thank Julien, Pradeep and Mike for all of their hard work over the past several months, to make today's launch of Project Zulu a reality. Zulu is a completely free service, open to anyon... Insights and Research December 20, 2011 4 Min read2012 Security Predictions It’s the most wonderful time of the year. A time when we set aside our quarrels and show compassion for complete strangers, realize that it’s better to give than to receive and in the security industry, let everyo... Insights and Research May 01, 2011 1 Min readMalware Sites Already Capitalizing On Announcement Of Osama Bin Laden's Death Update (025/02/11 9:40am EST): A before/after comparison of the photoshopped image used in the malicious post can be found here. Within hours of the announcement of Osama Bin Laden's death, we are already seeing ... Insights and Research April 21, 2011 4 Min readWill Mobile Apps Be The Achilles' Heel Of Web Security? Inspired by a post yesterday from Alasdair Allan and Pete Warden discussing how the iPhone records and stores geo-location data, I decided to poke around to see what other interesting security issues may be lurking ... Insights and Research April 07, 2011 4 Min readUSPS.gov Website Infected With Blackhole Exploit Kit Update (04/07/2011 10:03am PST): USPS officials have taken the http://ribbs.usps.gov web site down to address the infection. A United States Postal Service website (http://ribbs.usps.gov) has been infected with t... Insights and Research December 21, 2010 7 Min read2011 Security Predictions It’s that time of year again. As I prepare for my annual pilgrimage to the Great White North to visit family, I also turn my attention to the annual tradition of predicting the future. The beauty of the security indust... Insights and Research December 10, 2010 5 Min readHacktivism On Display: Operation Payback And The Wikilkeaks Saga hack verb \ˈhak\ a : to write computer programs for enjoyment b : to gain access to a computer illegally ac·tiv·ism noun \ˈak-ti-ˌvi-zəm\ a : a doctrine or practice that emphasizes direct vigorous act... Insights and Research October 01, 2010 2 Min readLatest Facebook Clickjacking Attack - This Poor Girl Killed Herself... Clickjacking is really starting to be embraced by attackers since Jeremiah Grossman and Robert Hansen first spoke about it at OWASP NYC AppSec 2008. One of the primary targets for Clickjacking has been Facebook and most ... Insights and Research August 30, 2010 3 Min readHelp Contribute To The Cloud Security Alliance 'Top Threats' V2.0 In March of this year, at RSA 2010, the Cloud Security Alliance, officially unveiled the Top Threats to Cloud Computing. This was a collaborative effort that drew upon the expertise of some of the finest minds in the s... Insights and Research June 15, 2010 2 Min readAntivirus Struggling With Obfuscated JavaScript As part of our offline research, we regularly test various desktop antivirus (AV) solutions to determine how effective they are at catching web based threats. One segment where I feel that AV has struggled, is with ... Insights and Research February 12, 2010 1 Min readFake Vancouver Winter Olympic Videos Spreading Malware It certainly didn't take attackers long to take advantage of the Olympic Winter Games, which began today in Vancouver. Within minutes of the completion of the opening ceremonies, Twitter messages were appearing from an a... Insights and Research February 04, 2010 3 Min readThe Death Of IE 6 Is Greatly Exaggerated Champagne bottles were popping this week as victory was declared in the war on IE6. I say not so fast. The effort to rid the world of IE6 has been going on for some time but a couple of recent high profile events have br... Insights and Research January 19, 2010 3 Min readWhat We Can Learn From Google's China Attack The Internet has been abuzz over Google's admission that it was targeted in a coordinated and allegedly state sponsored cyber attack. Some are applauding Google's stance, while others question Google’s true motivation. T... Insights and Research December 15, 2009 4 Min read2010 Security Predictions 2009 was the year that we learned the meaning of the word recession and looked to the cloud for answers. Budgets were slashed and security departments were forced to do more with less, all while cybercrime rates rose as ... Insights and Research November 23, 2009 5 Min readTwitter Follower Scams Introduction It's cool to be on Twitter but it's cooler still to have more followers than your neighbor. Some are so desperate to move into the lead that they're pulling out their credit card to get there. Those gullibl... Insights and Research September 09, 2009 3 Min readWatered Down Phishing Protection In IPhone OS 3.X? [Update: 09-13-09 @ 5:43pm EST - Looks like we may have finally resolved this. Apple has apparently issued a statement indicating the the anti-phishing filter doesn't take affect until the blacklist is downloaded which o... Insights and Research April 17, 2009 3 Min readWe Used To Laugh At XSS I remember at Defcon 10 in 2002, when members of GOBBLES took to the stage for their much anticipated talk about the state of the security industry. The talk turned out to be a largely incoherent, but entertaining r... Insights and Research April 07, 2009 4 Min readGmail And HTML 5 If you accessed Gmail today on your iPhone or Android based phone using a web browser, you will have noticed some differences. It has a few more bells and whistles but of particular interest is the addition of offline ac... Insights and Research March 25, 2009 5 Min readHugs Not Bugs At CanSecWest last week, a group of researchers (Charlie Miller, Alex Sotirov and Dino Dai Zovi) stirred up a fair bit of controversy by pushing a "No More Free Bugs" campaign. The premise of which was that they are unwi... Insights and Research March 18, 2009 3 Min readMobile Bowser (In)security For the past couple of days, the Interwebs have been buzzing about pending new features in iPhone OS 3.0. One Item that barely received any mention whatsoever, but was pleasantly jaw-dropping for me, can be seen in the i... Insights and Research March 15, 2009 5 Min readThe World According To TinyURL According to Wikipedia, TinyURLs have been banished from the likes of MySpace, Yahoo! Answers, Orkut and Wikipedia itself due to concerns that it is a favored tool of spammers. It's not entirely surprising given that the... Insights and Research March 05, 2009 3 Min readInterim Patches On September 16, 1997, Apple named Steve Jobs Interim CEO, a year after returning to the company that he had founded. Bud Selig served as interim commissioner for six years before Major League Baseball officially handed ... Insights and Research March 01, 2009 5 Min readDemystifying/Abusing Flash Cookies Flash Cookies (aka Local SharedObjects) are increasingly being leveraged by developers as a powerful alternative to HTTP cookies, yet there seems to be significant confusion as to what they are capable of and what securi... Insights and Research February 19, 2009 4 Min readPractical Example Of CsSQLi Using (Google) Gears Via XSS Comment: I would like to go out of my way to thank Paymo.biz for the professionalism that they displayed in promptly responding to vulnerabilities brought to their attention to ensure that their users were protected. Wit... Insights and Research February 13, 2009 3 Min readRough Week For Security Companies It's been a rough week for security companies, especially for their web masters. A Romanian hacking group decided to embarrass as many as possible by identifying SQL injection (SQLi) flaws in public facing websites and K... Insights and Research January 28, 2009 4 Min readStepping Through JavaScript Obfuscation I've been noticing an increasing number of attacks whereby malicious IFRAMEs are injected into the pages of otherwise reputable sites. While such activity is often very obvious as you can spot an IFRAME right before the ... Insights and Research January 22, 2009 2 Min readHeartland Payment Systems Joins A Crowded Club This week Heartland Payment Systems confessed to what may ultimately be the largest data breach ever, with some suggesting that as many as 100 million credit cards have been exposed. This makes the 2007 TJ Maxx breach of... Insights and Research January 18, 2009 2 Min readWhy Is Conficker/Downadup Succeeding? It has been a while since we've seen a fast spreading worm affect a significant volume of victims. This past week however a new variant of Conficker (aka Downadup) reportedly infected millions of Windows machines. So cal... Insights and Research January 06, 2009 10 Min read2009 Web Security Predictions 2009 is a year when some fundamental shifts in web technology will begin to take hold and attackers will adjust accordingly. With the emergence of revolutionary changes such as cloud computing, widespread adoption of nex... Insights and Research January 02, 2009 4 Min readBreaking Down Broken SSL Update [01/06/09]: I discussed this topic with Dan Kaplan on his SC Magazine podcast. On December 30, 2008 at the 25th Chaos Communication Congress (CCC) in Berlin, seven researchers presented a talk entitled 'MD5 Con... Insights and Research December 18, 2008 3 Min readTurning A Blind Eye All too often, evil is lurking right under our noses, yet we choose to turn a blind eye. Sometimes we do this out of fear. After all, if we get involved, we too could get hurt. Other times however, we are just as much to... Insights and Research November 13, 2008 3 Min readStepping Through A Mass Web Attack A few days ago, Kaspersky reported on yet another mass web attack. Such attacks are quickly becoming a preferred attack vector as they permit mass infection with minimal effort. We've seen this before, and not just once.... Insights and Research November 07, 2008 3 Min readCloud Services For Analyzing Malware Despite continuing promises from software vendors, malware isn't going anywhere. Analyzing malware to protect against it and repair the damage that it may have done, is a significant part of the job description for many ... Insights and Research October 28, 2008 2 Min readPorts Are Meaningless I read an interesting survey today commissioned by FaceTime Communications. This is their fourth such annual report and while the overall findings were unsurprising, it highlights a growing problem - how to control appli... Insights and Research October 21, 2008 4 Min readUbiquity Foreshadows Future Browser Security Challenges When I can, I like to investigate emerging open source projects, both to satisfy my curiosity and to gain insight into security challenges to come. I recently stumbled across one such project from Mozilla Labs, known as ... Insights and Research September 26, 2008 2 Min readCloud Cover The term 'cloud computing' is quickly becoming a standard part of our vernacular but do security services have a place in the cloud? We have seen a handful of fundamental shifts in computing over the decades and I firmly...Related Articles Zscaler Cloud Platform 6 Min read Blocking the Unknown Threat with Machine Learning Zscaler Cloud Platform 3 Min read Introducing Zscaler and ServiceNow: Protect More, Work Smarter Zscaler Cloud Platform 2 Min read A Powerful Combination: Active Defense, the Bridge to Zero Trust Zscaler Cloud Platform 3 Min read 5G and the Power of the Edge Insights and Research 2 Min read Coverage Advisory For Email Based Attack From Nobelium Zscaler Cloud Platform 3 Min read CIEM: The Solution to the Top Four Public Cloud Permissions Challenges Zscaler Cloud Platform 4 Min read Got VPN? It’s Only a Matter of Time Before You’re the Next Cyberattack Headline. Zscaler Cloud Platform 3 Min read Zscaler Protections Against Flubot Banking Malware Zscaler Cloud Platform 5 Min read Responsible Organizations Must Take Decisive Actions After a Ransomware Attack Explore More Topics Customer Stories Culture Zscaler Cloud Platform Insights and Research Work from Anywhere CIO Insights Events
