Zscaler Cloud Security Logo
Company > Blog

News and views from the leading voice in secure digital transformation

Insights and Research
A state capital building
Insights and Research
4 Min read

Digital Acceleration Puts CIOs in the Driver’s Seat

A few weeks ago, we were pleased to be able to meet up with state CIOs in person at the 2021 National Association of State CIOs (NASCIO) Annual Conference. This was the first annual in-person gathering with our brethren in quite some time, which was well-attended and a great opportunity to touch base, share best practices, and discuss strategies fo...
A business handshake
Insights and Research
3 Min read

How to Enforce Least-Privileged Cloud Permissions and Stay Friends with Your DevOps Team

Modern organizations are keen on agility. This leads to fast adoption of public cloud, DevOps best practices like infrastructure as code, and a significant increase in the number of software releases and deployments. With the speed at which cloud applications are deployed, security teams often find it difficult to keep pace with DevOps teams. In...
Four people in a business meeting
Insights and Research
11 Min read

Do You Understand Your SLAs? A Guide to Demystifying Cloud Security SLAs

Why SLAs? Service level agreements (SLAs)—in the context of this blog—are a cloud security vendor’s expression of confidence in its ability to deliver a resilient, scalable, and high-performing service. SLAs became more common as SaaS solutions expanded in popularity, providing organizations assurances about their service levels, such as perfo...
Return of Emotet malware
Insights and Research
1 Min read

Return of Emotet malware

Key Points Emotet is one of the most dangerous, prolific, and long-lasting malware Trojans that has ever existed. In January 2021, a law enforcement action disrupted the Emotet malware and its infrastructure. It also led to the arrest of some of the threat actors involved with the malware. After almost a year-long hiatus, Emotet has retur...
A digital lock
Insights and Research
3 Min read

[email protected] Report: Remote Work Challenges Putting Data at Risk

From intellectual property to customer details, sensitive information is the lifeblood of any organization. Where data breaches occur, revenue, brand reputation, and stakeholder wellbeing suffer. As a result, enterprise data protection is a critical requirement for organizations to succeed. Naturally, this gives rise to a question: How well are org...
A hand approaching a digital lock
Insights and Research
8 Min read

Overcoming Sensitive Data Protection Challenges in AWS S3 Storage

AWS S3 buckets are the destination for much of the data moving to the cloud. This service, and similar services in other cloud providers such as Azure Storage Blobs, enable organizations of any size or industry to store large troves of data for websites, mobile applications, and whatever else the business requires. Many recent news articles hig...
map depicting outages
Insights and Research
4 Min read

Comcast Monday Blues: How We Stayed Productive During an ISP Outage

“Switch over to your smartphone hotspot if you have Comcast,” the Slack message said. It was 9:45 pm on Monday, November 8th. At first, it seemed like a childish prank, but it was coming from a legit source: our IT team. We were on a critical Zoom call, fine-tuning last-minute event details for the 'No Interruptions' product launch event schedul...
Deception Engineering
Insights and Research
7 Min read

Deception Engineering

Introduction One skill that the Zscaler Deception team has become really good at is analyzing adversary tactics, techniques, and toolsets and hypothesizing how we could disrupt the adversary playbook with deception. What we want to talk about today is a concept we like to internally call “Deception Engineering”. It’s a wordplay on Detect...
Cyber honeycomb containing locks.
Insights and Research
5 Min read

Spike in DanaBot Malware Activity

Key Points Two large software supply chain attacks distributed the DanaBot malware. DanaBot is a malware-as-a-service platform discovered in 2018 that focuses on credential theft and banking fraud. DanaBot’s popularity has waned in recent years, but these campaigns may signal a return of the malware and its affiliates to the threat landsc...
Server cords
Insights and Research
2 Min read

Cloud Connector and Cryptojacking

Cryptocurrency has been in the news quite a bit lately, and Bitcoin is currently the most popular cryptocurrency. Proponents of Bitcoin cite the distributed nature of the currency as one of its main advantages with no single entity exerting control over Bitcoin. To accomplish this, Bitcoin relies on a process called mining. Mining involves solving ...

Explore More Topics