Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

Insights and Research
Job scams impersonate companies still hiring following tech layoffs
Insights and Research
5 Min read

Job scams impersonate companies still hiring following tech layoffs

Summary In the midst of significant layoffs hitting the previously immune tech industry, scammers have mobilized and doubled down on targeting job seekers with various employment scams. Stealing personal information and extorting victims for money, these scams leverage fake job postings, sites or portals, and forms, wrapped in social engineering...
""
Insights and Research
12 Min read

Album Stealer Targets Facebook Adult-Only Content Seekers

Information stealing malware is commonly observed in the landscape of cyber attacks today. Zscaler ThreatLabz team has discovered many new types of stealer malware families across different attack campaigns. Recently, the Zscaler ThreatLabz research team has spotted a new information stealer named Album. This blog will walk through the malware dist...
Over the shoulder shot of woman in a virtual meeting
Zscaler Cloud Platform
5 Min read

Here Comes the Hybrid Office—and It’s Going to Be a Nightmare for IT Leaders

As we move into a new phase of the pandemic, many companies are grappling with how to bring their employees back after more than two years of being untethered from the office. Survey after survey shows that most people want hybrid work arrangements—in-person and remote—and are quitting if not given the freedom to decide where they work. So, how...
Trade with caution - bad guys are stealing
Insights and Research
8 Min read

Trade with caution - bad guys are stealing

Threats continue to evolve in their complexity and scale as cyber criminals regularly come up with new ideas and find ways to target their victims. Modern information stealer families such as RedLine, RecordBreaker, ArkeiStealer, Vidar, Satacom, BatLoader are often sold through Malware-as-a-Service (MaaS) models and they continuously update wit...
Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization
Insights and Research
6 Min read

Okta Source Code Breach: How to Evaluate the Impact & Protect your Organization

What happened in the Okta source code breach? Okta, a leading provider of authentication services and Identity and Access Management (IAM) solutions, confirmed that its private GitHub repositories were hacked this month. According to an email notification reported by BleepingComputer, and later confirmed by Okta security post, the incident invol...
Zscaler Joins JCDC
Insights and Research
2 Min read

Zscaler Joins JCDC to Enhance Collective Cybersecurity Posture of U.S.

Actionable intelligence is critical to effectively combat cyber threats. It also requires a proactive, real-time collaboration between both public and private sectors. As part of our ongoing commitment to operational collaboration, I am pleased to announce that Zscaler has joined the Joint Cyber Defense Collaborative (JCDC). Established by the C...
ThreatLabz State of Encrypted Attacks 2022 Report exposes hidden threats
Insights and Research
5 Min read

Spoiler: New ThreatLabz Report Reveals Over 85% of Attacks Are Encrypted

Once upon a time, encrypted traffic was considered the safe, secure option for browsing and doing business online. Going back nine years to December 2013, the Google Transparency Report shows just 48% of worldwide web traffic was encrypted. Flash forward to today, and the volume of encrypted web traffic tracked by Google is up to 95%. However, the ...
FreeBSD Ping Stack-Based Overflow Security Advisory
Insights and Research
4 Min read

Security Advisory for FreeBSD Ping Stack-Based Overflow CVE-2022-23093

Background On Dec 01, 2022, a stack overflow vulnerability CVE-2022-23093 was found in the FreeBSD operating system (all supported versions) ping utility. The issue is a buffer overflow vulnerability affecting the “pr_pack()” function in ping(8). The flaw can be leveraged to cause a stack overflow, which could lead to a crash or trigger remote ...
Attackers Target Indian Banking Customers Via SMS and Fake Apps
Insights and Research
6 Min read

SMS scams trick Indian banking customers into installing malicious apps

Zscaler ThreatLabz researchers recently observed the rise of a sophisticated phishing campaign spreading via fake banking sites targeting big Indian banks like HDFC, AXIS, and SBI. The team will continue monitoring the emerging situation and will provide an update on any significant new developments. Previously, ThreatLabz researchers observed Indi...
State of Zero Trust Transformation 2023
Insights and Research
4 Min read

What Japan and Germany have in common in terms of digital transformation

My first trip to Japan since the outbreak of the pandemic was an eye-opener: Germany and Japan are not that far apart when it comes to digital transformation. Culture and tradition play decisive roles in organizational change in both countries. In fact, culture forms the basis for initiating change. During my recent trip, I struck up conversatio...

Explore More Topics