<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>News &amp; Announcements | Blog</title>
        <link>https://www.zscaler.com/de/blogs/feeds/company-news</link>
        <description>Latest news and views from the leading voices in cloud security and secure digital transformation.</description>
        <lastBuildDate>Sat, 31 Oct 2026 21:48:59 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>RSS 2.0, JSON Feed 1.0, and Atom 1.0 generator for Node.js</generator>
        <language>de</language>
        <item>
            <title><![CDATA[Singapore’s Cybersecurity Strategy 2026: Building Resilience in the Age of AI]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/singapore-s-cybersecurity-strategy-2026-building-resilience-age-ai</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/singapore-s-cybersecurity-strategy-2026-building-resilience-age-ai</guid>
            <pubDate>Wed, 21 Oct 2026 17:00:00 GMT</pubDate>
            <description><![CDATA[Singapore International Cyber Week (SICW) has once again demonstrated why Singapore is a global leader in cybersecurity. From 12-15 October, ministers, senior officials, industry leaders and cybersecurity experts from across the globe convened for its 11th edition. The event also reflects the sustained commitment and execution of the Cyber Security Agency of Singapore (CSA), which has built SICW into one of the world’s most important cybersecurity gatherings. SICW 2026 was no exception.This year’s event also marked a changing of the guard. It was the first since David Koh’s departure as CSA’s founding Chief Executive, following more than a decade of leadership. His legacy is considerable, but the transition to Chief Executive Gwenda Fong’s leadership has been seamless, allowing for strategic consistency.That institutional continuity was on full display with the launch of&nbsp;Singapore’s Cybersecurity Strategy 2026 amidst a rapidly changing cyber landscape. As Senior Minister K Shanmugam emphasised in his opening address at SICW, Singapore must move towards more proactive cyber defence, acting earlier, at national scale and at the speed of emerging threats. AI increases urgency of Zero Trust shiftAI presents two distinct security challenges for organisations: protecting systems against increasingly capable AI-enabled attacks, and ensuring that AI systems themselves operate securely.The challenge of securing Singapore’s digital future was underscored by&nbsp;IMDA’s Singapore Digital Economy Report 2026, released on 5 October. It found nearly one in four businesses in Singapore adopted AI in 2025. Overall, Singapore’s digital economy reached S144.1 billion, reinforcing why secure-by-design architectures are now essential as AI adoption becomes core to economic growth.This is why the new strategy is right to focus on the need to strengthen upstream protection and reduce overall exposure to all cyber threats and consequences.Simply identifying and patching vulnerabilities faster will no longer be sufficient. Organisations must also systematically reduce the opportunities available to attackers in the first place and govern AI effectively and securely.That means removing unnecessary internet-facing exposure, limiting access to applications and data to only authorised users and agents, and preventing a compromise in one part of an organisation leading to access across all segments of technology and business processes.These are the fundamental principles of Zero Trust. Importantly, Singapore has already demonstrated what best practice looks like.Through GovTech’s&nbsp;Government Zero Trust Architecture (GovZTA), Singapore has established an approach to securing government systems that challenges traditional assumptions about network trust and places greater emphasis on controlling access and limiting the consequences of compromise.The opportunity now is to build on this experience and extend the architectural principles of Zero Trust to a greater extent into Singapore’s critical infrastructure and wider economy. Partnership and implementationZscaler was pleased to be formally acknowledged in Singapore’s Cybersecurity Strategy 2026. We were glad to contribute to its development through our engagement and partnership with CSA in the lead-up to its publication.Singapore’s willingness to bring government and industry together is one of its greatest strengths.The challenge now is implementation: translating the strategy’s ambitions into security architecture and capabilities that reduce exposure, contain compromise and strengthen resilience across government, critical infrastructure and the wider economy.There is also an important regional opportunity. As Singapore prepares to chair ASEAN in 2027, its experience with Zero Trust adoption and its new national strategy offer valuable lessons for governments across Southeast Asia seeking to accelerate their own digital transformation efforts securely.&nbsp;Zscaler is committed to supporting the implementation of Singapore’s Cybersecurity Strategy 2026. Advancing Zero Trust architecture, reducing exposure, containing compromise and enabling the secure adoption of AI will be central to strengthening Singapore’s cyber resilience.]]></description>
            <dc:creator>Adam Dobell (Head of Government Affairs, APJ)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The Hidden Cost of Friction: Why Factory Workers Experience IT Differently]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-hidden-cost-of-friction-why-factory-workers-experience-it-differently</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-hidden-cost-of-friction-why-factory-workers-experience-it-differently</guid>
            <pubDate>Wed, 14 Oct 2026 16:21:33 GMT</pubDate>
            <description><![CDATA[A few months ago, I was on-site at a large consumer goods manufacturer. I was there to explore how Zscaler technology could support their factory operations, the kind of day that starts in a meeting room and ends with a walkthrough of the factory floor. And it was on that walkthrough, shown around by one of their team, that something shifted my thinking.We were watching a maintenance technician at work. He was diagnosing a fault on a production line, moving between machinery, checking readings, speaking with colleagues, trying to pinpoint the source of an issue. Mid-flow, the tablet he was using logged him out. Inactivity timeout.He needed to sign back in. But this isn't a desk job. His hands were gloved, standard PPE on this part of the floor. He removed the glove, located the device, entered his credentials, re-gloved, and picked up where he left off. I watched it happen again twenty minutes later. And according to the person showing me around, this was entirely normal. Every day. Every shift.What struck me wasn't the timeout itself. It was the matter-of-factness of it. Nobody flagged it. Nobody complained. The worker just adapted and moved on. And that, I realised, was exactly the problem.Now, the security rationale behind that inconvenient timeout is completely reasonable. The organisation clearly doesn’t want an unattended device left logged in on a busy factory floor. They’ve put this simple security control in place to protect access, reduce the risk of an unauthorised breach, and ensure there is a level of accountability baked in if something does go wrong. From a governance perspective, everything is working exactly as intended. Great.&nbsp;However, there is a 'but'… the technician feels annoyed by the need to continuously sign in. With his attention split between equipment, people and processes, and with the clock ticking on an unresolved fault that could halt production, the pressure to keep moving is real. So he adapts. They all do.Some workers get into the habit of tapping the screen every few minutes to stop the session expiring. Others go further. Credentials get shared between colleagues so that whoever picks up the device next doesn't have to stop and re-authenticate. Devices get modified, lock screens disabled, auto-timeouts adjusted, because someone decided the control was getting in the way of the job. Workers reach for their personal devices instead of the issued device, because it's faster, easier, and already in their pocket. And in some cases, login details end up written on a label stuck to the back of the device itself, visible to anyone who picks it up.None of these are acts of malice. They're acts of pragmatism, driven by the very real pressure to resolve issues and keep the line moving. A stopped production line costs money by the minute, and no worker wants to be the reason it stopped. The security control is still nominally in place. But the protection it was designed to provide? That's gone. Frustration is present. But it rarely surfaces. Workers don't raise IT tickets about this. They don't escalate. They solve the problem in front of them and move on. And herein lies the problem.The Invisible TaxTechnology teams focus on security controls, compliance outcomes, audit readiness and on-target deployments. All important measures of success. The challenge is that these metrics don't reveal what the day-to-day experience of using that technology actually feels like.For staff on the ground, impact is measured by efficiency. Three seconds here. Ten seconds there. One extra login. One additional approval. One more interruption to a task. Viewed in isolation, these time drains are insignificant. But lump them together and you see a clear snowball effect of lost seconds rolling into minutes, repeated across shifts, sites and hundreds of workers. Production doesn't stop for repeated logins and logouts. Output targets still need to be met, so the line can keep moving. Time lost is business lost.&nbsp;The IT department and the factory floor are measuring different things: neither perspective is wrong. But this difference of opinion does create a disconnect between how tech teams&nbsp;believe work happens and how work&nbsp;really happens.&nbsp;Manufacturing organisations spend a lot of time preparing for outages, security incidents and operational disruption. Less attention tends to be paid to the small frustrations workers encounter every day, despite the fact that these hurdles can have a huge cumulative impact.&nbsp;The necessary shift leaders must now make is factoring in the cost of operational friction required to achieve security.What Good Actually Looks LikeLet’s get back to understanding which benefits workers actually value, and which goals shape the way they work. Output, quality and efficiency are core drivers, with reliability, simplicity, continuity and speed seen as valuable benefits of any technology.&nbsp;When technology supports factory-floor goals, adoption (in the way it was intended) becomes natural, fewer security workarounds emerge, productivity improves, and security itself becomes easier to sustain. In fact, the best manufacturing technology is the one that fits so naturally into the workflow that workers stop thinking about it altogether. It needn’t be technology that workers actively appreciate. It needs to be technology they barely notice.What does this mean for the people deploying the technology? Insight into their colleagues’ actual experiences using the technology for the first few months is a first-order priority. For example: how much extra effort does the technology require on the factory worker’s part? What workarounds are emerging, and why?The technology may very well be the most advanced on the market, but that won’t matter if its controls are designed around ideal operating conditions rather than operational reality. IT’s metric of success must evolve from the traditional “does this pass the security review” test to a place where they can answer this: “can a worker get through a 12-hour shift using this naturally without needing to think about it?”&nbsp;The strongest sign of success may be that workers stop noticing the technology is there at all. Because if people need workarounds to get their job done, the technology hasn't truly succeeded, no matter how successfully it was deployed.This blog is the third in a short series looking at how the security challenges facing manufacturing are converging. The first explored why distributed, cellular-connected environments are making it harder for organisations to maintain visibility and control at scale. The second examined how the speed of connected systems is outpacing organisations' ability to respond. This piece brings it to the human layer, because even the most technically sound security architecture will be quietly dismantled by the people it inconveniences, if their operational reality isn't designed for them.You can read the full series here:Part 1: From Air Gaps to Always Connected - The Uptime Challenge for SecurityPart 2: The Race to Production - Why Connectivity is Becoming a Competitive Risk]]></description>
            <dc:creator>Alex Fray (Innovation Lead)</dc:creator>
        </item>
        <item>
            <title><![CDATA[When Your Team Includes Non-Humans, Leadership Changes]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/when-your-team-includes-non-humans-leadership-changes</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/when-your-team-includes-non-humans-leadership-changes</guid>
            <pubDate>Thu, 01 Oct 2026 06:59:27 GMT</pubDate>
            <description><![CDATA[The question many are asking is what might more capable AI do? Recent conversations now frame AI in terms of agency, not just intelligence because there’s little to no doubt around the latter. Where the doubt creeps in, particularly in an enterprise setting, is the loss of control when autonomous actors begin exploring beyond current guardrails.&nbsp;So, I’d say, the better question is what must leaders do differently? Let’s put aside conjecture on what AI might become. The more immediate challenge is deciding what leadership must become when non-human actors participate in decision-making at work.Managing the unmanageableBefore agentic arrived on the scene, the human-AI workplace relationship was much simpler and more predictable. We made the decisions, generative models carried out our instructions. But agents introduce initiative: they can trigger workflows and influence outcomes.&nbsp;The fact is we’re introducing a level of unpredictability in enterprise ecosystems built for predictability. We've imbued this technology with the non-deterministic attributes of a human and given it enormous, unprecedented reach, knowing full well that it can act very quickly. All of this power and freedom means we don't have full visibility into where our agentic systems are embedded and what they can do, when they could break away from our guardrails, and how far they could go when they do. In other words,&nbsp;agentic makes risk much harder to judge:&nbsp;the impact has become unbounded and the probability is less certain (not that it was all that certain to begin with). This new dynamic should change the way we think about and manage risk.The problem is that authority appears to be easier to assign than accountability. One deployed agent may find the need to interact with another agent that is already interacting with a third agent. When a decision is made and an outcome produced, there’s no clear way to answer a few of the most foundational questions: Who requested the task? Who approved the decision? Who authorized the follow-on action? Who owns the outcome?The issue isn't that the agent, in finding the most efficient pathway to meet its goal, made a bad decision. It’s the fact that when responsibility becomes distributed, verifying chains of authenticity becomes complicated and accountability becomes blurred. And, if accountability becomes harder to establish, leaders will need a more precise way to govern what humans and agents are allowed to do.&nbsp;Define before delegateAuthentication asks whether a human or machine is who it claims to be. Authorization asks a more pertinent question in the agentic age: what is this user, agent or human, allowed to do? Control needs to become less about letting a trusted identity through the door and more about continuously limiting the actions that each human, machine or agent is permitted to take. Further, the more fine-grained and specific authorization is, the better. And if there’s one thing we’re seeing from the reaction to and analysis of the Hugging Face incident, it’s that we need to far better understand the individual and collective behavior of agents. With insight into agents’ incentives, their motivations and their use of resources in even the simplest of environments, we’ll be in a better position to judge what they&nbsp;should&nbsp;be allowed to do.Too many organizations begin their AI journey asking which models they should deploy. They really should focus on the outcomes they want, enterprise culture and, most importantly, which decisions they are comfortable delegating as these models become more and more autonomous in their actions. Understanding this also gives insight into the privileges and scope the enterprise is&nbsp;unwilling to delegate: these are the rules for agentic engagement. And, you’ll notice, it’s a business decision that should happen&nbsp;before the technology deployment.&nbsp;More than that, it’s a strategic choice. Two companies can deploy the exact same model, with the same technical security controls in place, but roll out entirely different governance decisions. These decisions will be uniquely shaped around their risk appetite, commercial priorities and objectives. For example, consider how the same Data Loss Protection (DLP) control would be managed by a defense contractor versus a law firm. The contractor would block access to plans for a weapons system at all costs; the law firm simply wants to monitor and manage the flow of information. Same control, different governance policy. Why? Because if a defense counterpart across enemy lines can build the same jet, you’re talking about a threat to national security, but if a peer law firm steals your data, you can take legal action to stop it from being used. The difference in DLP governance is outcome-driven and cultural: shaped by attitudes to acceptable risk and control.The future may well see non-human contributors become a normal part of the workforce. But the real leadership challenge isn't deciding whether to work alongside agents. It's deciding where authority ends, where accountability begins, and how those boundaries are maintained as humans and agents increasingly work more seamlessly together.&nbsp;Leadership's job now is not simply to govern technology. It's to ensure predictability, accountability and responsibility remains clear, even when the workforce is no longer entirely human.Agentic AI is both a risk to manage and a force to harness. For enterprise guidance on reducing the risks and reaping the rewards, including a deployment checklist and agent performance framework -&nbsp;read the white paper.&nbsp;]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Joins the Blueprint Alliance to Help Secure the Agentic Enterprise]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-joins-blueprint-alliance-help-secure-agentic-enterprise</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-joins-blueprint-alliance-help-secure-agentic-enterprise</guid>
            <pubDate>Tue, 22 Sep 2026 12:05:31 GMT</pubDate>
            <description><![CDATA[The tectonic shift toward enterprise AI adoption is happening, and it’s happening fast. According to the&nbsp;Zscaler ThreatLabz 2026 AI Security Report, enterprise AI and ML transactions skyrocketed by 83% year-over-year. AI is no longer a nice-to-have tool. It is a persistent operating layer.As part of broader enterprise adoption trends, AI agents are moving quickly from experimentation to real-world deployments. Unlike traditional software, agents can reason, execute multi-step plans, call APIs, and take action across technology environments. That potential creates significant opportunity, but it also introduces a new governance challenge for organizations.The harsh reality is that cybersecurity teams are simply underprepared. Earlier this year, the Zscaler ThreatLabz red team conducted realistic adversarial testing on enterprise AI deployments. Every single enterprise AI system that was tested failed at least once under realistic adversarial pressure, with those failures surfacing quickly.Introducing the Blueprint AllianceCustomers need proactive guidance on how to adapt their technology stacks for the agentic era. But securing AI agents cannot be addressed by a single control point or a single vendor. It requires connected capabilities across identity, data, applications, cloud infrastructure, networks, endpoints, and security operations.That is why&nbsp;Zscaler is proud to join the Blueprint Alliance as a founding member.The&nbsp;Blueprint Alliance is a cross-industry coalition advancing an open, multi-vendor reference architecture to secure and govern AI agents at enterprise scale. It helps organizations implement a zero-trust, agentic control plane so they can continue to scale their AI deployments. AI agent security is an ecosystem challengeAI agents work across the enterprise stack. They may inherit human or agent identities and permissions, interact with cloud infrastructure, retrieve sensitive data, connect to SaaS apps and APIs, or operate through endpoints and networks. They can also act asynchronously, potentially continuing work after the human who initiated a task has logged off.&nbsp;This changes what customers need from their security and technology providers. Organizations need an integrated approach that can help them:Treat every agent as a first-class identityScope access to the task rather than granting standing accessKeep delegation traceableMonitor runtime behavior continuouslyEnable containment that’s instant and reversibleEnsure governance adapts at the speed AI movesGuided by these principles, the Blueprint Alliance aligned on a common framework for helping organizations answer four foundational questions:Where are my agents?What can they do?What are they doing?How do I respond?&nbsp;Let’s take a closer look at these foundational questions, including a sample of specific activities and capabilities security teams should consider to address each.&nbsp; 1. Where are my agents? (discovery and visibility)&nbsp;As the adage goes, you can’t protect what you can’t see. The first step toward securing agents and other AI tools or apps is to identify and assess every AI-related interaction traversing the corporate infrastructure—whether sanctioned or unapproved.&nbsp;&nbsp;&nbsp;You must continuously scan and discover all AI integrations, APIs, and automated agents running in both development and production. This includes the ability to map out all connected dependencies such as LLMs, MCP servers, software libraries, data flows, and how the agents are imported into the enterprise environment.&nbsp;Once discovered, agents should be classified and audited according to their use. Are they employee-facing—deployed to automate internal workflows—or are they external-facing, designed to execute supply chain transactions or help deliver end-customer services?&nbsp;Identifying which components your agents are connecting to and classifying their use gives security teams an up-to-date, centralized inventory. Being able to see every AI asset and trace its lineage in a single view will help your organization proactively assess and mitigate risk while protecting future AI deployments.&nbsp; 2. What can they do? (connection and blast radius)Once you find and classify AI agents, you have to define their boundaries. In a world where AI agents are rapidly becoming the new “users” on your networks, the core philosophy of zero trust security remains the same: never trust, always verify.&nbsp;Don’t grant agents broad access to the network and other enterprise systems. Instead, set and enforce adaptive, context-aware policies that dictate exactly which data repositories, APIs, microservices, or cloud resources an agent is allowed to interact with.&nbsp;Policies can range from broader, role-based controls that define the high-level environments an agent can subscribe to; to network-based segmentation that restricts the flow of agentic traffic; to guardrails that prevent non-compliant actions or block suspected risky behavior.&nbsp;Setting policies that specify what an agent is allowed to read, write, or execute provides a baseline for compliance and a continuous oversight loop that can scale at the velocity today’s AI initiatives often require.&nbsp; 3. What are they doing? (runtime authorization and control)Boundaries aren’t effective if you are blind to the actual content of an agentic transaction. You must be able to monitor, assess, and authorize agent actions to prevent misuse, malicious behavior, and sensitive data leaks.This level of inspection must be done inline, directly in the execution path. Here, AI gateways can serve as the runtime control plane—governing access and providing context based on the requested actions.&nbsp;For example, an agent attempts to retrieve and send software source code or a customer’s personally identifiable information (PII) to a non-approved external resource. The gateway can scan the prompt and strip any intellectual property before reaching the destination, or block the request entirely. In essence, your data governance policy is enforced in transit, not after an event has occurred.&nbsp;In addition, continuous monitoring and logging of all agent telemetry and event data can fortify inline threat defenses. This includes detecting unusual spikes in data requests or high volumes of calls to an internal API that an agent rarely touches.&nbsp;Being able to see, route, secure, and govern every AI transaction from a central control plane helps you apply zero trust to every model, agent, and API call in real time. 4. How do I respond? (active containment)The final pillar transforms telemetry and risky behavior into automated responses for faster containment and remediation. Here, AI guardrails address vulnerabilities by providing an active checkpoint on every agent interaction—blocking malicious threats and moderating content to filter out toxic or unauthorized use of data.&nbsp;For example, bad actors are increasingly using prompt injection techniques that cause AI agents to behave differently than intended. AI guardrails can help detect and mitigate prompt injection patterns, flagging suspicious instructions. Additionally, the guardrails can analyze the semantic meaning of both the input prompt and the returned response to validate that the agent’s output matches its expected behavior before the data reaches its target destination.&nbsp;It’s worth mentioning that having precise guardrails in place is often favorable to broad-based blocking.&nbsp;While overall blocking declined year-over-year—suggesting progress toward more policy-driven AI governance—enterprises still blocked 39% of all AI/ML access attempts in 2025.Instead, security teams can instantly isolate a compromised agent, revoke its specific access token, sandbox or quarantine it, or block its connection to a targeted application—and then safely restore it once the threat is mitigated. These more surgical mechanisms promote safer use of agents, deter users from seeking unapproved alternatives, and&nbsp;provide IT with a full trace for auditing and compliance.&nbsp;&nbsp;&nbsp; What Zscaler brings to the Blueprint AllianceAt Zscaler, we help customers safely embrace AI by providing a unified, comprehensive set of solutions to see every asset and secure every connection in the path of AI.&nbsp;We deliver many of the core capabilities outlined above through our&nbsp;AI Security solution suite, including:&nbsp;AI Asset Management:&nbsp;Maintain an up-to-date, comprehensive inventory of AI apps, models, infrastructure, and agents to detect shadow AI, understand what data AI touches, and assess risk with a 360-degree view into AI usage.&nbsp;Secure Access to AI:&nbsp;Govern access and content across popular GenAI apps, embedded AI in SaaS apps, agents, LLMs, and developer tools with user-based controls, prompt classification, inline inspection, and content moderation to reduce data loss and misuse while preserving productivity.&nbsp;&nbsp;Secure AI Apps and Infrastructure:&nbsp;Protect AI development across the lifecycle with automated AI red teaming, prompt hardening, runtime guardrails, and continuous risk posture assessments from build to runtime.Looking ahead to secure the agentic AI eraThe agentic era is here, and secure adoption will require industry-wide collaboration. As a founding member of the Blueprint Alliance, we will bring our expertise in zero trust security to help customers build a more connected and governed approach to agentic AI.&nbsp;We will also explore opportunities for deeper interoperability with our technology partners and fellow Blueprint Alliance members by building and testing cross-vendor signal sharing across open standards, as well as contributing to joint reference patterns and integrations.For customers, this means a stronger foundation for adopting AI agents with confidence, combining the capabilities they need across their existing technology ecosystem rather than managing AI governance through disconnected point products.Ready to learn more?&nbsp;Visit the Blueprint Alliance web page and download the Blueprint for the Secure Agentic Enterprise at&nbsp;blueprintalliance.ai.]]></description>
            <dc:creator>Mason Coffman (Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The Race to Production: Why Connectivity Is Becoming a Competitive Advantage]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-race-to-production-why-connectivity-is-becoming-a-competitive-advantage</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-race-to-production-why-connectivity-is-becoming-a-competitive-advantage</guid>
            <pubDate>Fri, 18 Sep 2026 09:39:12 GMT</pubDate>
            <description><![CDATA[Every manufacturer understands the cost of downtime. It’s why so many conversations revolve around resilience. But a new problem is beginning to surface: how quickly you can get a site operational in the first place, because delay before production even starts can be just as costly.&nbsp;If it’s all about speed, then you might point out that time to production is something manufacturers have always cared about. And you’d be right, of course. What’s new is that the pressure isn't simply to produce faster. It's to become operational faster.&nbsp;Manufacturers need to be able to open factories, warehouses and distribution operations wherever demand, supply chains or growth opportunities take them. This capability directly determines how fast revenue starts flowing.The bottleneck nobody planned forIf site-deployment speed is now a competitive advantage, what role does connectivity play? The answer is simple: connectivity is either the bottleneck or the enabler.Until recently, standing up a new site meant waiting for connectivity as part of the process. I've seen situations where a factory is ready to start producing, but terminating and procuring and shipping network equipment took far longer than they had planned for.&nbsp;And this problem is only going to intensify. Deployment environments are growing more complex and more demanding. Supply chains are more distributed, operations span more geographies, and sites are being opened in locations where connectivity isn't always straightforward to provision.Agility is everything when the goal is to meet demand faster than the competition can. This is why manufacturers can’t put their sole focus on running long-established facilities anymore. Now, they need to consider standing up seasonal factories and temporary warehousing to respond to the market, for example supply-chain changes, as they happen.&nbsp;The shift some leaders are still missingWhen you’re chasing a strategic opportunity in a new market, it’s a real business differentiator to be able to stand up operations quickly. I saw this agility in action working with one of our customers, a global paints-and-coatings manufacturer.&nbsp;They were setting up a new factory in Morocco when their networking equipment got held up in customs. Not for days...for weeks. Potentially months. For most businesses, that's a delay you absorb and wait out. For this manufacturer, every day the factory sat dark was revenue they weren't generating, inventory that wouldn't be available, warehouse operations that couldn't start, and distribution that couldn't move. The cost wasn't technical. It was commercial, and it compounded every single day. So they didn't wait.For the in-limbo Moroccan factory, the fastest solution was a cellular-first deployment model. Using available smartphones, tablets and hand scanners on site, we were able to issue eSIMs to the devices to provide secure cellular connectivity to their cloud-based MES and ERP systems to stand up operations. They stood up a factory without a single piece of traditional connectivity infrastructure and the ROI was immediate.The most interesting part of this example isn't the technology itself, as cool as it is. The interesting part is that the manufacturer started treating connectivity as a business accelerator rather than another IT project; a business capability versus just an infrastructure cost and requirement. This is what sets them apart.Organisations that rethink connectivity today won't just gain an advantage. They'll define what the industry looks like tomorrow. If you're rethinking what connectivity means for your next site launch,&nbsp;explore how Zero Trust Branch and&nbsp;Zscaler Cellular are&nbsp;helping manufacturers stand up secure operations in hours, not months.]]></description>
            <dc:creator>Alex Fray (Innovation Lead)</dc:creator>
        </item>
        <item>
            <title><![CDATA[AI is Raising the Stakes for the SOC–Here’s What Comes Next]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/ai-raising-stakes-soc-here-s-what-comes-next</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/ai-raising-stakes-soc-here-s-what-comes-next</guid>
            <pubDate>Wed, 09 Sep 2026 10:12:33 GMT</pubDate>
            <description><![CDATA[Security operations has always been overloaded with too many alerts, too many tools, and too little context. The traditional SOC model has focused on endpoint alerts and manual SIEM queries, fed by siloed tools and forcing human correlation and triage at nearly every step. High SIEM ingest costs limit the data organizations can afford to collect and retain, and many of today’s attacks are designed to evade the very controls legacy SOCs depend on.As a result, SOCs are challenged with:Limited scopeOperational complexitySlow response timesAI didn’t create these problems, but it has made solving them far more urgent, by expanding the attack surface and accelerating how attackers do recon, exploit gaps, and adapt in real time. Incremental improvements will not be enough; the SOC needs a new foundation.That foundation is Zscaler Agentic SecOps,&nbsp;launching today. Built to help security teams see, reduce, detect, respond, and remediate at machine speed.Everyone is pitching AI. The market is already overcrowded with agentic SOC providers. So why Zscaler? It comes down to four advantages:A single platform that unifies exposure management and threat responseUnmatched inline telemetry across 750 billion daily transactions – providing network, cloud, endpoint, identity, and AI insightsSpecialized AI agents trained on decades of frontline SOC, MDR, and threat hunting experienceClosed-loop inline remediation that contains threats at machine speedPut simply, Zscaler Agentic SecOps is not AI layered onto a broken workflow. It is a new operational foundation for the modern SOC.&nbsp; What Zscaler Agentic SecOps Means for YouThe impact of Zscaler Agentic SecOps is straightforward: less noise, less manual work, faster decisions, and faster containment.Instead of forcing teams to swivel between siloed tools and stitch together fragmented signals, we bring exposure data, threat detections, investigation context, and response actions into one operational flow. Exposure and threat teams can see what matters sooner, understand it faster, and act with greater confidence.The outcome is a more effective SOC. Analysts spend less time triaging ambiguous alerts and more time focusing on confirmed risk. Security leaders gain broader visibility across endpoint, identity, cloud, SaaS, and AI activity without relying on incomplete, high-cost data pipelines. Organizations can respond to threats in real time, using automated, human-guided, or hybrid actions that help contain incidents before they spread. Faster response, lower risk, without growing headcount. Zscaler Agentic SecOps – Architected for Modern ThreatsZscaler Agentic SecOps unifies proactive exposure management, advanced detections, AI-powered investigation and response, and adaptive remediation in a single platform. This holistic approach gives security teams faster, more accurate analysis and response to active threats.Just as with zero trust, architecture matters, and Zscaler has built our Agentic SecOps from the ground up to meet the moment, with an architecture that:Unifies your data: We combine Zscaler and third-party insights to assess risk more accurately. Zscaler sees 750 billion daily transactions across network, identity, endpoint, cloud, and AI activity. Because Zscaler operates inline on live traffic, it can observe threats as they happen—not just reconstruct them after the fact. We enrich that real-time visibility with critical third-party telemetry and context across identities, assets, exposures, and alerts.Applies advanced detections: We surface the threats that matter most with 7,500+ tuned analytics cultivated over a decade of ThreatLabz research and Red Canary MDR expertise. And we’re not sending you false alarms – we have validated those detections at 99.6% accuracy.Creates a security context graph: We use our Data Fabric for Security to harmonize, deduplicate, correlate, and enrich that data, creating the entity relationships that enable us to separate real risk from noise.Activates specialized AI agents: We automate triage, investigation, verdicts, and remediation. But remember: AI is very much a garbage in/garbage out exercise – strong outcomes depend on good inputs. By operating on clean, harmonized data from the context graph, our agentic workflows deliver better results. Plus, our specialized agents have been trained and continuously tuned on more than a decade of frontline SOC, MDR, and threat hunting experience.Delivers clear insights in our exposure and threat management solutions: We connect what is risky, what is happening, and what action should come next. Security teams can prioritize exposures before they are exploited; detect threats across endpoint, identity, cloud, and AI environments; investigate with richer context; and respond through automated, human-triggered, or hybrid workflows. Our expert threat hunting and MDR services enable our customers to scale their SOC, with expert human assistance steeped in a decade of finding threats in Zscaler and third-party telemetry.&nbsp;Closes the loop: To ultimately reduce risk, integrations with Zscaler and third-party inline controls drive automatic or human-assisted responses, appropriate to the level of risk. We can quarantine files, restrict access, isolate browser sessions, block traffic, and take other nuanced steps to contain threats in real time.&nbsp; Our SecOps SolutionsModern security operations teams are being asked to defend a faster, broader, more complex attack surface with workflows that were already under strain before AI. Zscaler SecOps solutions are built to change that, bringing proactive and reactive security capabilities together into a unified approach that helps teams reduce risk, detect threats with greater precision, and respond faster.&nbsp;The Zscaler&nbsp;Agentic SOC sits at the heart of our solution, correlating insights and unifying the response. It shifts the SOC from endless alert analysis to decisive action, helping analysts focus, analyze faster, and respond with greater confidence.&nbsp;Zscaler&nbsp;Exposure Management helps security teams get ahead of risks before they can turn into incidents that need a response. By contextualizing and prioritizing exposures – and automating remediation workflows – we help customers reduce their attack surface in a way that scales. As AI gets better at identifying security gaps, the volume of exposures will rise faster than any team can manage with spreadsheet-driven processes. Exposure Management is how organizations stay ahead of that curve instead of constantly reacting to it.Deception&nbsp;adds another critical layer: fast, lightweight defense designed to catch attackers early and especially tuned to find and contain AI attacks. Our decoys create a blanket of tripwires across your environment, detecting adversaries as they move and engage before they can do real damage. Deception turns the speed and parallelism of AI attacks against the adversary.Threat Hunting brings in the power of deep operational expertise. Our team has been hunting threats in Zscaler traffic for years, enabling them to identify suspicious patterns and attacker behavior that generic tools often miss. Threat Hunting is especially valuable for finding adversaries who have already slipped past your preventive controls and are trying to move quietly through your environment.MDR extends that advantage around the clock with 24x7 detection and response coverage, backed by the advanced detection library Red Canary built over more than a decade on the front lines. What differentiates our MDR is not just the analysts or the detections – it’s the data and control behind them. Our teams work across Zscaler first-party telemetry and third-party systems to pull together network, endpoint, identity, and cloud insights, with the added ability to invoke inline enforcement controls when action is needed. The result is faster detection, fewer false positives, and a much stronger ability to actually contain threats, not just identify them. It’s also a powerful way for organizations to scale their SOC without having to add headcount at the same pace. How Can Zscaler Modernize your SecOps?The threat landscape has changed in a fundamental way. Security operations must change with it.With Zscaler Agentic SecOps, and especially with the launch of Agentic SOC, Zscaler is helping organizations make that shift: from fragmented workflows to integrated operations, from reactive investigation to proactive risk reduction, and from human-speed triage to machine-speed defense backed by elite frontline expertise.Our unique combination of real-time telemetry, high-fidelity detections, operationally trained agents, and integrated response is what sets Zscaler apart. The goal is not just a faster SOC. It is a more certain one.We invite you to learn more at our Agentic SecOps&nbsp;launch event. Our keynote features insights from the front lines of threat intel, industry analysts, and our product leaders, along with highlights of our Agentic SOC solution. Breakout sessions provide a closer look at all our SecOps capabilities, showing how easily you can prioritize your exposures, find and stop AI attacks, tap our advanced detections, leverage our expert assistance, and put our Agentic SOC capabilities to use in your organization.Wherever you are in your SecOps journey, we’re here to help you reach that next level of defense.]]></description>
            <dc:creator>Michelle McLean (Sr. Director, Product Marketing)</dc:creator>
        </item>
        <item>
            <title><![CDATA[No Contradiction Here: Frontier AI Requires More Digital Sovereignty, Not Less]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/no-contradiction-here-frontier-ai-requires-more-digital-sovereignty-not-less</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/no-contradiction-here-frontier-ai-requires-more-digital-sovereignty-not-less</guid>
            <pubDate>Mon, 24 Aug 2026 14:57:40 GMT</pubDate>
            <description><![CDATA[The rise of frontier AI and the push for digital sovereignty are often treated as separate agendas. They are not. Let’s be crystal clear: the rapid emergence of powerful AI models makes the case for digital sovereignty more urgent, not less. In Europe and around the world, frontier AI should accelerate the operationalization of digital sovereignty.How Frontier AI Played into the Tech-Dependency discussionIn April and May 2026, frontier AI models Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5-Cyber raised serious concerns in the cybersecurity community and among those responsible for enterprise security. While demonstrating the potential of embedding AI into defensive workflows, these models also expanded the attack surface and made clear that organizations and governments will soon face unprecedented and sophisticated attacks when these new capabilities are used by malign actors. Other frontier AI models will soon offer similar capabilities, making this a systemic challenge. For policymakers, that is not only a cybersecurity challenge, but a strategic one: it raises urgent questions about resilience, control, and digital sovereignty.Mythos and GPT-5.5-Cyber represent something fundamentally different from previous models. They can reason across attack paths, weigh exploitability, and generate security-relevant workflows. While malign intent may not have changed, the capabilities, speed, scale, and sophistication of attacks have increased, while the expertise required to deploy them has fallen. In Europe, the arrival of these frontier AI models was felt in two ways: first, as an inflection point in ensuring access to advanced cybersecurity capabilities needed to retain resilience; and second, as yet another reminder of Europe’s dependence on non-European technology providers. Both points were underscored in the European Parliament’s letter to Executive Vice-President Henna Virkkunen [here].Our colleague, Deepen Desai, wrote in a recent blog [here]: “The question isn't whether these models will impact your security posture; it's whether your team will harness them faster than your attackers.” In Europe, that question is not only about how quickly organizations can embed these tools into their defensive workflows, but also about how to ensure trusted access to them on terms that strengthen resilience, accountability, and strategic control.Why AI Is Also a Sovereignty IssueOn June 12, 2026, the U.S. administration imposed export controls suspending foreign access to Anthropic’s most advanced models, Claude Mythos 5 and Claude Fable 5, citing national security concerns. The controls were lifted later that month, and access was restored on July 1, 2026. The episode itself was brief. What it revealed was not: frontier AI is now being treated as a strategic asset, subject to the same instincts that have long governed semiconductors, satellites, and encryption. Those with access will be best positioned to shape, secure, and benefit from the next generation of cyber capabilities.&nbsp;That message was reinforced by a June 22 Five Eyes intelligence partners’ cyber agencies joint statement that was unusual in its directness: frontier AI models are advancing faster than public expectations, and the resulting shift in offensive and defensive cyber capability is now measured in months, not years. Their advice was strikingly unglamorous: patch faster, reduce unnecessary internet exposure, fix identity and access weaknesses, and put AI to work on defense before adversaries put it to work on offense.Europe’s Response Is Becoming OperationalAt roughly the same moment, after years of increasingly urgent debate, Europe took a significant step toward defining what technological sovereignty means in practice. Driven by geopolitical tensions and growing concern over access to critical digital capabilities on terms Europe does not fully control, the European Commission published its Tech Sovereignty Package on June 3, 2026, with the proposed Cloud and AI Development Act (CADA) at its center.CADA seeks to turn Europe’s ambition for digital sovereignty into a practical framework against which organizations can assess providers, make procurement decisions, and hold vendors accountable. It would expand EU data-center capacity, encourage public-sector buyers to consider “Union added value” alongside price, and introduce four EU-wide sovereignty assurance levels covering data location, cybersecurity, operational control, supply-chain transparency, ownership, and personnel. Importantly, the framework recognises that sovereignty is not determined solely by where a provider is headquartered: non-EU companies may still support sensitive workloads where they can demonstrate sufficient independence, transparency, and control. For public and private entities, this should bring greater clarity when selecting technologies and matching workloads to the appropriate level of assurance. For technology providers, it raises the bar from making broad sovereignty claims to demonstrating that their products and operations can deliver sovereignty in practice.AI Changes the Cyber and Sovereignty EquationAs frontier AI models make attacks faster, more adaptive, and harder to catch, the conversations about sovereignty and resilience start to converge. Frontier AI is compressing the timeline across every stage of the cyber lifecycle at once: vulnerability discovery, exploit development, and defensive response are all accelerating together. This points to a structural shift that challenges assumptions security teams have relied on for two decades: that patch cycles measured in weeks are adequate, that legacy systems can be triaged rather than replaced, and that obscurity can still function as a form of defense.This also helps explain why European policymakers are increasingly framing frontier AI as a question of resilience, competitiveness, and strategic dependency. Members of the European Parliament have openly asked whether Europe’s limited access to frontier AI capability is itself becoming a security vulnerability. The Commission’s AI Cyber Action Plan reflects that shift in emphasis, focusing on strengthening Europe’s cyber resilience, improving trusted access to advanced AI for defenders, and reducing strategic dependencies in ways consistent with European security and sovereignty objectives.Cybersecurity is no longer just a niche policy area among many. It is becoming one of the defining enablers, or constraints, of Europe’s technological ambitions and, as the Draghi report made clear, a key condition for growth, job creation, competitiveness, and Europe’s ability to shape global developments. For organizations, that means preparing now for the cyber effects of frontier AI before these capabilities fall into adversaries’ hands. And recognizing that without cybersecurity, digital sovereignty is impossible.The Five Cs of Digital SovereigntyAs a US headquartered technology company it's not our place to decide how Europe should handle that challenge. It's Europe's call to make, and it's a legitimate one - also in the current geopolitical environment. What we can do is build for it. At Zscaler, we think about digital sovereignty through five practical principles that define what sovereignty should mean in operational terms. For us, sovereignty is fundamentally about choice, control, continuity, collaboration, and compliance. Together, these principles provide a way to understand sovereignty as an operational capability rather than a marketing slogan or political rhetoric. As a technology provider, we are prepared to be judged by how effectively our products deliver against them:Choice: provides organizations the flexibility to select and switch providers without prohibitive cost, vendor lock-in, or interoperability barriers.Control: ensures organizations remain in charge of their data, policies, and encryption keys, including when AI systems are making decisions on their behalf.Continuity: supports resilience through disruption, whether from a cyberattack, a regulatory shift, or an export-control decision.Collaboration: enables localized offerings through partnerships with trusted local providers.Compliance: reflects the legitimate and evolving regulatory expectations of the jurisdictions in which organizations operate.Architecture MattersBuilding on this 5C approach, architecture becomes critical. Many of the technical properties CADA asks organizations to demonstrate — continuous control, strong identity, operational resilience, supply-chain transparency, and reduced structural dependency — are precisely the properties modern Zero Trust architectures were designed to deliver.We are already seeing this shift emerge in how enterprises are architecting for the agentic AI era. AI agents challenge most of the assumptions on which legacy security models were built: known human identities, predictable access patterns, and static directories. An agent can hold valid credentials and operate entirely within its authorized scope, yet still pose serious risk if it is over-permissioned, loosely governed, or invisible to the security stack.&nbsp;Zscaler starts from a different premise: if you’re reachable, you’re breachable. In an AI-driven threat environment the true strategic advantage lies in reducing exposure by hiding applications from the internet, eliminating lateral movement, and replacing implicit trust with direct, policy-based connections. In our view, resilience and sovereignty depend not just on where systems are hosted, but on making them materially harder to reach and exploit.This is the logic behind extending the Zscaler Zero Trust Exchange - a platform that already brokers more than 750 billion transactions daily - into a dedicated architecture for frontier AI models and agentic AI. Defenders now have the chance to improve speed, precision, and scalability in ways that were difficult to achieve through human effort alone, but adversaries will pursue the same advantages creating unprecedented threats. In this next phase, leadership will depend on combining frontier AI with strong architecture, trusted context, and disciplined enforcement. In our view, this is the point at which frontier cyber capabilities, Zero Trust, and digital sovereignty begin to converge.Zscaler’s European CommitmentEurope now has a genuine opportunity to shape a model of technology sovereignty that strengthens resilience while remaining open to innovation and trusted international partnerships. The Commission has been explicit that sovereignty should not mean isolation or decoupling, and getting that balance right will matter for more than competitiveness. It may also determine how well Europe navigates the next era of AI-driven cyber risk, at a moment when European governments and the Five Eyes alliance are warning, in unusually blunt terms, that AI is increasing both the likelihood and the potential impact of damaging cyberattacks.In line with our 5C framework, we also recognize the need to adapt and align with Europe’s sovereignty priorities and that collaboration will be essential. That is why we recently announced a strategic partnership with Schwarz Digits, the IT and digital division of Schwarz Group&nbsp;[here] combining Zscaler’s Zero Trust Exchange platform with STACKIT, Schwarz Digits’ European sovereign cloud, the partnership creates a sovereign Zero Trust secure access service edge (SASE) service designed to counter AI-driven threats and strengthen cyber resilience. The service will be hosted in STACKIT-operated data centers. More importantly, the partnership reflects a practical commitment to Europe at a time when the tech sovereignty package is beginning to take shape. Together, we will help customers reduce their attack surface and limit lateral movement while supporting compliance with European legislation through EU data residency. The goal is straightforward: to deliver strong security in a way that is fully aligned with Europe’s sovereignty expectations.The world has become more challenging and less predictable, and cybersecurity has become an increasingly critical and complex domain to navigate. Meeting that challenge requires policymakers, regulators, and technology providers to work closely together to defend organisations, institutions and in many ways the societies and values they were built upon. Europe is, rightly, demanding greater control over its own digital destiny. For the technology industry, that means adapting, aligning, and delivering through the design of our technologies and products. For every organisation, it means making deliberate choices about the architecture it relies on to strengthen both resilience and digital sovereignty. At Zscaler, we will continue to innovate on a foundation that was architected from day one to be digitally sovereign&nbsp;by default.Adam Geller is Chief Product Officer &amp; Casper Klynge is VP &amp; Head of Government Partnerships &amp; Public Policy EMEA.]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zero Trust can’t stop at a claim. You need to prove it.]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zero-trust-can-not-stop-at-a-claim-you-need-to-prove-it</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zero-trust-can-not-stop-at-a-claim-you-need-to-prove-it</guid>
            <pubDate>Thu, 20 Aug 2026 13:09:20 GMT</pubDate>
            <description><![CDATA[A senior executive at a large international bank in London told me recently that AI wasn’t a risk to his firm. His people weren’t allowed to use it, it was against policy, and as far as he was concerned that closed the conversation. It didn’t. A policy describes what a company intends. It says nothing about what people&nbsp;actually&nbsp;do. In a firm full of capable people working against deadlines, the chance that not one of them had quietly opened an AI tool was close to zero. He was describing a control he had never tested. He’d mistaken a rule for a fact.That mistake is everywhere right now, and it reaches well past shadow AI. Most organizations can describe their security in exhaustive detail. Far fewer can show that it holds when something goes wrong. The distance between those two things is where leaders must turn their attention.Available is not the same as resilientThe costliest version of that mistake is quiet and almost universal: many leaders treat “the service is up” as proof that the service is resilient. This isn’t always the case. Well, at least for services that haven’t been stress-tested. A system that stays available only because no one has seriously come after it yet isn’t resilient, it’s an incident waiting for a start date. Resilience is what’s left when something does go wrong but your customers don’t feel the impact. Can the service take a hit, keep running or recover fast, and can you show that it has? Uptime isn’t that. Uptime is just the good weather you’ve had so far.Regulators need proof, not paperworkRisk isn’t new. What’s new is that regulators expect you to prove you can manage it, not just assert that you can. DORA entered into force in 2023, but the compliance deadline only landed in January 2025, and the technical standards underneath it have kept raising the bar since. The requirement is blunt: don’t describe your controls; show that they hold when a real threat scenario hits.DORA asks you to test secured services, govern them, measure how well the security held up, and show you’ve improved over time. That moves the question from “what is our control model?” to a much harder one: “can you show that your critical services stay operational under stress?”, and that accountability rests with the C-suite, not the security team.What proof actually looks likeBeyond the policy binder and tooling inventory is where we find our proof: knowing how a service behaves when something breaks. Take any critical service in the financial sector: retail payments, claims processing, trade settlement, customer onboarding. The questions are the same for all of them. When did you last test a real disruption to it? How did it perform? How long did recovery take? What decisions were made under pressure, and what did you change afterwards? These are the questions leadership should be asking well before regulators ever do.Leadership must get comfortable telling that story end to end: which services matter, what threatens them, how they were tested, what broke, and what got fixed. If you can’t tell that story, everything else you say about your security is just narration without substance.&nbsp;Frontier AI is what applies the pressureIf DORA raised the expectation, frontier AI is the reason the expectation is justified. As the newest generation of intelligent AI models, frontier systems are now finding vulnerabilities faster than security teams can triage them. Anthropic’s Project Glasswing, built on the Mythos frontier model, surfaced more than 10,000 high- and critical-severity vulnerabilities in systemically important software in its first month, much of it in code people viewed as well understood so “safe enough”. The bottleneck in security has moved from finding flaws to fixing them before someone else uses them against you.Mythos is the most capable offensive security model I’ve seen, and the results genuinely stopped me. It’s the clearest picture yet of what the next few years might look like. But the point isn’t one model or one lab, and it certainly isn’t the fact that this lab’s model is pointed in a defensive direction. The same capability that lets Glasswing find flaws so they can be fixed lets a less friendly operator find them so they can be weaponized. Once a model this good exists, you plan for the ones that come after it, including the ones nobody is publishing benchmarks about. Offensive-capable frontier AI is now a class of threat, not a single headline.Governments have read the same signal. They’ve stopped treating frontier AI like ordinary software and started treating it like strategic infrastructure, with restricted access, staged deployment, and models requiring review before release. It’s a recognition that the speed of discovery has changed what “safe enough” even means.The systems you won’t touch are the proofEvery large finance business has systems it refuses to touch. “This one makes money, it’s stable, leave it alone” is the mentality. Freezing a ‘stable’ critical revenue system used to be an acceptable trade-off because threats moved slowly enough for organizations to respond. That trade-off logic doesn’t hold water now because the threat landscape is far less forgiving. Again, the argument boils down to validating assumptions for&nbsp;proof: how do you&nbsp;know your system is ‘safe enough’ if you haven’t tested it? The code you’ve left alone longest has had the least scrutiny, and frontier models are built to find exactly that kind of code.&nbsp;This is the availability trap in the flesh. That untouchable, untested system is up and generating revenue. Leadership sees uptime but what’s really there is unknown risk. It’s up until it’s breached, and ‘operational-until-attacked’ is not a security posture. Some of these systems need rearchitecting. Most, in the near term, need to be treated as exposed rather than exempt: protected, tested, patched, and put on a plan instead of a pedestal.Let’s be honest with ourselves about riskUnprovable security isn’t a tooling problem; it’s a credibility problem. If you can’t demonstrate how your critical services behave under disruption, regulators start questioning your resilience, investors start questioning your oversight, and your own people lose confidence in the system exactly when they need it most. All of it lands on the customer in the end.So, when a regulator, an auditor, or an investor asks how you stay in control while a disruption is actually unfolding, the real question isn’t whether your systems are up. It’s whether you can prove they’d survive your worst-case scenario. If the only answer you have is “it hasn’t gone down yet,” that isn’t resilience. That’s luck, and luck isn’t something you get to put in a filing.A policy that says "no AI" doesn't mean no AI is happening. Across nearly one trillion enterprise AI transactions analyzed, the gap between assumption and reality is now measurable, and widening according to our&nbsp;AI Security Report.The hardest question in this piece is also the simplest: can you show that your critical services survive under stress?&nbsp;If you're not sure, start here. Run a free security risk assessment&nbsp;.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[From Air Gaps to Always Connected: The Uptime Challenge Security Must Solve]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/air-gaps-always-connected-uptime-challenge-security-must-solve</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/air-gaps-always-connected-uptime-challenge-security-must-solve</guid>
            <pubDate>Wed, 05 Aug 2026 09:40:10 GMT</pubDate>
            <description><![CDATA[The idea that a factory is secure because it's disconnected is, frankly, a 2005 mindset. Connectivity is now core to how manufacturing operates. It’s not bolted on, not optional, uptime depends on it. The air gap isn't a security strategy anymore, it's just a constraint waiting to be worked around.But if the factory floor has evolved from isolated to ‘always connected’, what does that mean for security?The problem isn't connectivity itself. Most factories need more of it, not less. The challenge is that many of the control models used to govern those environments were designed for a world that was easier to see, easier to predict, and easier to lock down. That world is gone.Why Workarounds Become the DefaultThe gap between connectivity and control creates real operational friction, and traditional security models, built for a more isolated era, are often the bottleneck. What we’re seeing is engineers waiting on manual approvals for urgent remote access. Third-party vendors needing to troubleshoot equipment with no secure mechanism to do so. Security teams making decisions without a complete picture of who's connecting, from where, and to what.&nbsp;When that's the reality, security teams default to restriction. Understandable, but when those decisions directly affect uptime, the factory floor finds its own solutions.I visited one of the world's biggest consumer-goods manufacturers and sat in on a conversation between their CISO and head of factory about exactly this problem. Their fix for a downed production line? Pull a SIM from a phone, stick it in a hotspot, connect it to the production controller, and let the remote specialist do their thing. It works. It also drives the CISO quietly mad. Nobody was trying to bypass security; they were just trying to keep the line moving. But the result is an unmanaged path straight into their production environment. That trade-off is precisely why this has become a leadership problem, not just a security one.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Why Control Is Getting HarderMore connectivity means more devices, more access paths, more remote users, more third-party maintenance windows, and more machine-to-machine interactions. That's not inherently a problem, it's often what keeps operations running. The harder question is whether anyone can still see the web of connections, govern them, and understand the dependencies that come with them.This is where traditional approaches break down. Production teams&nbsp;optimise for uptime. Warehouse teams&nbsp;optimise for throughput. Factory teams&nbsp;optimise for output. And legacy security models? Well, they weren't designed to keep pace with these pressures, and the friction shows up in unexpected places.&nbsp;Take handheld scanners used for warehouse logistics. Credentials required, security box ticked. That’s great, except half the floor is wearing gloves or has oil on their hands from the machinery. Logging in is a hassle; logging out so a colleague can use the same device feels like unnecessary admin when a line is waiting. The result: one device, one login, twelve people on shift. Identity becomes meaningless. Visibility evaporates. That's not a technology failure. That's a governance model that never accounted for the reality of the shop floor.Questions Every Leadership Team Should Be AskingSecurity must be frictionless to be effective. If it's complicated, people will route around it, not out of recklessness, but out of operational necessity. And that’s when every workaround becomes a visibility gap. And, if governance and control models are still rooted in the air-gap era, more tooling won't solve this problem.&nbsp;The better starting point is an honest assessment of where the gaps actually are. Where are operations genuinely dependent on connectivity, and where have workarounds quietly filled the gaps? Where are third parties accessing operational systems, and through what mechanisms? And, critically, which security controls are improving visibility, and which are simply creating the friction that drives people around them?The answers tend to reveal whether security is built around how work&nbsp;actually&nbsp;happens, or how leadership&nbsp;assumes it happens. Those are often very different things.The issue was never that these environments were air gapped. It's that the security models built for that era were never redesigned when the era ended. The&nbsp;organisations best placed for what&nbsp;comes next aren't necessarily the ones with the most tools. They're the ones who understood where connectivity became essential and where visibility was lost. They’re the ones who chose to close that gap before it became a business failure.&nbsp;The threats to connected factories aren't theoretical. IoT attacks on critical industries jumped 40% last year, and most environments still lack the visibility to see them coming.&nbsp;Get the full picture: Download the ThreatLabz 2025 Mobile, IoT &amp; OT Threat Report →&nbsp;&nbsp;&nbsp;&nbsp;]]></description>
            <dc:creator>Alex Fray (Innovation Lead)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Named a Leader in the 2026 Gartner® Magic Quadrant™ Reports for SASE and SSE]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-leader-gartner-magic-quadrant-sase-sse-2026</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-leader-gartner-magic-quadrant-sase-sse-2026</guid>
            <pubDate>Tue, 04 Aug 2026 15:10:27 GMT</pubDate>
            <description><![CDATA[I'm incredibly proud that Zscaler has been named a Leader in the 2026 Gartner® Magic Quadrant™ reports for SASE and SSE.This recognition means a great deal to our team, and more importantly, to the thousands of enterprise customers who have placed their trust in Zscaler to secure and connect their organizations. This is the fifth year in a row that we have been recognized as a Leader in the SSE Magic Quadrant, and we’re thrilled to also be recognized as a Leader in the SASE Magic Quadrant this year. We believe this reflects the significant progress our team has made in executing on our Zero Trust SASE Everywhere vision, and our rapid customer adoption.&nbsp; &nbsp; The Zero Trust SASE DifferenceGartner defines SASE platforms as “offerings that deliver converged network and security capabilities. This includes software-defined WAN (SD-WAN) and secure access to the web, cloud services and private applications regardless of the user’s location, the device used or where that application is hosted. These offerings primarily use a cloud-centric architecture delivered as a platform by one vendor". Delivered via a cloud-native platform, customers that embrace this model expect to see significant security and operational benefits by consolidating onto a converged platform.We see that while other vendors bolted on traditional SD-WAN to their SSE offerings, at Zscaler we took a different approach. We have long maintained that legacy networking has too much implicit trust, which inevitably expands the attack surface and facilitates lateral movement of threats. This risk is further amplified today in the age of frontier AI models that can launch exploits at machine speed. If you’re reachable, you’re breachable!Zscaler’s Zero Trust SASE solution is designed from the ground up with an entirely different architecture: one that intentionally does not extend the same network connectivity to every branch and IoT device. Rooted in zero trust foundations, it securely connects users, IoT/OT devices and AI agents to the applications they need, while continuously enforced adaptive access, and without the exposed ports and lateral movement inherent to traditional networking. Branches become as simple as coffee shops, eliminating firewall complexity. The Zero Trust Exchange: Built for ScaleZscaler’s AI-powered Zero Trust Exchange platform processes over 750B daily transactions and is relied upon by over 40% of Global 2000 customers to secure their organizations. The insight derived from this enormous volume of data creates a virtuous circle by training our AI fabric, strengthening our ability to counter dynamic online threats. Over 160 data centers around the world keep policy decisions as close to the user as possible, minimizing latency for a better experience.By pairing the Zero Trust Exchange with our innovative Zero Trust Branch solution, Zscaler delivers unparalleled security, performance, and scale for global organizations. Additionally, our unified Experience Center and ZAgent Framework streamline operations, providing all the benefits of SASE without the heavy cost and complexity associated with traditional networking and SD-WAN. Moving Towards The FutureWe are not slowing down. We announced many more innovations on the Zero Trust SASE platform recently.ZAgent Framework: Automates security and network operations, reduces response times, and surfaces insights that were previously buried in noise.Zero Trust Browser: Integrates Zero Trust SASE natively into a cross-browser extension or full Chromium-based browser, replacing expensive VDI and VPN setups for unmanaged and BYOD devices.&nbsp;Zscaler B2B Exchange: Enables bi-directional application access for Zscaler customers and their partners without ever exposing networks or managing complex firewall rules.Together, we believe these innovations make Zero Trust SASE the industry’s only comprehensive platform to connect and secure everything. Read the ReportsIn our opinion, this recognition from Gartner validates our disruptive approach to SSE and SASE and the confidence our customers have shown in us. We are extremely proud of this recognition, on behalf of our team and our customers, and excited about the journey ahead.We invite you to read the full reports to understand why Gartner has recognized Zscaler as a Leader.Download the 2026 Gartner® Magic Quadrant™ reports for SASE and SSE here. Gartner, Magic Quadrant for SASE Platforms, Jonathan Forest, Andrew Lerner, John Watts, 28 July 2026.&nbsp;Gartner, Magic Quadrant for Security Service Edge, Charlie Winckless, 30 July 2026Gartner and Magic Quadrant are trademarks of Gartner, Inc., and/or its affiliates.Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Zscaler.]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Expanded Risk360 Availability Brings Foundational Risk Insights to More Zscaler Customers]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/expanded-risk360-availability-brings-foundational-risk-insights-more-zscaler</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/expanded-risk360-availability-brings-foundational-risk-insights-more-zscaler</guid>
            <pubDate>Thu, 30 Jul 2026 14:00:00 GMT</pubDate>
            <description><![CDATA[More eligible customers can now access Risk360 to turn Zscaler-native telemetry into clearer, more actionable cyber risk insights—without the complexity of additional data collection or integrations.Security leaders are under growing pressure to reduce cyber risk, demonstrate the value of security investments, and communicate security posture in terms the business can understand. But as environments become more distributed and threats more sophisticated, getting a clear view of risk has become increasingly difficult.That’s why Zscaler is expanding the availability of&nbsp;Risk360, helping more eligible customers access foundational, data-driven risk insights built from the telemetry they already have in the&nbsp;Zscaler Zero Trust Exchange platform. Risk360 is now included in most&nbsp;ZIA and platform SKUs for organizations with more than 500 users.Built on Zscaler-native telemetry, Risk360 helps customers turn existing platform data into clearer, more actionable cyber risk insight. Why deeper risk insight mattersOrganizations today are managing risk across users, devices, applications, and cloud environments while facing growing expectations from executives, boards, and regulators. Security teams often have no shortage of data, but turning that data into clear, actionable insight is another matter.Fragmented signals can make it harder to identify priorities, measure progress, and communicate outcomes. What many organizations need is not more data, but a better way to understand the risk signals already available to them.Risk360 helps organizations track risk over time and benchmark their posture against peers. Turn Zscaler telemetry into actionable insightRisk360 helps organizations better understand and prioritize cyber risk using data already available in the Zscaler platform. It analyzes Zscaler-native telemetry across users, devices, applications, and policy signals together with telemetry from Zscaler’s External Attack Surface Management (EASM) engine. This gives security teams a more precise view of where risks are concentrated and where corrective actions are most critically required.There is nothing additional to deploy, so customers can immediately derive more value from their Zscaler investment.Risk360 includes guided investigations to reduce riskBetter risk insight matters because it supports better decisions. Risk360 helps organizations move beyond isolated signals to more focused prioritization, making it easier to identify important risks, improve visibility, and take action faster.Customers like&nbsp;Inter,&nbsp;Gray Media,&nbsp;Rodgers,&nbsp;NHS,&nbsp;Guaranteed Rate, and&nbsp;AkzoNobel are using risk quantification to strengthen their organizations' cybersecurity preparedness.“The key risk indicators that Zscaler provides have been essential to improving our risk posture. It's taking us many steps forward in our cybersecurity maturity.” - Raffaele Maresca, CISO,&nbsp;AkzoNobelWatch this 2 minute video to see how Risk360 helps organizations quantify and reduce cyber risk. Helping more organizations gain a clearer view of riskSecurity teams already have access to enormous amounts of data. The challenge is turning that data into clarity, prioritization, and measurable progress.By expanding the availability of Risk360, Zscaler is helping more customers access foundational risk insights based on the telemetry already available in the platform. For organizations looking to better understand cyber risk, improve posture, and communicate security value more effectively, Risk360 offers a practical starting point.With Risk360, organizations can:Gain clearer visibility into risk across their Zscaler environmentSurface configuration or control gaps that may affect risk postureMap Zscaler controls and configurations to common compliance frameworksFollow guided investigations to reduce risk&nbsp;Communicate risk posture and reduction progress more clearly to executives&nbsp;If you’d like to learn whether your organization is eligible for Risk360, reach out to your Zscaler account team to discuss next steps.To learn more about how it can help you quantify and reduce risk, watch this&nbsp;Risk360 webinar replay.]]></description>
            <dc:creator>Chris Taylor (Director, Product Marketing)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Secure Agentic AI at Machine Speed: Meet Zscaler at Black Hat 2026]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/secure-agentic-ai-machine-speed-meet-zscaler-black-hat-2026</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/secure-agentic-ai-machine-speed-meet-zscaler-black-hat-2026</guid>
            <pubDate>Tue, 28 Jul 2026 22:35:36 GMT</pubDate>
            <description><![CDATA[Zscaler is redefining what’s possible for security in the AI era. Visit booth #2557 at Black Hat 2026 August 4-6 to discover the AI Security Platform built on Zero Trust.Meet with Zscaler at Black Hat 2026: Schedule a meeting | Explore Zscaler at Black HatAI isn’t just changing workflows—it’s changing the attacker’s playbook. When copilots and autonomous agents can move data, call tools, and trigger actions in seconds, the blast radius of a single compromise grows exponentially. Now, the hard truth for defenders is that you can’t “detect later” what happens at machine speed.At Black Hat 2026, Zscaler will showcase the AI Security Platform built on Zero Trust. Come see how to secure every AI interaction, broker every agent action, and hunt at machine speed—so you can stop threats before they become incidents. What to expect at Black Hat 2026 with ZscalerHere is what you will see:Live demos on how to extend zero trust to AI agents and their actions&nbsp;Proven strategies on how to discover AI usage across the enterprise&nbsp;Expert insights on protecting data used by (and exposed to) AI across prompts, models, clouds and endpoints&nbsp;In-depth theater presentations on the latest Zscaler solutionsDon’t miss these sessions:Weds, Aug 5 10:15am: ThreatLabz Insights Into the Latest Attack Trends with Diana Shtil from ThreatLabzWeds, Aug 5 11:25am: 90 Days with Frontier AI. What We Learned with Emily Laufer, Director, Product Marketing&nbsp;Weds, Aug 5 1:30pm: Securing the Enterprise in the Age of AI Agents: From Zero Trust to Agentic Security with Dhawal Sharma, EVP - AI Security and Strategic Initiatives Zscaler: The AI Security Platform Built on Zero TrustAt Black Hat 2026, we’ll showcase how Zscaler helps security teams:Secure every AI interaction with visibility and control across AI apps and copilotsBroker every agent action by governing agent behavior and tool use in agentic workflowsHunt at machine speed to surface risk earlier and accelerate responseStop every threat by reducing attack surface and applying consistent policies across users, apps, branches, and AI agents Join us at Black Hat 2026&nbsp;Zscaler is shaping the future of security for the AI era. Visit booth #2557 at Black Hat 2026 to see how the AI Security Platform built on Zero Trust protects data, reduces risk, and helps teams act fast and stay secure.Meet our experts, get a live demo, and learn how leading enterprises are extending zero trust to AI apps, copilots, and autonomous agents—while simplifying operations and strengthening protection across the organization.Schedule a meeting | Explore the Platform | Customer Success Stories&nbsp;]]></description>
            <dc:creator>Diana Shtil (Sr. Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Joins the Hiroshima AI Process Partners Community]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-joins-hiroshima-ai-process-partners-community</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-joins-hiroshima-ai-process-partners-community</guid>
            <pubDate>Mon, 20 Jul 2026 12:01:00 GMT</pubDate>
            <description><![CDATA[Zscaler has joined the&nbsp;Hiroshima AI Process (HAIP) Friends Group Partners’ Community, reinforcing our commitment to advancing secure, transparent, and trustworthy AI adoption.Launched under Japan’s 2023 G7 Presidency, the HAIP advances international discussion on safe, secure, and trustworthy AI. Its Partners Community brings together organizations committed to supporting practical progress on AI governance and responsible adoption.As AI adoption accelerates, organizations are not only deploying AI more broadly but also confronting a growing range of AI-powered attacks. Zscaler AI helps them use AI safely for productivity, protect their AI initiatives, and improve their security outcomes with AI-driven defenses and controls.Zscaler will contribute to the HAIP our lessons from this real-world experience securing AI and defending against AI-enabled attacks. Importantly, the HAIP already provides a framework for this through its International Guiding Principles and Code of Conduct for advanced AI systems, which emphasize risk assessment, security testing, transparency, incident response, and safeguards against misuse.This focus aligns with Zscaler’s approach to AI security. Alongside support for international governance efforts, Zscaler is actively engaged in frontier AI security initiatives including Anthropic’s Project Glasswing and OpenAI’s Trusted Access for Cyber program. Participation in these efforts strengthens understanding of advanced AI capabilities in cybersecurity and supports more rigorous security testing and evaluation. Why transparency mattersTrust in AI cannot rest on broad assurances alone. It depends on evidence, visibility, and candid reporting.That principle is reflected in Zscaler’s approach to AI security research and threat intelligence publications. Our ThreatLabz team regularly publishes AI security findings, including an annual AI Security Report.&nbsp;The 2026 report found that AI adoption is creating critical security gaps across global enterprises.Zscaler has also moved quickly to share its frontier model security research. In “When the Scanner Starts Thinking: Learnings from Mythos and GPT 5.5 Cyber Security,” Zscaler shared a structured evaluation of frontier models in cybersecurity, outlining our testing methodology, assessment of model capabilities, and practical security recommendations.Zscaler has also been transparent about the company’s internal AI governance, including its commitment not to use proprietary customer data or personal information to train AI models. Sam Curry, Zscaler’s Global CISO, has&nbsp;explained this commitment&nbsp;and our data containment architecture and use of anonymized, aggregated signals to improve security while protecting privacy. These actions reflect Zscaler’s commitment to using AI in a way that is governed, transparent, and responsible. A global commitmentJoining the Hiroshima AI Process Partners Community is an important milestone in Zscaler’s broader commitment to supporting secure digital transformation worldwide.As AI policy and practice continue to evolve, Zscaler looks forward to contributing its perspective on how security, transparency, and practical governance can help organizations securely adopt AI and defend against its malicious uses.Zscaler also looks forward to working with governments, industry partners, and the broader Hiroshima AI Process community to help ensure that AI adoption is matched by practical safeguards, stronger transparency, and security by design.]]></description>
            <dc:creator>Adam Dobell (Head of Government Affairs, APJ)</dc:creator>
        </item>
        <item>
            <title><![CDATA[GLOBSEC: How to overcome the digital trust crisis]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/globsec-how-to-overcome-the-digital-trust-crisis</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/globsec-how-to-overcome-the-digital-trust-crisis</guid>
            <pubDate>Wed, 20 May 2026 07:02:02 GMT</pubDate>
            <description><![CDATA[In today’s AI era, the trust between nations that underpins supply chains and digital economies is at risk. As uncertainty continues to dominate the geopolitical landscape, and threat actors move faster than institutions can adapt, one reality is becoming harder to ignore: the digital trust crisis is also a cybersecurity challenge.&nbsp;In order to shape the discussion around these systemic transformations, we’re continuing our partnership with&nbsp;GLOBSEC&nbsp;in Prague at the GLOBSEC FORUM from the 21st to 23rd of May 2026. Over the years, this forum has established itself as a critical place for a candid, high-level dialogue among political leaders, business decision-makers, and policy experts. This year’s theme&nbsp;“The Global Systemic Transformation: 21st-Century Solutions to 21st-Century Challenges” matches the moment: a period defined by strategic uncertainty, contested technology relationships, and a rapidly changing cybersecurity risk environment.I’m looking forward to participating in a panel discussion on&nbsp;“The Transatlantic Alliance at the Crossroads: Can the West Survive Itself?” on&nbsp;Thursday 22nd, 12:05 am CET.&nbsp;The premise is clear: the “old (security) playbook” is obsolete in today's world. This raises necessary questions that leaders can no longer ignore, including where genuine common ground still exists on defence, AI, and security and what does pragmatic partnership look like when trust is strained? Is the desire for greater digital autonomy a signal of a rapture in the relationship, or can U.S. and European interests converge for renegotiated relationships?Security as the foundation of digital sovereignty&nbsp;We believe digital sovereignty must be delivered on European terms as a genuine commitment backed by capabilities, transparent practices, and products designed to meet real-world cybersecurity requirements. We’ve said this consistently, and we’ll continue to say it clearly: we are a&nbsp;technology company that listens to European concerns and adapts to today’s reality. In times of political turmoil, the private sector has a responsibility to step up helping to sustain credible cooperation and contribute to cyber resilience where it matters most.When we surveyed 1750 global decision makers in our recent resilience study “The Ripple Effect”, there was a concerning theme associated with digital resilience strategies: delay. The majority (73%) of respondents said digital sovereignty concerns had caused them to delay or cancel security transformation initiatives. That pause is dangerous and negatively impacts the resilience posture of organisations. It prolongs exposure to legacy risk and weakens cyber security readiness. It also leaves organisations less able to absorb disruption from ransomware, supply chain compromise, systemic outages, or sudden changes in cross-border rules at a time when the threat landscape is changing faster than ever before.The challenge for the private sector is to build technology and operating models that respond to those concerns in practice, especially when trust is strained and the stakes are rising in a sovereignty debate. In today’s AI-driven cyber threat landscape, one principle is non-negotiable: cybersecurity is the foundation for digital sovereignty.&nbsp;And without security, sovereignty remains aspirational.For policymakers and business leaders, sovereignty ultimately comes down to three practical tests:Control:&nbsp;Can your organization maintain governance over your data, identities, and access especially under pressure?Choice:&nbsp;Can your organization switch providers, architectures, operating models without being trapped?Continuity:&nbsp;Can your organization rely on the service remaining fully operational when you need it most?These are the questions that matter when resilience is being tested. And they point to an important conclusion: companies should be judged on control, choice, and continuity and not merely on where their headquarters happens to be. Alignment, products, and sustained commitment matter more than geography.Why Zero Trust is the modern security baselineIf today’s environment is defined by constant probing, compromised identities, and sophisticated disruption, then security can’t be built on assumption. Zero Trust provides a pragmatic foundation: verify explicitly, reduce implicit trust, and limit the blast radius when incidents occur. This is an operating model for a world where the security perimeter is gone and trust must be continuously earned.As governments and industry navigate sovereignty requirements, resilience planning, and the implications of AI, the security baseline must match the threat reality. For us, Zero Trust is central to modern security because it aligns with how attackers operate especially under the new conditions of frontier AI and with how critical services can be protected.Meet us at GLOBSEC in PragueAt GLOBSEC, we will be focused on dialogue and participate in closed-door roundtables designed for candid, working-level discussion with senior leaders from politics, business, and academia. In addition, we are available for 1:1 meetings on demand. Reach out if you want to learn more on our digital sovereignty approach based on the Zero Trust paradigm. Because if we agree that trust is a strategic asset, we also have to agree on the foundations that sustain it.&nbsp;]]></description>
            <dc:creator>Casper Klynge (VP, Government Partnerships)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The Next Advancement with OpenAI: Zscaler Steps Up To GPT-5.5-Cyber]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/next-advancement-openai-zscaler-implements-gpt-5-5-cyber</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/next-advancement-openai-zscaler-implements-gpt-5-5-cyber</guid>
            <pubDate>Mon, 11 May 2026 14:00:00 GMT</pubDate>
            <description><![CDATA[OverviewCybersecurity has always been a race. Attackers look for a way in, defenders try to stop it, and whoever moves faster wins. For thirty years, both sides moved at human speed. With AI, the game has changed, making AI security an urgent priority. The most advanced AI can now find weaknesses in software and turn them into real attacks in minutes. It does not sleep, get tired, or miss details. The advantage cybersecurity defenders used to have, knowing their own systems better than anyone, is gone.OpenAI has been thoughtful about what to do with that capability. Rather than release their most powerful cyber-focused AI to anyone, they created the Trusted Access for Cyber program, or TAC, to make those capabilities more useful for verified defenders. Zscaler has been a proud member of the TAC program since the beginning, starting with GPT-5.4-Cyber. Today, we are stepping up to GPT-5.5-Cyber, the next advancement from OpenAI.If your security strategy still depends on patching faster than the adversary can find the bug, you have already lost. The cycle time has collapsed. The winning move is to stop applications from being visible to the adversary in the first place, and to bring an AI of equal caliber to the work of finding what humans miss. That is what TAC delivers, and that is what Zscaler was built for. Two Things Defenders NeedThere are two things a modern defender needs, and they have to work together.1. An architecture that removes the target - If an application is invisible to the internet, it does not matter how clever the model is on the offensive side. There is nothing to scan, nothing to reach, and nothing to weaponize. This is the entire point of Zero Trust, and it is the principle the Zscaler Zero Trust Exchange has operationalized for nearly two decades. Users do not connect to the corporate networks. Applications do not have public IP addresses. Every session, human or machine, is securely brokered one-to-one against a verified identity. We have a saying inside Zscaler: if you are reachable, you are breachable. You need to make yourself unreachable.2. Frontier AI Working on the Defender’s Side -&nbsp;Removing the target is necessary, but it is not sufficient. There are still bugs in code, still misconfigurations in the cloud, still phishing in inboxes, still anomalies in the 500 billion daily transactions we see on our platform at Zscaler. Sorting through that volume and acting on it at machine speed is what a model like GPT-5.5-Cyber is built for. Make the application, data and workloads invisible to attackers via the Zero Trust Exchange platform. Then leverage a frontier model with what remains. That is the combination. Advancements Leveraging GPT-5.5-CyberWe have spent a significant amount of time inside TAC with GPT-5.4-Cyber, and we have learned where a model of this caliber pays off most. GPT-5.5-Cyber sharpens the work in three places.Hardening the AI our customers are racing to deploy: AI tools can be tricked or manipulated into giving up sensitive data. Our AI Red Teaming capabilities (formerly SPLX) has used OpenAI since early 2024 to generate the attack sequences that test and harden customer AI across text, voice, and images. With GPT-5.5-Cyber, when Zscaler finds a weakness, it generates an optimized fix in the same loop, a working first step toward a stronger security posture. The same engine scans the code behind complex AI agents and the tools they connect to, and it powers our Agentic Radar open source project, which fueled the largest OpenAI hackathon last year in Warsaw.Building safer software inside Zscaler:&nbsp;GPT-5.5-Cyber works alongside our engineers across the way we design, build, and ship our solution, validating security thinking at the design stage, assisting with code reviews, finding vulnerabilities at machine speed, and probing finished software the way an attacker would. Problems get caught and fixed long before any customer is exposed to them.Faster investigations without losing the human in the loop: Inside Red Canary, our managed security service, OpenAI-powered agents do the tedious context-gathering that traditionally overwhelms security teams, while our human experts make the final call. The same foundation supports continuous red teaming, prompt hardening, and AI asset analysis across our broader platform — faster, more accurate defense at the speed our customers need.We are also committed to giving back for the benefit of everyone. As part of TAC, the lessons we draw from running GPT-5.5-Cyber at this scale flow back to OpenAI and the broader coalition. Defenders win as a community, or not at all. A Pattern the Industry Keeps ForgettingWhen the cloud arrived, most of the industry believed existing defenses would still work. They did not. When everyone moved to phones and online apps, most believed traditional remote-access tools would adapt. They did not. Each time, the winners were the companies that accepted the world had changed and built for what was coming.&nbsp;Zscaler was one of those companies. More than 17 years ago, we made a bet that the future would not be defended by firewalls and VPNs guarding a network-based perimeter. We built our cybersecurity platform on Zero Trust instead, an architecture where applications are invisible to the internet, and every user or device is securely verified for one-to-one connections. That bet was right for the cloud era, and it is also right for what’s next.AI is the next of these moments, and it is moving faster than the ones before it. Attackers already have the technology. Through our partnership with OpenAI, defenders do too. But the architecture matters even more now than it did before. A frontier-class AI pointed at an exposed application is a problem no patch cycle can keep up with. A frontier-class AI pointed at an application it cannot even see is a different conversation entirely. That is the conversation Zscaler has been preparing the industry to have since 2008.&nbsp;The question for every leader is simple. Keep guarding a front door the attackers no longer use, or move to a security model built for what is coming. The longer the decision waits, the more likely a breach makes it for you.]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Introducing the Next Phase of the Zero Trust Browser]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/introducing-next-phase-zero-trust-browser</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/introducing-next-phase-zero-trust-browser</guid>
            <pubDate>Wed, 29 Apr 2026 18:49:58 GMT</pubDate>
            <description><![CDATA[For years, Zscaler has been a leader in enabling secure and seamless browsing and application access for organizations worldwide. We have partnered with thousands of organizations and our Zero Trust Cloud Browser to secure access not only to the internet but also to SaaS and private web apps.&nbsp;As many have realized, securing both browsing and app access from the browser is more critical than ever, as data loss risk rises, risk of non-compliant devices accessing data, and browser-borne threats continue to grow. Attackers increasingly target the browser to steal sensitive data, including:Malicious extensions that execute unauthorized actions or exfiltrate sensitive information.Phishing and identity attacks in the browser aimed at capturing credentials or OAuth tokens.Keystroke loggers and screenshots that silently steal critical corporate data and credentials.GenAI risks, particularly, accidental exposure of sensitive data. What is more, unmanaged devices used by contractors to access apps also present a challenge. By accessing corporate resources without the safeguards of managed endpoints, they increase the risk of data breaches and compliance failures. Without visibility into device posture, such as whether EDR is in place or if the OS is out of date, organizations struggle to determine whether the devices accessing their apps meet security and compliance standards, increasing security risk.To make matters worse, many organizations still rely on risky or expensive tools for app access like VPNs and VDI. These legacy solutions add cost, complexity, and latency, but do little to resolve browser-specific risks be it stopping threats or protecting data. While enterprise browsers are sometimes a viable option, they do require browser migrations that can disrupt work, rendering them unsuitable in certain environments.Ultimately, this means security teams need consistent protections—protections that isolate web threats and stop browser threats, secure app access, and data protection—but delivered through the right form factor for each scenario. Contractors on unmanaged devices may need protection without a migration; sensitive workflows may require stricter in-session controls; and some teams prefer a dedicated managed browser for standardization.Zero Trust Browser uniquely solves for this reality, letting organizations choose the right deployment approach for each scenario. The New Zero Trust BrowserZscaler is excited to announce the Zero Trust Browser is moving into its next phase by expanding into a unique set of form factors that let organizations match security to each use case while also delivering browser-centric security no other enterprise browser can match.This evolution begins with the Zscaler Zero Trust Browser Extension—a new solution for securing modern browsing and application access. Designed to work seamlessly with users’ existing browsers, this lightweight extension delivers Browser Detection and Response (BDR), to stop browser-borne threats like malicious extensions, malicious script, identity and OAuth credential theft or reassembly attacks.&nbsp; It also applies in-browser data protection controls (for example, inline DLP policies and data controls to restrict copy/paste, upload/download, printing, and other risky actions). It also adds real-time device posture signals to app access decisions—so access to SaaS and web apps can be allowed, blocked, or revoked at any time, based on whether the device meets device security requirements such as OS version, EDR, or if disk encryption enabled.&nbsp;All of this helps protect web browsing and enable secure access without relying on VPNs, VDI, or forcing a browser migration when it doesn’t make sense.Zscaler is also bringing the same security and access found in the Extension to a purpose-built Chromium Enterprise Browser. Our dedicated browser brings the same security, access and data protection as our extension, but allows a form factor that lends itself to standardization and a managed browser experience for workers.&nbsp;These two new form factors complement our existing clientless Zero Trust Cloud Browser that offers key protections that isolate web threats in the cloud, and extends secure app access from any browser, while keeping data secure with cloud-deliver data controls and inline Zscaler data security. Our Cloud Browser is excellent for high-security use cases because execution happens in the cloud, keeping data off endpoints. It is also a practical option when installing an extension or new browser on an unmanaged device is not possible.Together, these three form factors—browser extension, enterprise browser, and cloud browser—extend protection across mixed environments and managed or unmanaged devices without fragmenting policy. Zscaler’s Zero Trust Browser pairs advanced security with flexible deployment, so teams can choose the right option for each user, device, and risk level. User ExperienceUser experience is also critical given the browser is a key productivity tool for workers.&nbsp; Zscaler delivers a frictionless “work profile” in the browser that makes secure access simple on their device.&nbsp; Workers are greeted by a customizable home page that makes accessing the app they need for work easy–and it clearly demarcates work from personal use on their device. Cloud users will encounter a similar cloud-delivered portal to app access. The Zero Trust Browser delivers key capabilities in our diverse form factors:Adaptive App Access: Zscaler provides app access with integrated device posture controls, ensuring secure, real-time access to applications only for trusted users and devices from their browser of choice. App access is revocable should device posture deteriorate.Browser-Based Threat Protection: Only Zscaler protects against browser-borne threats with Browser Detection and Response, such as malicious extensions, OAuth and browser identity attacks, malicious scripts, and more.&nbsp; This complements our isolation of web threats.In-Browser and cloud-delivered data security: Granular data security, enforced in the browser or from the cloud, blocks risky actions such as unauthorized screenshots, keystroke logging, printing, and copy/paste, upload and downloads and more.&nbsp; Inline DLP controls, whether browser or cloud, detect and stop sensitive data from exfiltration.Polished User Experience: Users gain a distinct browser profile (on their device or in the cloud) for work activities, separate from personal browsing, for a seamless and polished user experience.&nbsp;&nbsp;Streamlined Security Architecture: By eliminating the need for legacy tools like VDIs or complex infrastructure, the Zero Trust Browser dramatically simplifies secure access and browsing by leveraging existing Zscaler ZIA, ZPA, and data security footprints. It works with any browser, making it scalable and lightweight for enterprise deployment.&nbsp;&nbsp; Only the Zero Trust Browser delivers unmatched deployment flexibility with consistent protections, including browser detection and response, for organizations navigating today’s complex security landscape.Ultimate Form Factor Flexibility: Only Zscaler provides the ability to secure every use case with a choice of form factors—cloud browser, browser extension, or enterprise browser—ensuring seamless protection and access for any user on any browser or device.Unified Cloud and Browser Protection: Leverage world-class cloud threat isolation combined with in-browser threat detection to create the industry’s strongest security posture for modern browsing.Total "Last-Mile" Browser Control: Instantly block browser-layer attacks and data exfiltration by neutralizing threats like malicious extensions, identity theft, unauthorized screenshots, printing, and ensuring data exfiltration never occurs.Browser Freedom, Zero Friction: Secure users in the browsers they already use, eliminating costly migrations to proprietary browsers and reducing change management complexity for organizations.With Zscaler, organizations can seamlessly protect their users while enabling productivity and embracing a modern, secure, and user-friendly approach to browser security.To learn more, sign up for a demo here or contact your account team for a deeper dive.]]></description>
            <dc:creator>Vishal Gupta (Senior Director, Product Management)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Is Proud to be Part of Project Glasswing: AI Can’t Breach What It Can’t Find]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-anthropic-project-glasswing</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-anthropic-project-glasswing</guid>
            <pubDate>Tue, 21 Apr 2026 22:00:32 GMT</pubDate>
            <description><![CDATA[OverviewAnthropic has been at the forefront of AI innovations. Dario Amodei, Anthropic CEO, has always been mindful of the dangers of very powerful AI models and has advocated for their responsible use. Recognizing the power of their Mythos model to uncover long-hidden software vulnerabilities, Anthropic took a responsible approach. Through Project Glasswing, they made the model available only to a select group of organizations that either operate or protect our country's critical infrastructure. Zscaler is proud to collaborate with Anthropic on Project Glasswing, which has provided us with access to Claude Mythos Preview.&nbsp;The premise is simple, frontier AI models have reached a point where they can find software vulnerabilities faster than humans can. Mythos Preview understands code the way a skilled human researcher does, reading logic, chaining multiple weaknesses together, and producing working exploits in hours, at machine speed, instead of weeks. It has already uncovered thousands of high-severity flaws across major operating systems and browsers. The ability of AI to rapidly uncover vulnerabilities and produce working exploits is going to accelerate, and when it does, defenders need to be ahead.Reactive patching is no longer a viable defense strategy. You cannot outpace AI-driven vulnerability discovery, and you cannot out-hire the efficiency of an automated adversary. The only durable answer is founded on architecture. This means simply adding another tool on top of your security stack won’t cut it. You cannot patch, detect, or respond your way out of a problem created by exposing applications to the internet in the first place; you have to stop exposing them. The Old Game Is LostFor thirty years the industry has played the same game. Put a firewall at the edge. Put a VPN in front of your applications. Scan for known vulnerabilities. Patch what you find. Hope you find them before the adversary does.That game assumed a human-speed attacker. Mythos Preview ends that assumption. If your application is exposed to the internet behind a firewall or a VPN, a frontier model can already see it. It can scan every internet-facing surface parallel, test for weaknesses no human team has the bandwidth to check and do it continuously. Once that capability is in the hands of a nation-state or a ransomware group, your patch cycle is irrelevant.Legacy security was built on the hope that we could outrun the attacker. In an era of AI-driven exploits, that race is over. We now have to assume the attacker is already inside. A Fundamentally Different ArchitectureZscaler was built for exactly this moment, and we have been saying it for more than 18 years. If you are reachable, you are breachable.Zero Trust is not a feature. It is not a firewall with a new label. It is a fundamentally different architecture, built on a different principle. Users never connect to the network and applications are never exposed to the internet. Endpoint context is understood, and devices are verified before they connect. Data is protected the moment it is accessed. Every connection, whether human or AI agent, is brokered one to one with a verified identity in real time, with no lateral path to anything else.When an application is hidden behind the Zscaler Zero Trust Exchange, it has no public IP, open port, or discoverable surface. An attacker scanning the internet cannot find what is not there. The vulnerability may exist in the code. It may even be cataloged in a CVE (Common Vulnerabilities and Exposures) database. But the adversary has no way to reach it.This is the difference between detecting attacks and taking your applications off the public internet entirely, so there is nothing for attackers to target. Both matter. Only one scales against machine-speed offense. What Zscaler Brings to Project GlasswingZscaler is the platform that 40% of the Global 2000 trust to run their businesses. Our contribution is grounded in how the Zero Trust Exchange platform already operates at the core of the enterprise.&nbsp;The largest security cloud in the world:&nbsp;Zscaler processes over 500 billion transactions every day and hundreds of trillions of signals. That scale is what lets our AI distinguish a benign request from a reconnaissance probe. We do this inline, before a connection is ever established.Attack surface elimination:&nbsp;The Zscaler Zero Trust Exchange makes internal applications invisible to the internet. Whether those applications are running in your data center, or in the public cloud, Zscaler hides them from attack. No firewalls or VPNs to exploit, and nothing for a frontier model to find.Data protection at the point of use:&nbsp;The new risk is not someone breaking in. It is your own AI tools quietly taking sensitive data out. Zscaler’s AI guardrails see every request as it happens, across SaaS, private apps, email, and encrypted traffic, and stops the data before it leaves.Zero trust for AI agents:&nbsp;Agents are now acting autonomously on behalf of users. They are authorized to access data, they take action and connect to other systems. They must be governed with the same architecture we apply to human users. Every agent gets a verified identity, access to one specific application, and a full record of what it did.&nbsp; How Zscaler Will Use Mythos PreviewWe are integrating Mythos Preview into our secure software development lifecycle. It will enable us to rapidly find vulnerabilities in our software stack and Zero Trust Exchange, further hardening our environment and reducing risk for our customers. As a proud member of the Project Glasswing coalition, we will share our findings back to the community, helping everyone improve security outcomes for the world. Additionally, we will integrate Anthropic’s Opus 4.7 model into our AI Red Teaming and Agentic SecOps offerings, to help fight AI threats with advanced AI security capabilities. A Familiar PatternWhen the cloud arrived, the industry said the old perimeter would hold. It did not. When mobile and SaaS arrived, the industry said VPNs would adapt. They did not. Every twenty to thirty years the architecture has to change, and the companies that adapt win the next decade.AI is that inflection, and it is moving faster than any shift before it. The adversary already has the model. So do we. The question is whether the enterprise will keep defending a perimeter that no longer exists, or take its applications off the public internet entirely.There is no such thing as a Zero Trust firewall or an AI-proof VPN. There is only the architecture you choose before the next breach.Zscaler is that choice. Project Glasswing is how we accelerate it across the industry. The time to act is now. Where to Learn MoreWatch the webinar recording form Wednesday, April 22 or Thursday, April 23, where we discussed how to protect your organization against vulnerabilities found by frontier AI models like Claude Mythos.]]></description>
            <dc:creator>Jay Chaudhry (CEO and Founder of Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler and OpenAI Partner to Advance the Next Era of Cybersecurity]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-and-openai-join-forces-advance-next-era-cybersecurity</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-and-openai-join-forces-advance-next-era-cybersecurity</guid>
            <pubDate>Thu, 16 Apr 2026 04:27:12 GMT</pubDate>
            <description><![CDATA[OverviewZscaler is proud to partner with OpenAI as part of their&nbsp;Trusted Access for Cyber (TAC) program, which expands trusted, verified access to advanced AI capabilities for defenders. As part of this program, we plan to use GPT 5.4-Cyber, a TAC-enabled variant of GPT‑5.4, to further improve cybersecurity for our Zero Trust Exchange platform and for our customers. GPT 5.4-Cyber will be integrated into our secure Software Development Lifecycle (SDLC) workflows, empowering our teams to instantly detect, triage, and mitigate vulnerabilities earlier and patch security vulnerabilities faster. In addition to safeguarding software, Zscaler has a long history of harnessing OpenAI technology to fight AI-based attacks, including within our&nbsp;AI Red Teaming and&nbsp;Agentic SecOps solutions. Safeguarding the Zscaler PlatformSecure software development is a business imperative at Zscaler. Participating in Open AI’s TAC program enables us to integrate GPT 5.4-Cyber and&nbsp;Codex Security into Zscaler’s internal multi‑agent security architecture for cyber defenses and product hardening. GPT 5.4-Cyber is a key enabler to offer Security-as-a-Service to our developers throughout the SDLC process, from validating threat models in designs, to assisting with secure code reviews, finding vulnerabilities, and executing black-box testing on built artifacts.We are approaching TAC with both a defensive and offensive mindset. In addition to improving security through the SDLC, we are leveraging the model to improve cyber readiness by turning large volumes of security signals into actionable intelligence, prioritizing true risk, and accelerating remediations. Moreover, we are relying on the model for offensive-informed posture hardening by modeling adversarial attack paths and highlighting weak controls, which enables us to neutralize exposures at unprecedented speeds.&nbsp;&nbsp;Combining the frontier OpenAI models with Zscaler’s industry‑leading Zero Trust architecture leads to better security outcomes for our customers. In addition to leveraging AI to identify and remediate any software vulnerabilities, Zscaler’s Zero Trust architecture adds another layer of protection by making critical apps and software invisible to the Internet. This combination provides Zscaler customers superior protection compared to obsolete VPNs and firewalls, maximizing software resiliency while systematically eliminating the internet-facing attack surface.&nbsp; Harnessing OpenAI for AI Red Teaming&nbsp;Zscaler has been using OpenAI’s 4.x and 5.x models for building advanced capabilities in our AI Red Teaming suite of products to help customers safely build and deploy AI systems, including:Continuous Red Teaming Prompt hardening AI Asset AnalysisAgentic Radar open source programZscaler’s&nbsp;AI Red Teaming platform (formerly SPLX) has relied on OpenAI models across the stack since early 2024. Multiple versions of OpenAI models have been central to dynamically generating attack sequences to harden AI systems. With multimodal red teaming (spanning voice and images), OpenAI’s image generation, text-to-speech, and speech-to-text capabilities deliver a decisive tactical advantage. Together, these capabilities provide an industry leading solution to strengthen the security of their AI initiatives.&nbsp;&nbsp;Beyond merely exposing vulnerabilities during red teaming exercises, Zscaler’s solution dictates instant remediation in true closed loop fashion by generating optimized system prompts. This serves as the definitive first step AI engineers take to help improve security and safety posture.&nbsp;Zscaler is also using OpenAI models as part of its AI Asset Analysis solution, which analyzes MCP tools and risks, and provides overall risk analysis for complex AI agents based on source-code scanning. This is an enterprise version of the&nbsp;Agentic Radar open source program, which powered the largest&nbsp;OpenAI hackathon last year in Warsaw, Poland. Leveraging OpenAI for Agentic SecOpsZscaler's&nbsp;Red Canary Managed Detection and Response (MDR) service combines AI-powered threat detection with expert security operations in partnership with OpenAI. OpenAI-powered agents work alongside Zscaler experts to handle the tedious context-gathering that traditionally overwhelms SecOps analysts. Elite human analysts dictate workflows, enforce rigid guardrails, and rigorously validate all outputs, maintaining the 99.6% true-positive rate our customers depend on. By pairing OpenAI's adaptive capabilities with Zscaler’s data pipelines, expert procedures, and rigorous validation, we deliver faster, more consistent investigations without sacrificing the accuracy that defines the Zscaler Red Canary MDR service. Building the Right FoundationAI is fundamentally rewriting the rules of cybersecurity. By partnering with leading vendors like OpenAI, Zscaler is ensuring AI can be used to help improve the overall resilience of our security infrastructure, and mitigate risks from AI-based attacks. We look forward to working with OpenAI as part of their TAC program to improve outcomes for our customers. Enterprise organizations will benefit immensely by using state of the art OpenAI models for better defenses combined with Zscaler’s industry leading Zero Trust architecture to minimize the attack surface and assets exposed on the Internet with traditional VPNs and Firewalls.&nbsp;]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[AI Machine Speed is Breaking VPN Security]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/ai-machine-speed-breaking-vpn-security</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/ai-machine-speed-breaking-vpn-security</guid>
            <pubDate>Mon, 23 Mar 2026 22:27:12 GMT</pubDate>
            <description><![CDATA[Key Findings from the Threatlabz 2026 VPN Risk Report&nbsp;Remote access isn’t a new problem. VPN risk isn’t a new conversation. What’s new, and what the Zscaler ThreatLabz 2026 VPN Risk Report makes unmistakably clear, is the speed at which the threat landscape is changing.Why this matters now:&nbsp;The #1 fear among defenders is AI speed, and it’s already showing up in the field. 79% fear AI exploitation speed. The same VPN controls that felt “good enough” even a year ago can become dangerously slow when attackers can iterate and adapt at machine speed.AI machine speed compresses the time from weakness to exploit, while VPN visibility and patch cycles often can’t keep up. Meanwhile, many organizations are still defending VPN-centric access with realities that move far slower: limited inspection coverage, and access models that can expand blast radius once a user is connected.This report is a snapshot of where the industry is right now, and a wake-up call that “good enough” remote access controls can become “not even close” when adversaries scale faster than defenders can respond.Below are the key findings from our survey of 822 IT and cybersecurity professionals. It is a real-world view of what teams are seeing and what they mean for CISOs, network/security ops, and IT leadership, followed by practical actions you can take to shrink the breach window. What the report reveals: AI is already here, and VPN visibility is laggingThe report shows AI-enabled attacks are no longer hypothetical:61% of organizations report encountering AI-enabled attacks in the last 12 months.But the bigger issue is what comes next: visibility and control. The report found:70% say they have limited or no visibility into AI-enabled threats moving over VPN. And there’s an additional layer to that visibility problem:One in five organizations cannot distinguish an AI-assisted intrusion from a conventional attack.Only one in four has managed to deploy AI-powered monitoring (24%).That combination is the perfect recipe for faster compromise. AI helps attackers iterate quickly on social engineering, reconnaissance, and targeting, while many teams still struggle to see enough of what’s happening inside VPN connections to catch abuse early. The breach window is widening because patch timelines don’t match exploit timelinesWhen critical VPN vulnerabilities emerge, the risk isn’t just the CVE. It’s the time it takes to remediate across upgrade cycles, change windows, and validation.&nbsp;The report highlights a difficult operational reality:54% of organizations say it takes a week or more to patch critical VPN vulnerabilities. It’s not just a technical problem. It’s an operational one.56% rank patching as their top operational challenge.A week may be a perfectly reasonable timeframe in traditional IT operations. In an AI-accelerated threat environment, it can be a lifetime. Attackers don’t need to “wait you out” anymore. They can identify targets, test attack paths, and operationalize new techniques quickly, often while defenders are still triaging impact, coordinating change windows, and validating fixes. Encrypted traffic is creating blind spots where attackers can operateEncryption is table stakes. But encryption without visibility can become a hiding place.The report found:1 in 3 organizations inspect 0% of encrypted VPN traffic.Even among organizations that do inspect, near-total visibility is rare.&nbsp;Only 8% can inspect virtually everything.This is a defining vulnerability in modern environments. If meaningful traffic flows are opaque, defenders lose detection opportunities and response confidence. In the AI era, adversaries can move quickly and quietly, reducing the dwell time required to be successful. Lateral movement is the multiplier once attackers get in&nbsp;Once an attacker gets a foothold, the real risk is how far they can move. The report shows that most VPN environments still grant network-level reach rather than app-level containment.&nbsp;Only 11% can restrict a compromised session to a single application.&nbsp;In other words, in the vast majority of organizations, a stolen credential can become a pathway to broader internal access. This is exactly the condition attackers exploit to move laterally and expand impact. User behavior is a risk signal, not a blame pointOne of the most actionable findings in the report is also one of the most human:63% say users bypass VPN controls to reach apps faster.The “why” behind bypass is most often about performance and reliability.Slow connections top the complaint list at 29%, followed by inconsistent device behavior (23%) and frequent disconnections (19%).This isn’t about users being careless. It’s about friction. When secure access feels slow, inconsistent, or cumbersome, people route around it to get work done. Those workarounds create “shadow access paths” that are harder to govern and easier to exploit.For IT leadership, this is a reliability and productivity warning: if access isn’t dependable, people will find alternatives.For security and network ops, it’s a control-plane warning: policy enforcement becomes fragmented across tools and paths.For CISOs, it becomes a risk governance issue: if “official access” isn’t the default, then your risk model is built on exceptions. What this means for leaders: it’s no longer “VPN secure vs not secure”The report’s headline, AI machine speed kills VPN security, is less about a single technology and more about a structural mismatch:AI accelerates attacker speed and variationVPN models often expand reach once connectedVisibility into what matters can be incomplete (especially with encryption)Patch and change timelines remain constrainedUser workarounds widen the attack surfaceThis is how breach windows open. And in 2026, breach windows don’t stay open because teams don’t care. They stay open because the architecture and operations weren’t built to close them fast enough. Containment-first access is becoming the mainstream directionThe report’s findings are pushing many organizations to evolve from network-based remote access toward app-based access principles by reducing broad connectivity, tightening access policies, and improving visibility and control without adding friction.That momentum is already mainstream:84% are planning or transitioning to zero trust, up from 78% two years ago.If you’re evaluating modernization, keep it outcome-driven:Shrink blast radius (limit what a session can reach)Improve meaningful visibility (especially around encrypted traffic patterns and sensitive apps)Enforce access using identity, context, and device postureDeliver a user experience that makes the secure path the easy pathThe hero's move isn’t “buying something.” It’s leading a shift from connectivity-first to containment-first access. The report is a benchmark—use it to take your next stepThe ThreatLabz 2026 VPN Risk Report offers more than stats. It offers a benchmark for how organizations are experiencing AI-driven pressure on VPN security visibility gaps, patch timelines, and user workarounds included.AI machine speed kills VPN security when defenders are forced to operate with broad reach, blind spots, and slow exposure windows. The way forward is measurable containment: smaller blast radius, faster detection, fewer bypass paths, and an access model built for how work happens now.&nbsp;Download the ThreatLabz 2026 VPN Risk Report to see the full data behind these findings.]]></description>
            <dc:creator>Olivia Vort (Senior Product Marketing Manager, Zero Trust Browser)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Act Fast: RSA 2026]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/act-fast-rsa-2026</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/act-fast-rsa-2026</guid>
            <pubDate>Fri, 20 Mar 2026 16:00:05 GMT</pubDate>
            <description><![CDATA[Next week, the cybersecurity industry gathers in San Francisco for the RSA Conference. While the scale of the event is always a spectacle, its true value lies in how it nurtures the realignment in our collective understanding of risk.This year, that understanding must undergo a fast and fundamental shift because the systems we are trying to secure no longer behave like bounded systems. They behave as networks of decisions which carry risk in every direction.&nbsp; From Static Systems to Dynamic Supply ChainsEnterprise security once relied on a comfortable assumption: systems were bounded and knowable. AI has rendered that assumption obsolete.A single interaction with an AI assistant can trigger a cascade of activity across external models, APIs, and autonomous agents. Data leaves, transforms, and returns. Decisions are delegated across components that often lack a unified security posture. We are no longer just managing applications; we are overseeing AI supply chains.Risk in these environments is not confined to a single breach point. It emerges from the relationships between components. Our research at ThreatLabz confirms the fragility of this new architecture: in controlled testing, 100% of enterprise AI systems analyzed exhibited exploitable vulnerabilities. Often, a full compromise required nothing more than a single interaction.We have also spent years optimizing detection and response, a model that assumes we have time to act. In the age of AI, that time has further evaporated to nothing.Findings from the ThreatLabz 2026 AI Security Report show that AI systems can fail in as little as one second, with a median time to compromise measured in mere minutes. There is no meaningful dwell time in this scenario. There is only the interaction.This implies a hard truth: security cannot be an afterthought. It must exist within the flow of transactions everywhere. Extending Zero Trust to the InteractionThe shift from bounded systems to distributed networks requires a fundamental evolution of our security principles. Zero Trust has traditionally focused on verifying users, devices, and networks. In the age of AI, we must extend this to the interaction.Continuous Evaluation: Trust cannot be granted at the point of entry and assumed thereafter. It must be reassessed at every step of the decision chain.Visibility Beyond the Edge: Security must be able to follow the data and context as they move across models and third-party services.Inline Control: Policies must operate at the point of interaction, where decisions are made, rather than after an outcome is produced.The gap in security today isn't a lack of tools, but a mismatch of models. The traditional perimeter has not just dissolved; it has been replaced by a complex web of AI supply chains and model interactions. While we have focused on securing the edges of environments that are no longer bounded, the true risk has moved to the interaction layer. Understanding and governing the AI supply chain is the only way to close that gap. At RSA, we need to move past the hype and discuss the practical architecture required to secure these dynamic high-velocity workflows.&nbsp; Complexity is a Gift to the AdversaryOne of the biggest challenges I regularly hear from CISOs is the exhaustion caused by tool sprawl. Over the last decade, organizations have layered point product upon point product. While each was intended to solve a specific problem, the collective result is a fragmented mess that creates fatal blind spots.Amongst the many other challenges, every siloed tool is an opportunity for a threat actor. This is why the industry is increasingly shifting toward platform-based security architectures that unify visibility across users, devices, applications, data, and now AI interactions.You will hear a lot of noise about end-to-end solutions next week. However, there is a fundamental difference between a suite of products stitched together and a platform built from the ground up to share intelligence. A cloud-native AI security platform doesn’t just reduce costs; it provides the inline context and automation needed to solve complexity and outpace threats. In a world of high-velocity attacks, simplification is a strategic imperative. Alignment at RSAThe industry does not lack awareness; it lacks alignment between how systems are built and how they are secured. At RSA, we will demonstrate how the Zscaler AI Security Platform applies Zero Trust to this new reality—securing the interactions that now define enterprise risk.We invite you to visit us at Booth #N-5269 and connect with the Zscaler team to discuss how to discover your AI supply chain, reduce risk fast, and stay secure.I look forward to seeing many of you in San Francisco.]]></description>
            <dc:creator>Sunil Frida (Chief Marketing Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[See You at RSA 2026]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/see-you-rsa-2026</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/see-you-rsa-2026</guid>
            <pubDate>Fri, 13 Mar 2026 17:01:59 GMT</pubDate>
            <description><![CDATA[Every year, the cybersecurity industry gathers in San Francisco for one reason.RSA.For one week, Moscone becomes the center of the security world. Thousands of practitioners, builders, researchers, CISOs, and innovators come together to share ideas, debate the future, and challenge how security needs to evolve.The conversations start early. They spill out into the hallways, across the show floor, and late into the night.And every year, the drumbeat gets louder.This year feels different.AI is changing how every organization works, builds, and innovates. At the same time, it is expanding the attack surface and accelerating the pace of risk. Security leaders everywhere are asking the same question:How do we move faster without losing control?That is the conversation we are bringing to RSAC 2026.Meet with us | Learn more | Register for RSAC 2026 What Zscaler Is Bringing to RSACAt Booth #N-5269, the Zscaler team will be showcasing the AI Security Platform built on Zero Trust.Not as a concept.As something you can see, experience, and challenge with your toughest questions.Throughout the week we will be demonstrating how organizations are applying security outcomes that matter:Zero Trust EverywhereSecure every user, every app, and every location.Secure AI EverywhereProtect AI adoption and govern how AI is used across your organization.Protect Data EverywhereDiscover sensitive data automatically, secure it across all channels including AI, and prevent exposure before it becomes a breach.Reduce Risk EverywhereUnify exposure and threat management and accelerate response with intelligent security operations.If you are navigating AI adoption, updating your architecture, or simply trying to reduce complexity in your environment, these are conversations worth having. Must See Sessions at RSARSA is always packed with great content, and this year the Zscaler team is bringing five different sessions to get excited about. These are conversations that get to the heart of what security leaders are navigating right now.March 23 | 10:15 – 10:45 AM: Join Jay Chaudry, CEO of Zscaler at the CSA Summit 2026 where he will be discussing Zero Trust and AI as the architecture for the intelligent age with Alan Rosa, CISO, CVS.March 24, 2026 | 9:40 AM – 10:30 AM: Securing GenAI Adoption: Usage Insights, Threats, and Defenses with Deepen Desai, EVP Engineering (Agentic Security Operations) and Dhawal Sharma, EVP Products &amp; Strategy (AI Security).March 24, 2026 | 1:15 – 2:45 PM: Hands-On Threat Hunt: Building a Dynamic Hunt Program with Michael Wylie, Director of Threat Hunting.March 25, 2026 | 12:00 PM – 12:50 PM: What Are You, Really? Authenticating Workloads in a Zero Trust World with Sam Curry, SVP Global CISO and Yaroslav Rosomakho, Chief Scientist.March 25, 2026 | 2:25 PM – 3:15 PM: MASQUE of the Red Death: Rethinking Secure Connectivity with Sam Curry, SVP Global CISO and Yaroslav Rosomakho, Chief Scientist. What I Love About RSARSA is not just about products.It is about the community.It is the one week a year where the entire security industry shows up in one place. The hallway conversations. The sessions. The spontaneous debates about what’s working and what’s not.Some of the most valuable moments happen between meetings, events, and the show floor.That is why so many of us continue to show up every year.And it’s why I am excited for this one. Let’s Connect at RSACIf you are heading to San Francisco, come find us.Stop by the booth. Watch a demo. Attend a speaking session. Challenge our thinking. Share what you are seeing inside your organization.The best part of RSA has always been the conversations.We cannot wait to have them.We will see you at RSAC 2026.Booth #N-5269Moscone Center | San FranciscoAct Fast. Stay Secure.Meet with us | Learn more | Register for RSAC 2026]]></description>
            <dc:creator>Emily Laufer (Director, Product Marketing - AI Security)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Restrict risk not innovation.  A new mindset for the Financial Services boardroom]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/restrict-risk-not-innovation-a-new-mindset-for-the-financial-services-boardroom</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/restrict-risk-not-innovation-a-new-mindset-for-the-financial-services-boardroom</guid>
            <pubDate>Fri, 13 Mar 2026 13:03:01 GMT</pubDate>
            <description><![CDATA[I met with a CISO last week who could see clear gaps in his internal and external security posture because users were free to disable security controls. He knew it was creating risk but didn’t want to change it because of a ‘user-first’ mentality. This is not a user-centric behaviour, it is creating risk that your organization (and, incidentally, your users) doesn’t need.When caution is risky&nbsp;Big banks can’t out-innovate digital challengers if all their energy is spent ticking compliance boxes. And, if we look at where AI accountability is headed, it’s clear innovation will keep drawing the short straw.&nbsp;That ‘stay in your lane’ understanding between business versus IT is old-school at best, counter-productive at worst. The days of leadership seeing security issues as “something that IT handles” are gone. Singapore is already considering holding top banking execs&nbsp;personally accountable for AI-related risks.&nbsp;If this becomes a global benchmark, leaders will shoot down more bold bets. They will cling to compliance because it feels safe, even if it costs them the win. Customers won’t wait around. If you stall, or seem irrelevant, they’ll jump to the next shiny thing.C-Suite must greenlight innovation to stay competitive. But each new system, AI-driven service or merger comes with risk. Regulators don’t ease up. Every move you make needs evidence, signatures, and someone to blame if it goes wrong. In the financial sector, none of this is new, and it doesn’t go away. Question is, can we protect innovation in this security-first space? Yes. Can we do it without AI? No. If innovation needs confidence and speed, AI gives you the speed. The confidence? That’s where people freeze.Make it safe to go fastIndecision is expensive. While the board takes six months to debate pros and cons of a new capability, a hundred fintechs have beat them to it. It isn’t caution, it’s self-sabotage. They recognize the opportunity but, still, they hesitate.&nbsp;The problem is how we view security. Security isn’t the brakes. It’s the helmet, the seatbelt, and the training the driver gets. You need a roll cage in place. Something that allows you to take the corners at speed, that lets you push hard without worrying that the whole thing will flip over.&nbsp;This is where zero trust comes in. Talk of it is everywhere. Most of it is noise. Here’s what matters: zero trust&nbsp;IS that roll cage. It lets you move fast because it’s built to expect failure and limit the blast radius. It assumes nothing and checks everything; it contains damage, not creative ideas.&nbsp;If the board had the comfort to commit to fast change, they could stop asking “Is this safe?” and start asking “How far can we push this idea?” That’s leadership freedom. It’s not about slowing innovation but about making it safe to maintain speed. Zero trust transforms security from ‘the office of No’ into the foundation that lets the business say “Yes” faster. It gives leaders the confidence to make bold calls.What’s the alternative, really? Keep playing defense? Keep letting legacy liabilities dictate your pace of innovation? Do that and watch competitors lap you.&nbsp;Zero Trust isn’t procurement. It’s postureJust remember not to treat zero trust deployment like a checkbox exercise. It’s a mindset. It’s not just buying a tool; it’s rethinking access, identity, and trust across your entire environment. Beware of vendors who pitch zero trust like it’s a product you can buy on a Tuesday and deploy by Thursday. If someone promises you zero trust in a box, they’re selling you a box.It takes effort to build a great zero trust foundation because ‘verify everything’ isn’t one-size-fits-all. You must define exactly what that means for your business: which users can touch which applications, under what conditions, and which data is truly business‑critical versus routine. It relies on identity‑led policies, granular application access, and data classification that reflects real risk, not blanket permissions or inherited trust.Getting all of this right takes planning and discipline. But done properly, it’s the difference between leading and lagging. This is why zero trust is a leadership issue, not just a technical one.So, here’s my question: What’s the project you’ve been sitting on because you couldn’t justify the risk… to your budget, time, people? What would it take to greenlight it tomorrow?Restrict risk, not innovation:&nbsp;Before you greenlight that project you’ve been sitting on, read&nbsp;The Ripple Effect: A Hallmark of Resilient Cybersecurity for a clear blueprint on extending resilience beyond your walls.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Der Ripple-Effekt: Warum Ihre Cyberresilienz über interne Sicherheitsmaßnahmen hinausgehen muss]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-ripple-effect-why-your-cyber-resilience-must-look-beyond-your-walls</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-ripple-effect-why-your-cyber-resilience-must-look-beyond-your-walls</guid>
            <pubDate>Fri, 27 Feb 2026 20:34:22 GMT</pubDate>
            <description><![CDATA[Die Welt wird von Tag zu Tag gefährlicher. Von KI-gestützten Cyberangriffen und den drohenden Risiken durch Quantencomputing bis hin zu geopolitischen Spannungen und der Volatilität der Lieferketten – externe Kräfte senden Schockwellen durch jedes Unternehmen. Für Unternehmen, die Geschäftskontinuität und Agilität anstreben, reicht es nicht mehr aus, lediglich auf diese Störungen zu reagieren. Resilienz muss sich von einem internen Abwehrmechanismus zu einem nach außen gerichteten Gestaltungsprinzip weiterentwickeln.Um besser zu verstehen, wie Unternehmen mit diesem externen Druck umgehen, befragte Zscaler 1.750 IT-Führungskräfte in 14 globalen Märkten. Während das Engagement und die Investitionen in Cyberresilienz hoch sind, zeigen unsere Ergebnisse eine entscheidende Lücke auf: Das Vertrauen der Unternehmen spiegelt oft eher eine wahrgenommene Kontrolle über interne Systeme wider als eine tatsächliche Vorbereitung auf externe Störungen. Weltweit gab eine Mehrheit der IT-Führungskräfte (61 %) zu, dass ihre Resilienzstrategien zu stark nach innen gerichtet sind.Der diesjährige Bericht „Der Ripple-Effekt: Ein Kennzeichen resilienter Cybersicherheit“ zeigt auf, dass echte Resilienz sich über alle Abhängigkeitsebenen hinweg – wie Geschäftspartner, Plattformen und Lieferketten – ausbreiten muss, um externe Schockwellen zu dämpfen, bevor diese den Betrieb destabilisieren. Durch einen Resilienz-orientierten Ansatz, der über die eigenen Grenzen hinausreicht, können Unternehmen die Fähigkeit entwickeln, den unvermeidlichen Ernstfall zu überstehen.Kritische Lücken: Wo die Orientierung nach innen versagtNach innen gerichtete Sicherheitsvorkehrungen bergen Risiken für Unternehmen in vier Kernbereichen. Erstens stellt die Abhängigkeit von Drittanbietern eine erhebliche Schwachstelle dar: 68 % der Unternehmen verlassen sich verstärkt auf Drittanbieter, aber weniger als die Hälfte hat ihre Resilienzstrategie aktualisiert, und die Umsetzung von Risikokontrollmaßnahmen liegt unter 50 %. Diese gravierende Diskrepanz führte dazu, dass 60 % der Unternehmen im vergangenen Jahr einen erheblichen, durch einen Lieferanten verursachten Ausfall erlitten. Noch alarmierender ist, dass nur die Hälfte der Unternehmen (54 %) durch eine Cyberversicherung gegen Schäden durch Dritte abgesichert sind. Zweitens stellt die sich ständig weiterentwickelnde Technologie eine Herausforderung dar: 52 % der IT-Führungskräfte glauben, dass ihre derzeitigen Sicherheitsvorkehrungen nicht ausreichen, um bestehende oder neu auftretende Bedrohungen wie agentenbasierte KI und Quantencomputing abzuwehren. Während 42 % agentenbasierte KI testen und 34 % sie bereits implementiert haben, geschah dies bei der Hälfte ohne Governance. Sieben von zehn Befragten berichten von mangelnder Transparenz hinsichtlich des Einsatzes von „Schatten-KI“, 56 % befürchten die Offenlegung vertraulicher Daten. Darüber hinaus haben 57 % die Post-Quanten-Kryptographie (PQC) nicht in ihre Sicherheitsstrategie einbezogen, obwohl 60 % erkennen, dass die heute gestohlenen Daten in 3 bis 5 Jahren gefährdet sein könnten. Drittens erzwingt der makroökonomische Druck rasche Veränderungen: 74 % der IT-Führungskräfte sind der Ansicht, dass das makroökonomische Umfeld schnelle Kurskorrekturen erfordert. Trotz tendenziell besserer Planung (71 % aufsichtsrechtliche Compliance, 69 % Datenlokalisierung), bleibt vieles reaktiv.Die Abhängigkeit von ausländischen Technologieanbietern beeinflusst die Diskussionen über Richtlinien und Vorschriften zur Datensouveränität und treibt proaktive Veränderungen voran. Unsere Umfrage zeigt, dass IT-Führungskräfte dieses Risiko aktiv mindern: 79 % bewerten ihre Abhängigkeit von ausländischer Technologie, während sechs von zehn ihre Cyber-Resilienzstrategie im vergangenen Jahr aktualisiert haben, um neuen oder sich entwickelnden Souveränitätsanforderungen gerecht zu werden. Im vergangenen Jahr haben 60 % ihre Strategien zur Stärkung der Cybersicherheit aufgrund geänderter Vorschriften wie NIS2, DORA und DSGVO aktualisiert.Schließlich stellen Legacy-Architekturen nach wie vor eine erhebliche Hürde dar, da 81 % der Unternehmen immer noch in kritischem oder mittlerem Maße auf Legacy-Systeme angewiesen sind. 64 % der Befragten gaben außerdem zu, dass ihre derzeitige Infrastruktur eine effektive Reaktion auf Störungen behindert, und 59 % sagten, ihre Architektur könne mit den Veränderungen im Geschäftsbetrieb nicht Schritt halten. Um echte Resilienz zu gewährleisten, müssen Unternehmen externe Stresstests durchführen, wie z. B. der Simulation von Quantenbedrohungen, KI-Innovationen und Lieferantenabhängigkeiten, um versteckte Risiken aufzudecken.So stärken Sie Ihre Resilienz durch gezielte Planung: drei MaßnahmenUm Sicherheitslücken zu schließen und von einem schützenden „Ripple-Effekt“ zu profitieren, müssen Unternehmen ihren Resilienzansatz nach außen erweitern. Dies beinhaltet die Priorisierung von Transparenz und die Verankerung proaktiver Risikoanalysen überall. Über interne Systeme hinaus müssen auch die externen Kräfte berücksichtigt werden, die das operative Risiko beeinflussen, und Daten über interne Systeme, externe Partner und die gesamte Lieferkette hinweg verfolgt werden. Um dies zu erreichen, sind drei strategische Kurswechsel erforderlich:Überblick über architektonische Anpassungen: Agilität ist der Schlüssel und erfordert flexible Architekturen, die schnell auf Veränderungen der externen Bedrohungslage reagieren können. Ein Plattformansatz vereinfacht diese Anpassung; Komplexität ist der Feind der Agilität, und die Entkopplung von Sicherheit und Netzwerkinfrastruktur ist für uneingeschränkte Geschwindigkeit unerlässlich.Transparenz und proaktives Risikomanagement: Wechseln Sie von der reaktiven Bedrohungsanalyse zur proaktiven Risikoanalyse und verfolgen Sie Ihre Daten überall – in internen Systemen, bei externen Geschäftspartnern und entlang der gesamten Lieferkette.Kontinuierlicher Aufbau – Zukunftssicherheit ist kein plötzlicher Sprung, sondern ein evolutionärer Prozess: Mit einer robusten, interoperablen Plattformarchitektur wird Zukunftssicherheit zu einem fortlaufenden Prozess. So baut beispielsweise die Absicherung von Agentic AI auf bestehenden DLP-Maßnahmen auf, und die Vorbereitung auf Post-Quanten-Kryptographie ist ein überschaubarer Prozess mit Transparenz und inkrementellen Updates.Resilienz als Ripple-Effekt, der sich von innen nach außen ausbreitetDie Zscaler Zero Trust Exchange wurde speziell entwickelt, um diese erweiterte, nach außen gerichtete Resilienz zu gewährleisten. Als Cloud-native Sicherheitsplattform unterstützt sie Unternehmen in mehrfacher Hinsicht:Priorisieren von Transparenz: mit einer einzigen Overlay-Sicherheitsplattform, die Datensicherheit, KI-Sicherheit und Drittanbietersicherheit unterstützt und so eine durchgängige Kontrolle über die gesamte Risikofläche ermöglicht, einschließlich Auftragnehmer und Lieferketten.Vereinfachte Architektur durch Plattformansatz. Dieser entkoppelt die Sicherheit von der Netzwerkinfrastruktur, ermöglicht sichere, identitätsbasierte Verbindungen und erlaubt es Unternehmen, Märkte oder Datenflüsse schnell neu zu konfigurieren, wenn sich die Bedingungen ändern. Selbst die Anforderungen an die Datensouveränität werden mit 25 Rechenzentren in ganz Europa erfüllt.Zukunftsfähige Anpassungsmöglichkeiten auf Basis von Zero Trust: GenAI-Sicherheit und PQC-Transparenz können einfach über ein einziges Dashboard aktiviert werden. Auf der Grundlage einheitlicher Kontrollmechanismen wird langfristige Einsatzbereitschaft gewährleistet.In der heutigen Drittanbieterökonomie ist die Resilienz eines Unternehmens nur so stark wie das Ökosystem, von dem es abhängig ist. Wenn ein Unternehmen keine Kontrollmechanismen für Lieferanten, Auftragnehmer und gemeinsam genutzte Plattformen entwickelt und diese nicht kontinuierlich überprüft, wird der Vorfall beim Lieferkettenpartner zum katastrophalen Ausfall im eigenen Betrieb.Um in unsicheren Zeiten erfolgreich zu sein, müssen Unternehmen ihre Resilienz von innen nach außen stärken und von reaktiven Maßnahmen zu proaktiven, überlegten Aktionen übergehen.Stellen Sie Ihre Resilienz auf ein solides Fundament, damit der dadurch entstehende Schutz sich nach außen ausbreitet und die Auswirkungen externer Schockwellen, die außerhalb Ihrer Kontrolle liegen, verringert werden.Benötigen Sie Unterstützung? Wenden Sie sich an Zscaler, um den Ripple-Effekt in Ihrem Unternehmen zu verstärken, und sehen Sie sich hierden vollständigen Bericht an.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[MWC 26: Zscaler Cellular provides a secure and connected world with Telecommunication partners]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/mwc-26-zscaler-cellular-provides-a-secure-and-connected-world-with-telecommunication-partners</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/mwc-26-zscaler-cellular-provides-a-secure-and-connected-world-with-telecommunication-partners</guid>
            <pubDate>Thu, 19 Feb 2026 09:44:23 GMT</pubDate>
            <description><![CDATA[Mobile World Congress is where industries come together to shape what’s next in connectivity - from cellular and private networks to massive-scale IoT. But as enterprises accelerate deployment of connected devices in all manner of environments, from warehouses and retail kiosks to EV chargers and smart city infrastructure, security teams are facing a hard truth: traditional, network-based security models were not built for today’s highly mobile and distributed cellular environments. With AI tools and services booming in organizations, the need for secure device connectivity and accurate data is bigger than ever before.Legacy approaches to cellular-connected security often rely on costly backhaul architectures and infrastructure that can’t scale at the speed of business. Many of these devices operate beyond the practical reach of firewalls, VPNs, and software agents. They are often deployed in hard-to-access locations, managed by different teams, and moved across regions and borders. As a result, organizations struggle with the fundamentals: having visibility into all data streams, controlling how devices connect, enforcing consistent policy, and responding fast when something changes. That lack of visibility and control creates security vulnerabilities and expands organizations' attack surface in exactly the places attackers increasingly target.Zscaler Cellular eliminates these challenges by embedding Zero Trust protection into the SIM itself. That means every packet of data from a cellular-connected device can be evaluated at the first connection—enabling real-time policy enforcement and secure routing through Zscaler’s global, cloud-native security platform. This is a foundational shift from “add security later” to initiate security immediately, at the point where connectivity begins.Visibility and control in “black box” cellular ecosystemsIn many cellular deployments, the customer experience has historically been connectivity-heavy. But security and application-level control are typically left to the enterprise, creating a shared responsibility model where the biggest immediate gap is often visibility. Zscaler Cellular addresses that gap from day one by enabling organizations to treat each asset as an isolated environment, aligned with the Zero Trust architecture. Assets can communicate only according to policy, rather than inheriting implicit trust simply because they are connected. A modern cellular security approach can pair carrier resilience with a control plane for SIM management, while adding security policy enforcement on top turning a fragmented, opaque environment into something measurable and governable. Based on its initial success with the cellular security offer, Zscaler takes the cellular service one step further into the connectivity world.Zscaler partners with leading telecommunications companies to bring advanced Zero Trust security to cellular-connected devices. Connectivity has always been perceived as part of the end-to-end solution and Zscaler is focused on delivering a complete outcome to customers, together with the telecommunication service provider; Providing secure access, protection, and visibility for cellular-connected environments at cloud scale. By leveraging the Zscaler Zero Trust Exchange with telecom infrastructure, Zscaler Cellular delivers secure, scalable, and seamless connectivity to all kinds of mobile devices or things.&nbsp;For enterprises, these partnerships help deliver managed security services that address the unique challenges of securing distributed, cellular-connected environments and thus extending Zero Trust principles across global cellular networks to reduce risk and enable transformation at scale.&nbsp;Partnering with providers to extend reach without heavy liftThat is the reason why Zscaler is investing in partnerships with telecom service providers at this year's MWC. Those partners bring&nbsp;reach, spectrum, and the connectivity footprint, while Zscaler enables&nbsp;Zero Trust security, visibility, and control for the data streams. Zscaler has always been an overlay technology as we don’t depend on&nbsp;how packets move from A to B, but rather focus on securing the conversation between the source and destination. Based on this handshake, providers can deliver an end-to-end offering that customers are actively asking for. This partner-led approach supports the customer‘s choice. Some organizations want to keep their existing provider relationships and SIM estates. Others prefer a fully managed solution. Mobile World Congress 2026 is the right moment for telecom providers to turn security into a growth engine.&nbsp;Zscaler is working with a select set of telecom providers like NTT and Singtel amongst others to build deep integrations that benefit both sides. Providers can continue selling their own SIMs domestically, while enabling customers with international footprints to extend secure connectivity through Zscaler Cellular, delivered via the provider relationship. The result is a practical way for service providers to expand reach and local breakout options without requiring large upfront investments in new equipment or complex deployments. This allows telecom providers to monetize next-generation 5G networks and security with one of the most powerful value-add services they can bring to market. Zscaler has built a global, cloud-native security backbone that now also understands mobile networking. By integrating with Zscaler Cellular, providers can accelerate secure local breakout and deliver 5G-ready experiences with an enterprise-grade security layer without forcing major capital expenditure or rebuilding their portfolios from scratch.Ask for your personal meeting with the Zscaler team on site via this&nbsp;meeting scheduler. See you in Barcelona at MWC!]]></description>
            <dc:creator>Daan Huybregts (Head of Innovation)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Hamburger IT-Strategietage 2026: KI wird erwachsen – und KI-Sicherheit muss mitwachsen]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/hamburg-it-strategy-days-2026-ai-is-growing-up-and-ai-security-must-grow-with-it</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/hamburg-it-strategy-days-2026-ai-is-growing-up-and-ai-security-must-grow-with-it</guid>
            <pubDate>Wed, 11 Feb 2026 16:04:24 GMT</pubDate>
            <description><![CDATA[Auf dem jährlichen Branchentreff des IT-Managements in Hamburg werden vom 18. bis 20. Februar Trends diskutiert, die die CIOs derzeit beschäftigen. Deshalb überrascht das Dreigestirn auf der Agenda: „AI-Economy – Resilience – Sovereignty“ nicht, denn gerade in diesen Bereichen ist der Gesprächsbedarf aktuell groß. KI ist endgültig aus der Experimentier-Ecke herausgetreten und bekommt für&nbsp; agentenbasierte KI die große Bühne. Doch die Frage bleibt, wie sich Organisationen Resilient by Design aufstellen können, angesichts der wachsenden externen Bedrohungen durch KI, den&nbsp; geopolitischen Rahmenbedingungen und neuen Abhängigkeiten in Form von Supply Chains.KI-Sicherheit - Praxis-Check mit Covestro und SPLXAuf dem Event steht der Austausch mit Organisationen im Fokus, die als Vorreiter den KI-Trend bereits in die Praxis umgesetzt haben. Im Zscaler Fireside-Chat im CIO Forum mit Covestro und SPLX wird eruiert, wie agentenbasierte KI-Systeme die reale Risikolage verändern und wie Unternehmen mit einer “KI first Strategie” Sicherheit und Governance in Einklang bringen können, ohne Innovationen auszubremsen.&nbsp;In vielen Unternehmen geht es nicht mehr nur um Chatbots oder ein paar Prompts, sondern bereits um die Erprobung von Systemen, die denken, entscheiden und handeln – teils autonom, teils in verteilten Workflows. Da diese Systeme nicht nur Antworten generieren, sondern Ziele verfolgen, Schritte planen und Aktionen ausführen können, rücken sie ins Visier von modernen Angreifern. Diese nützen die neuen Einfallsvektoren, die sich in agentenbasierten KI-Systemen rund um die APIs und Supply Chains ergeben, wenn KI über Unternehmensgrenzen hinweg interagiert. Neben dem erwarteten Produktivitäts-Booster wird die KI zur operativen Kraft in Prozessen – und Sicherheitsfragen werden plötzlich sehr real. Je autonomer Systeme handeln, desto wichtiger wird es, deren „Blastradius“ durch moderne Sicherheitsarchitekturen zu begrenzen.&nbsp;Viele Organisationen haben bereits Zero Trust-Prinzipien etabliert und sichern damit&nbsp; Identitäten, minimieren Zugriffsrechte und tragen zur Segmentierung kritischer Unternehmensbereiche bei. Genau diese Logik der kontinuierlichen Sicherheitsbewertung von Usern, Workloads oder Geräten lässt sich konsequent auf die KI erweitern.&nbsp;Durch Cloud-basierte Zero Trust-Sicherheit lassen sich sowohl die User zu App-Kommunikation als auch die Kommunikationsbeziehungen von KI-Agent zu App oder Agent zu Agent absichern. Wenn Transparenz und Regelwerke für Berechtigungen von Beginn an in agentische KI-Systeme implementiert werden, lassen sich Workloads und Zugriffspfade ebenfalls nach dem Zero Trust-Prinzip beherrschen.Allerdings mangelt es Unternehmen heute am zuverlässigen Einblick, wo KI bereits überall zum Einsatz kommt. Neue Komponenten oder embedded Tools schießen aus dem Boden. Dementsprechend muss der erste Schritt lauten, sich den Überblick zurückzuerobern. Welche Tools, Gateways, Modelle oder Integrationen werden in der Unternehmensumgebung genutzt? Aufbauend auf diesem Überblick müssen an die Stelle von Wildwuchs bewusstes Asset Management treten und Kontrollpunkte geschaffen werden, um ungewollten Datenabfluss zu verhindern.Darüber hinaus gilt es, ein Bewusstsein dafür zu entwickeln, dass KI-Sicherheit nicht nur ein Modell-Thema ist. Auch und gerade für KI-Systeme braucht es Schutz vor und nach der Modellphase. Deshalb wird im Fireside-Chat von SLPX das Thema Red-Teaming für KI adressiert. Anstelle der Hoffnung, dass nichts passieren wird, tritt der Realitätscheck. Dabei wird gezielt nach Schwachstellen gesucht, die von Angreifern ausgenutzt werden könnten, bevor sie im laufenden Betrieb zu Schaden führen. Diese Diskussionsrunde im CIO-Forum findet am 19. Februar um 13:55 Uhr statt.Datensouveränität – Rückschritt in Silos oder Sprungbrett zur Kontrolle?Zscaler ist auf den Strategietagen mit einem weiteren Diskussionsthema vertreten. Im Breakout mit der Deutschen Börse wird das aktuelle Thema beleuchtet, wie Datensouveränität und Datensicherheit mit Hilfe der Cloud in Einklang zu bringen sind. Für diesen CIO-Roundtable am 18. Februar um 16:10 Uhr ist eine Registrierung erforderlich.&nbsp;Fazit: KI-Tempo ja – aber mit SteuerbarkeitDie Hamburger IT-Strategietage sind der richtige Rahmen für ein klares Update: Agentenbasierte KI bringt enorme Chancen, aber sie verschiebt die Risikogrenzen. Unternehmen brauchen keine KI-Panik – sie brauchen Transparenz, Governance und&nbsp;Sicherheitsarchitekturen, die moderne Daten- und Aktionsflüsse beherrschen.Wenn Sie auf den Strategietagen dabei sind: Kommen Sie vorbei, bringen Sie Ihre konkreten Fragen mit – und lassen Sie uns gemeinsam die Diskussion von „KI als Trend“ zu „KI als steuerbarer Unternehmensrealität“ drehen. Über die App der Hamburger Strategietage ist das Zscaler-Team vor Ort für ein persönliches Gespräch erreichbar.]]></description>
            <dc:creator>Christoph Schuhwerk (CISO in Residence)</dc:creator>
        </item>
        <item>
            <title><![CDATA[eWorld: IT- &amp; OT- Sicherheitstransformation mit Zero Trust macht die Energiewirtschaft zukunftssicher]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/eworld-it-and-ot-security-transformation-with-zero-trust-makes-the-energy-industry-future-proof</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/eworld-it-and-ot-security-transformation-with-zero-trust-makes-the-energy-industry-future-proof</guid>
            <pubDate>Thu, 05 Feb 2026 09:26:51 GMT</pubDate>
            <description><![CDATA[In Essen trifft sich vom 10. - 12. Februar einmal mehr die europäische Energiewirtschaft auf dem zentralen Branchentreffpunkt für Entscheidungsträger. Bei den Netzbetreibern und Versorgern wird das Interesse der IT- und OT-Verantwortlichen besonders groß sein. Denn nach der Ratifizierung des NIS2-Umsetzungsgesetzes im Dezember 2025 ist der Informationsbedarf hinsichtlich der konkreten Umsetzung moderner Cybersicherheit ein zentrales Thema. Wie lässt sich angesichts der zunehmenden Cyberbedrohungen für Stadtwerke und Energieversorger dieses Jahr der Sprung in die Transformation zu mehr Sicherheit schaffen?Die Energiewirtschaft steht an einem Wendepunkt. Angesichts der rasanten Digitalisierung und immer komplexeren Sicherheitslandschaften wird klar: Die Branche braucht nicht nur innovative IT-Lösungen, sondern auch einen radikalen Schnitt zu herkömmlichen Cybersicherheitssystemen, um den heutigen KI-gesteuerten Bedrohungen Stand zu halten. Führende Energieversorgungsunternehmen haben den Sprung in die Zukunft bereits geschafft und dienen als Vorreiter in Sachen Transformation. Mit Hilfe eines Zero Trust- Sicherheitsmodells sichern sie schon heute nicht mehr nur ihre IT-Infrastruktur, sondern sorgen auch für die erforderliche Segmentierung und granulare Zugangsberechtigungen auf OT-Umgebungen. Ein zentraler Aspekt bei Zero Trust-Architekturen ist der Grundsatz, dass keiner Datenkommunikation mehr implizit vertraut wird. Bei jeglichem Zugriff auf Anwendungen und Systeme, auf lokale Daten oder Cloud-Umgebungen aber auch auf Geräte, Zweigstellen oder Maschinen wird der Datenaustausch kontinuierlich verifiziert und autorisiert, bevor eine Verbindung hergestellt wird.&nbsp;Während große Versorgungsunternehmen im Zuge ihrer IT-Transformation bereits auf Zero Trust setzen, stehen auf der anderen Seite viele kleinere und mittlere Stadtwerke, die mit der Digitalisierung gerade erst beginnen. Diese kommunalen Versorger sind traditionell vorsichtiger und oft in ihren bestehenden Systemen verwurzelt. Doch auch hier besteht Handlungsbedarf, denn die wachsenden Bedrohungen durch Cyberangriffe machen auch vor den kleineren Betreibern nicht Halt. Auch diese kritischen Infrastrukturen und deren digitaler Wandel erfordern den Aufbau sicherer, moderner und agiler IT-Systeme als geschäftskritische Grundlage für einen resilienten Versorgungsbetrieb der Bevölkerung.IT und OT-Sicherheit verschmelzenWährend sich die erste Welle der IT-Transformation hauptsächlich auf klassische IT-Systeme konzentrierte (z. B. Büro-IT, Netzwerke und Cloud-Umgebungen), verschiebt sich derzeit der Fokus auch auf den Bereich der Operational Technology (OT). Hierzu gehören physische, operative Systeme wie Smart Grids, SCADA-Systeme oder IoT-Technologien, die für die Steuerung und Überwachung von lokalen Versorgungsunternehmen unerlässlich sind. Doch diese Systeme stehen vor besonderen Anforderungen, denn gerade kleinere Energieanbieter nutzen noch herkömmliche, geschlossene Systemarchitekturen mit Air Gap-Ansätzen, die einst als sicher galten. Die zunehmende Verzahnung durch digitale Netze und IoT-Sensoren macht jedoch erforderlich, dass diese Schutzmechanismen im Zuge der Digitalisierung aktualisiert werden.&nbsp;Zscaler ist ein erfahrener Partner an der Seite führender Energieunternehmen, die mit uns gemeinsam bereits vor einigen Jahren begonnen haben, die Vorteile einer Zero Trust Architektur umzusetzen. Aufbauend auf dieser Expertise und der Branchenkenntnis unseres Partners Deloitte helfen wir dabei, die komplexen Herausforderungen moderner IT- und OT-Umgebungen zu bewältigen – sicher, agil und zugleich skalierbar. Wir verstehen gleichermaßen die Anforderungen großer Konzerne sowie die Besonderheiten und Bedürfnisse kleinerer, kommunaler Versorger zu adressieren. Mit maßgeschneiderten Lösungen und partnerschaftlichem Ansatz helfen wir Unternehmen jeder Größe, die Digitalisierung sicher umzusetzen – von der Implementierung eines Zero-Trust-Ansatzes bis hin zur Transformation Ihrer OT-Systeme.Wie mit einem Zero Trust-Ansatz lokale Versorgungsunternehmen eine umfassende Sicherheitsstrategie aufbauen können, die sowohl IT- als auch OT-Systeme nahtlos integriert und zukunftssicher macht, erläutert Zscaler am 11. Februar um 10:45 – 11:15 Uhr gemeinsam mit Deloitte in Halle 6, Stand 6F112.]]></description>
            <dc:creator>Christoph Schuhwerk (CISO in Residence)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zenith Live Encore Highlights Resilience and the secure Future of AI]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zenith-live-encore-highlights-resilience-and-the-secure-future-of-ai</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zenith-live-encore-highlights-resilience-and-the-secure-future-of-ai</guid>
            <pubDate>Mon, 22 Dec 2025 13:40:26 GMT</pubDate>
            <description><![CDATA[It was a privilege to join my colleagues on stage for Zenith Live Encore in London earlier this month at the Vision Hall in King’s Cross. Alongside Lee Langley we welcomed over 400 security leaders and innovators to discuss the convergence of AI and Zero Trust. The energy was palpable, and if you couldn’t join us, here is a summary of the key themes and discussions that defined the day.&nbsp;A year of bold transformationThe pace of transformation across EMEA over the last 12 months has been remarkable. We are proud to having been able to help a growing number of organizations fully embrace Zero Trust, consolidate their platforms, and effectively counter real-world threats.&nbsp;However, as we move forward, the lines between internal networks and the public cloud have become increasingly blurred. To navigate this evolution, organizations must shift their mindset. I am continually inspired by the boldness and innovation demonstrated by our customers, but we must all recognize that we aren’t just deploying technology for technology’s sake, we are deploying it to solve critical business challenges.&nbsp;Value over enforcementIn a session on Secure AI Innovations led by James Tucker, Head of CISO at Zscaler, we dug into the reality of AI adoption. There was a clear consensus: the implementation of AI is fundamentally a business process discussion. We need to move from application to finding genuine value. This means focusing on what brings the most time back to employees and identifying where the biggest vulnerabilities lie. Often, the simplest problems to identify are the most complex to solve, which is why bringing employees into the conversation is vital to understand what AI tools they are using to bridge these gaps. This insight is critical for mapping the true flow of data across an organization is a necessary step when we accept that the AI universe is in fact a data security challenge.&nbsp;Speed vs. security – can we have both?&nbsp;One of the day’s standout moments was our industry panel, “The Need for Speed (And Security): Enabling Agentic AI Innovation Without Hitting the Brakes”. Featuring insights from Zeki Turedi, Field CTO at CrowdStrike, Rob Hale, Principal EMEA Security Leader at AWS, and Yaroslav Rosomakho as Zscaler Chief Scientist. The discussion underscored that we are in the midst of the Agentic era and shifting from where AI simply automates tasks but actively executes them on our behalf. This means that we will face more adversaries and more threats than ever before, requiring our defenses to keep pace.&nbsp;As AI agents become more autonomous, the attack surface expands, making it even more of a challenge to enable innovation without wanting to take pause. For security leaders, this means we now need to find that delicate balance and apply a slight break to ensure that we can move at the speed of AI, while still maintaining robust Zero Trust principles.&nbsp;Zero Trust EverywhereFrom disrupting new cyberthreats online, to hearing the real-world stories shared on stage, I feel even more assured that security must be woven into the very fabric of our digital future. And our mission – Zero Trust Everywhere, Powered by AI – is the blueprint for that future.&nbsp;But we cannot do it alone and none of this is possible without the trust of our customers and the dedication of our partners. Thank you for your continued faith in us and I look forward to seeing you all at our next&nbsp;event in January 2026 where we will demonstrate how organisations can accelerate their AI initiatives with Zero Trust.&nbsp;]]></description>
            <dc:creator>Justin Brooks (Area Vice President, Sales - UK&amp;amp;I)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zenith Live Encore: How to Build a Resilient Digital Future with Zero Trust and AI]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zenith-live-encore-how-to-build-a-resilient-digital-future-with-zero-trust-and-ai</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zenith-live-encore-how-to-build-a-resilient-digital-future-with-zero-trust-and-ai</guid>
            <pubDate>Wed, 26 Nov 2025 21:50:57 GMT</pubDate>
            <description><![CDATA[Organizations face unprecedented pressure to push their technological boundaries as AI adoption accelerates and competition intensifies. However, the current pace of AI integration far outstrips the speed in which organizations normally assess and address the risks. As a result, the race between innovation, speed and security is leaving defenders in an increasingly vulnerable position.&nbsp;IT security practitioners must enable this new technology’s use - whether public tools or internal deployments - while establishing reasonable guardrails that ensure visibility and robust data security assessments. Organizations are urgently seeking best practices to navigate AI-driven transformation. Extending Zero Trust principles to regain visibility and control of all data streams is now more critical than ever.As companies rethink how employees safely consume generative or agentic applications, they must also apply Zero Trust to their broader ecosystem of suppliers, partners, and B2B integrations. Modern supply chains increasingly share data, applications, and now AI models - creating a new attack surface if not properly secured.That’s why Zscaler’s Zenith Live event series is returning in its one-day roadshow format across Europe - turning AI insights into action. The events will showcase how a cloud-based approach to Zero Trust Everywhere can help security practitioners reduce risk, complexity, and cost in the new technology era. Zscaler experts will reveal how AI and Zero Trust are converging to redefine networking and security, fuelling rapid digital transformation and building resilient, mission-critical infrastructures to safeguard today's business aspirations.&nbsp;Participants will discover how a cloud-centric Zero Trust approach is redefining security to protect every connection, from users and workloads to IoT, OT, branches, and even AI. Security practitioners, IT architects, or networking professionals will gain practical insights and tools to drive real transformation, learning from their peers how to reset boundaries&nbsp; in the pursuit of digitalization while carefully managing cybersecurity risks. Zscaler experts will be on hand to share the latest strategies to minimize attack surfaces, eliminate lateral movement and prevent data loss.&nbsp;Following the recent SPLX acquisition, attendees will get first-hand insights at how this addition to the Zero Trust Exchange platform will extend shift-left AI asset discovery, automated red teaming, and governance - helping organizations secure their AI investments from development through deployment. We’re also bringing back industry panels and fireside chats, offering attendees the opportunity to learn from industry leaders and network with their peers.Agentic AI – Friend or Foe?As part of the agenda, we will also be speaking with Zscaler customers at different stages of their Zero Trust transformation journey. Panellists from leading private and public organizations will share their learnings in a ‘fireside chat’ - helping others who wish to take that first step towards a Zero Trust architecture. Having overcome their own implementation challenges, they’ll offer insights and guidance to make Zero Trust a reality.&nbsp;New this year: a panel on the emergence, adoption and security of Agentic AI. Zeki Turedi, Field CTO at Crowdstrike, and Rob Hale, Principal Security Segment Leader at AWS, will debate whether Agentic AI is a friend or foe - and underline the importance of retaining control over critical digital infrastructure, redefining data governance, and unlocking innovation securely.To learn more about the Zenith Live Encore agenda in your city and discover how Zscaler secures data, applications, devices and users on organizations’ transformation journeys, visit the&nbsp;registration site. See you in London on Tuesday, 9th of December 2025 in Vision Hall!&nbsp;]]></description>
            <dc:creator>Yaroslav Rosomakho (Chief Scientist)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Gedanken zur technologischen Umsetzung der digitalen Souveränität in Europa]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/enabling-europes-digital-sovereignty-through-technology</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/enabling-europes-digital-sovereignty-through-technology</guid>
            <pubDate>Fri, 14 Nov 2025 20:21:06 GMT</pubDate>
            <description><![CDATA[Das Thema digitale Souveränität steht in Europa schon seit Jahren in der Diskussion. Im Zeichen zunehmender geopolitischer Fragmentierung einerseits und eines wachsenden Wunsches nach technologischer Unabhängigkeit geht es dabei längst nicht mehr nur um abstrakte Theorie: Inzwischen steht ganz konkret die praktische Umsetzung zur Debatte. Am 18. November findet in Berlin der von Frankreich und Deutschland gemeinsam initiierte Gipfel zur Europäischen Digitalen Souveränität statt. Das Treffen, bei dem politische und wirtschaftliche Entscheidungsträger mit Branchenexperten zusammenkommen, markiert einen entscheidenden Meilenstein in der Gestaltung der digitalen Zukunft Europas. Diese ambitionierte Initiative stellt einen Aufbruch in bisher unerschlossenes Territorium dar. Der Wunsch, sich die Kontrolle über systemrelevante digitale Infrastruktur zu sichern, einen neuen Rahmen für den sicheren und verantwortungsbewussten Umgang mit Daten zu schaffen und gleichzeitig Innovationspotenzial freizuschalten, ist so kühn wie absolut nachvollziehbar. Seine Verwirklichung ist mit komplexen Herausforderungen verbunden. Das fängt mit der Schwierigkeit an, den Begriff der digitalen Souveränität überhaupt zu definieren. Würde man auf der Suche nach einem Konsens darüber, was unter digitaler Souveränität zu verstehen ist, würde man vermutlich bald feststellen, dass es dazu mindestens 27 unterschiedliche Meinungen gibt. Indes wäre es ein Fehler, diese mangelnde Klarheit als Ausdruck politischer Willensschwäche misszuverstehen. Ein hochrangiger Vertreter eines der größten EU-Mitgliedstaaten kommentierte das kürzlich sinngemäß so: „Die Forderung nach digitaler Souveränität wird laut und ideologisch erhoben.“ Tatsächlich ist in Europa eine zunehmende Annäherung in mehreren Punkten festzustellen. Im Vordergrund steht die Sicherung der Zukunft. Konkret bedeutet das: Es geht um die Kontrolle über Daten, um Unabhängigkeit, um die Fähigkeit, Betriebskontinuität zu gewährleisten, um die Forderung nach Transparenz und darum, sicherzustellen, dass Europa in vollem Umfang von den  Chancen und Möglichkeiten des digitalen Zeitalters profitiert und im globalen Wettbewerb konkurrenzfähig bleibt.Die Technologiebranche ist gefordert, diese Vision ernst zu nehmen und entsprechend zu reagieren. Bei Zscaler sind wir uns dieser Verantwortung bewusst und bereit, unsere Kunden auf diesem Weg zu begleiten. Wir sind überzeugt, dass die Souveränität nach europäischen Maßgaben und im Einklang mit europäischen Zielsetzungen erreicht werden muss. Als ein global führender Pionier im Bereich Cybersicherheit mit fast 2.500 Kunden in ganz Europa, verpflichten wir uns zur Entwicklung und Bereitstellung zukunftsweisender Technologie, die die digitale Vision Europas reflektiert und unterstützt. Im Rahmen dieses Engagements stellte Zscaler bereits 2010 als erster Sicherheitsanbieter eine eigene Cloud für Kunden in Europa bereit. Wir nehmen den bevorstehenden Berliner Gipfel zum Anlass, hier aus unserer Perspektive zu einigen Kernaspekten der digitalen Souveränität Stellung zu beziehen. Konkret erläutern wir, welche Lösungen die Sicherheit, Flexibilität und Unabhängigkeit gewährleisten können, die europäische Unternehmen fordern und benötigen, um in der heutigen vernetzten Welt erfolgreich zu wirtschaften. 1. Zuverlässige Sicherheit für europäische DatenDaten müssen vertraulich, sicher und lokal verarbeitet und verwaltet werden. Mit dem Wechsel zu globalen Cloud-Systemen laufen Unternehmen Gefahr, die Kontrolle über vertrauliche Daten zu verlieren und sie Risiken durch externe Akteure oder Cyberbedrohungen auszusetzen. Datensouveränität bedeutet, den Schutz der Daten und die Konformität mit den geltenden Gesetzen und Vorschriften als Basis für das Vertrauen in die Bereitstellung systemrelevanter Leistungen zu gewährleisten.So unterstützt Zscaler die europäischen Ziele im Hinblick auf Datenschutz und lokale Verarbeitung: Zscaler speichert keine Inhalte von Endkunden: Die Verarbeitung des gesamten Inline-Traffic erfolgt im Arbeitsspeicher innerhalb der lokalen Infrastruktur, was die Datenkontrolle vereinfacht. Die Zscaler Zero Trust Exchange stellt sicheren Anwendungszugriff bereit, ohne vertrauliche Daten zu exponieren.Das Cloud-native Plattformdesign nutzt Verschlüsselung, Datentransparenz und granulare Zugriffskontrollen und erfüllt somit die Vorgaben der DSGVO und anderer geltender Datenschutzvorschriften.Kunden haben die Option, sich für die ausschließliche Nutzung europäischer Infrastruktur zu entscheiden. Zscaler betreibt europaweit insgesamt 25 Rechenzentren, davon 20 in EU-Mitgliedstaaten. So können wir eine lokale Datenverarbeitung gewährleisten, die optimale Performance und Souveränität sicherstellt.Europäische Kunden können sicherstellen, dass ihre Protokolldaten innerhalb Europas gespeichert werden. Kunden haben die komplette Kontrolle über die Datenspeicherung und können entscheiden, ihre Daten in unabhängigen oder nationalen Logging-Zonen zu speichern. Zscaler macht die Datenkontrolle einfach und stellt Unternehmen eine hochgradig sichere Zugriffslösung bereit, die durch geringe Latenz überzeugt und mit den Prinzipien des ‘Datenschutz by Design’ und ‘Datenschutz by Default’ im Einklang steht. 2. Der Weg zur digitalen Autonomie Digitale Souveränität bedeutet, sich aus der übermäßigen Abhängigkeit von ausländischen Technologieanbietern zu lösen und die Kontrolle über die eigenen Systeme zu behalten. Unternehmen in Europa brauchen flexible Frameworks, um sichere Innovation ohne Bindung an einzelne Anbieter (sogenannter Vendor Lock-in) zu unterstützen. Ohne Autonomie über die eigenen Daten und Systeme laufen europäische Unternehmen Gefahr, ihre zukünftige Entwicklung und die Sicherheit ihrer kritischsten digitalen Assets aufs Spiel zu setzen.So unterstützt Zscaler die europäischen Ziele im Hinblick auf technologische Unabhängigkeit und Cybersicherheit:Eine Architektur, die Europas technologische Unabhängigkeit unterstützt:Mit der anbieterneutralen Architektur von Zscaler profitieren europäische Unternehmen von Entscheidungsfreiheit und Flexibilität beim Aufbau ihrer IT-Frameworks. Lösungen unterschiedlicher Technologieanbieter können bedarfsgerecht kombiniert werden, um Cloud-Umgebungen, Daten, Endgeräten, Identitäten und Services effektiv und effizient zu verwalten. Weitere Informationen finden Sie unter: /partners/technologyZscaler unterstützt die ‘Delegation of Administration’, um sicherzustellen, dass ausschließlich europäische Bürger berechtigt sind, Richtlinien für die Protokollierung von Daten sowie Einsicht in Daten auf unserer Plattform festzulegen. Ein Cloud-basierter Ansatz gewährleistet, dass Unternehmen ihre Abhängigkeit von Legacy-Systemen reduzieren und die Bindung an einen einzelnen Anbieter vermeiden können. Dadurch bewahren sie ihre Souveränität und Innovationsfähigkeit.Zscaler ermöglicht Unternehmen die Umstellung von Legacy-Systemen, ohne sich an eine bestimmte Hardware oder ein proprietäres Ökosystem zu binden oder durch externe Abhängigkeiten einschränken zu lassen.Sicherung systemrelevanter europäischer Infrastruktur:Die Zero-Trust-Architektur von Zscaler verhindert Sicherheitsverstöße, indem sie eine kontinuierliche Authentifizierung und Autorisierung aller User und Geräte erzwingt, bevor eine Verbindung zur jeweils angeforderten Anwendung hergestellt wird.Zscaler stellt fortschrittliche Funktionen zum Bedrohungsschutz bereit, die Unternehmen in ganz Europa zuverlässig vor Malware, Zero-Day-Schwachstellen und KI-gestützten Cyberbedrohungen schützen. Wir bieten Hosting- und Service-Anbietern die Möglichkeit, in Zusammenarbeit mit uns souveräne Lösungen zu betreiben, die auf den Cloud-Lösungen von Zscaler in unseren europäischen Rechenzentren basieren. Zscaler zeigt neue Perspektiven für ein resilientes, digital souveränes Europa auf, indem wir zukunftsweisende Technologie mit skalierbarer branchenführender Sicherheit kombinieren.3. Beschleunigte Innovation Innovation ist die Voraussetzung für Wachstum und Wettbewerbsfähigkeit. Europa muss das Potenzial neuer Technologien nutzen, um global auch weiterhin ganz vorne mitzumischen. Das erfordert sichere und vorschriftenkonforme Lösungen, die europäische Unternehmen befähigen, selbstbewusst zu wirtschaften und zu wachsen, ohne den Schutz vertraulicher Daten zu gefährden.So unterstützt Zscaler die europäischen Ziele im Hinblick auf Innovation und Wettbewerbsfähigkeit:Zscaler unterstützt sichere Cloud-orientierte Strategien. Dadurch werden Infrastrukturkosten gesenkt und Mittel für neue Investitionen in Innovation und Wachstum freigesetzt. Skalierbare, flexible Lösungen ermöglichen die effiziente Nutzung neu aufkommender Technologien.Mit den Funktionen von Zscaler können Unternehmen reibungslose Unterstützung für sichere Hybridarbeit bereitstellen und profitieren so von der Flexibilität zukunftsfähiger Arbeitskonzepte.Im internationalen Vergleich überzeugt Zscaler durch Innovationsfreude, nachweisbare Erfolge bei der Optimierung der betrieblichen Effizienz und die Fähigkeit, schneller auf Markttrends zu reagieren als die Mitbewerber. Gleichzeitig gewährleisten wir die Einhaltung der strengen europäischen Datenschutzvorschriften.Unser konsequenter Zero-Trust-Ansatz stellt sicher, dass Unternehmen innovieren und expandieren können, ohne ihre Systeme, Mitarbeiter oder Daten unnötigen Risiken auszusetzen.Die Umstellung von Legacy-Technologie auf einen zukunftsfähigen Ansatz bietet den zusätzlichen Vorteil, branchenführenden Schutz mit handfesten Sparpotenzialen zu kombinieren: Im Gegensatz zu den technologischen Innovationen der Vergangenheit, können Unternehmen ihre Kosten senken, wenn sie den Schritt nach vorne wagen. Zscaler zeigt neue Perspektiven für sichere Innovation im digitalen Zeitalter auf, die europäischen Unternehmen Wachstums- und Wettbewerbschancen erschließen.4. Verantwortungsbewusster Umgang mit KI KI hat das Potenzial, die digitale Wirtschaft grundlegend zu transformieren. Damit einher gehen jedoch auch neue Risiken in Form von Sicherheitslücken und Missbrauch. Europa hat sich zu einem verantwortungsbewussten Umgang mit KI verpflichtet, der den Schwerpunkt auf Datenschutz, ethische Standards und robuste Kontrollmechanismen zur Gewährleistung von Vertrauen und Transparenz legt. In einem kürzlich veröffentlichten gemeinsamen Report  der französischen und deutschen Behörden wird die Anwendung von Zero Trust auf LLM-Systeme als Maßnahme zur Bewältigung der spezifischen sicherheitsrelevanten Herausforderungen empfohlen, die mit der Nutzung von KI verbunden sind.So fördert Zscaler den verantwortungsbewussten Einsatz von KI:Die Realisierung der Produktivitätsgewinne, die sich mit KI erzielen lassen, setzt voraus, dass KI-Systeme sicher ausgeführt werden können, ohne Unternehmen Risiken auszusetzen. Die KI-Verordnung ist das weltweit erste umfassende Framework zur Regulierung des Einsatzes von KI, wodurch global gültige Standards in Bezug auf Transparenz, Fairness und Verhinderung von Missbrauch geschaffen wurden. Zscaler verpflichtet sich dazu, sicherzustellen, dass alle KI-Systeme, die in unseren Produkten zum Einsatz kommen, die Vorgaben der europäischen KI-Verordnung einhalten.Zero-Trust-Grundsätze schützen vertrauliche Datensätze und Datenpipelines sowie die Integrität von Algorithmen und Modellen. Zugleich verhindern sie Manipulation, Diebstahl und Ausnutzung von KI-Anwendungen zu schädlichen Zwecken. Die Zero-Trust-Architektur von Zscaler ermöglicht eine sichere Nutzung von KI-Modellen, agentischer KI und der zugehörigen Daten-Pipelines. Dadurch wird die Integrität von KI-Lösungen zuverlässig gewahrt.Zscaler unterstützt europäische Unternehmen in dem Bestreben, sich das Potenzial von KI optimal zunutze zu machen. Unsere Lösungen gewährleisten die Einhaltung ethischer Standards und schützen KI-Systeme und die zugehörigen Daten-Pipelines vor Missbrauch.5. Betriebsstabilität Betriebsstörungen durch Cyberangriffe, Naturkatastrophen, Schäden an Unterwasserleitungen und unberechenbare politische Verhältnisse können unternehmenskritische Systeme und Daten gefährden. Betriebsstabilität ist die Fähigkeit eines Unternehmens, derartige Ereignisse zu überstehen und dabei ihre Funktionsfähigkeit und Sicherheit zu bewahren, um auch unter unberechenbaren Bedingungen Geschäftskontinuität zu gewährleisten.So fördert Zscaler die Betriebsstabilität:Die Zero-Trust-Architektur von Zscaler gewährleistet sicheren Direktzugriff auf Cloud-Services und -Anwendungen auch bei Störungen durch Internetausfälle oder Angriffe auf Unterseekabel oder andere kritische Infrastruktur. Dank der resilienten Architektur unserer Rechenzentren bleiben europäische Unternehmen auch im Ernstfall betriebsfähig. Der Echtzeit-Bedrohungsschutz von Zscaler verhindert, dass Ransomware und andere Cyberbedrohungen unternehmenskritische Infrastrukturen und Betriebsabläufe beeinträchtigen. Zscaler stellt eine sichere, flexible Zugriffslösung bereit, die standortunabhängiges Arbeiten unterstützt und Sicherheitsstandards entspricht.Zscaler trennt die Sicherheit von Legacy-Netzwerkmodellen und setzt stattdessen auf Cloud-native Lösungen. Dadurch befähigen wir Unternehmen, agil auf Veränderungen der geopolitischen Lage zu reagieren und unter unberechenbaren Umständen Geschäftskontinuität zu gewährleisten.Zscaler stellt als erster Cloud-Sicherheitsanbieter eine Business-Continuity-Lösung bereit. Zscaler-Kunden können zwischen einer selbst gehosteten und einer extern gehosteten Infrastruktur wählen, die sie vor Betriebsunterbrechungen durch Blackouts, Brownouts, katastrophale Ausfälle der Infrastruktur, Terrorismus und Änderungen der Vorschriften oder Gesetze schützt. Zscaler erkennt Probleme, die lokal beim User bzw. zwischen User und Cloud auftreten, oder Vorfälle in der Cloud und leitet automatisch ein Failover zur Business-Continuity-Lösung ein. Darüber hinaus bieten wir die Möglichkeit an, ein vom Kunden gehostetes privates Service Edge zu nutzen, das selbst bei einem Ausfall sämtlicher Cloud-Services infolge eines globalen Routing-Events weiterhin funktionsfähig bleibt. Zscaler integriert Resilienz in die Unternehmenssysteme, damit Unternehmen sich vor Betriebsunterbrechungen schützen und ihre digitale Souveränität wahren können.Zscaler unterstützt Agilität und Resilienz durch dynamische Traffic-Umleitung und Anpassung von Verbindungspfaden in Echtzeit, um bei Internet- oder Cloud-Ausfällen eine sichere und kontinuierliche Konnektivität zu gewährleisten.Die neue Realität erfordert ein erneuertes Bekenntnis zur digitalen Zukunft EuropasIm Vorfeld des deutsch-französischen Gipfels zur Europäischen Digitalen Souveränität zeichnen sich zwei wesentliche Voraussetzungen für den Erfolg der digitalen Ambitionen Europas ab: Der Weg zur digitalen Souveränität und strategischen Autonomie muss nach europäischen Maßgaben gestaltet und im Einklang mit europäischen Prioritäten und Werten umgesetzt werden. Technologieanbieter, die einen Beitrag dazu leisten wollen, müssen Lösungen entwickeln und bereitstellen, die auf europäische Bedürfnisse und Zielsetzungen zugeschnitten sind.Vertrauenswürdigen Technologiepartnern, die die europäische Souveränität nicht nur in Begriffen definieren, sondern in der Praxis realisieren können, sollte die Möglichkeit gegeben werden, sich aktiv an der Umsetzung dieser Vision zu beteiligen. Technologieanbietern, die nachweislich die digitale Souveränität Europas fördern, sollten weiterhin zur Verwirklichung dieser Vision beitragen. Wir sind überzeugt, dass nur durch Berücksichtigung dieser beiden Grundsätze die Voraussetzungen sowohl für die souveräne digitale Zukunft Europas als auch für seine anhaltende globale Wettbewerbsfähigkeit geschaffen werden können.Zscaler engagiert sich für die Förderung der digitalen Souveränität Europas, indem wir europäischen Unternehmen zukunftsfähige Lösungen bereitstellen, um ihre Systeme zu sichern, grenzenlose Innovation zu betreiben und ihre eigenen Ziele zu realisieren. Als ein global führender Anbieter im Bereich Zero-Trust-Sicherheit ist Zscaler hervorragend aufgestellt, um europäische Unternehmen bei der Bewältigung der aktuellen Herausforderungen und dem Aufbau einer resilienten, souveränen Zukunft zu unterstützen.]]></description>
            <dc:creator>Casper Klynge (VP, Government Partnerships)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Step Into the Future of Zero Trust + AI Security with Zscaler at AWS re:Invent 2025]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/step-future-zero-trust-ai-security-zscaler-aws-re-invent-2025</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/step-future-zero-trust-ai-security-zscaler-aws-re-invent-2025</guid>
            <pubDate>Tue, 04 Nov 2025 19:46:37 GMT</pubDate>
            <description><![CDATA[Zscaler and AWS are redefining what’s possible in the cloud. Visit Booth #1375 at the Venetian, December 1-5, to see how zero trust + AI security come together to protect data, power innovation, and simplify cloud security operations.Meet with Zscaler at AWS re:Invent 2025: Schedule a meeting | Explore Zscaler for AWSIn today’s cloud-first world, agility and innovation are everything. Yet many organizations are still weighed down by legacy tools that can’t keep up. VPNs, firewalls and static security models were never built for AI-driven transformation or a distributed workforce. They slow progress, create blind spots and expose new attack surfaces in the cloud. As organizations move more applications to the cloud and adopt GenAI, traditional security approaches put users, devices, and data at risk. The future of security depends on moving beyond these limitations towards a unified zero trust architecture. Together, Zscaler and AWS help enterprises simplify, automate, and scale securely across workloads, users, and data while keeping innovation moving forward.&nbsp; What to Expect at AWS re:Invent with ZscalerHere’s what you’ll see:Live demos showcasing Zero Trust + AI innovations in actionExpert insights on securing GenAI Apps and cloud workloadsProven strategies to eliminate VPNs/Firewalls and reduce riskReal-world customer use cases powered by Zscaler on AWSExpert theater presentations on the latest Zscaler solutionsDon’t miss these sessions:Tue., Dec. 2, 2:30PM: Securing the AI Era with Dhawal Sharma, EVP Products &amp; Strategy, ZscalerWed., Dec. 3, 4:00PM: Zero Trust: The Blueprint for Securing AI-Powered SDLC with Brian Lazear, VP, Product Management - Cloud Workloads How Zscaler + AWS Make It PossibleTogether, Zscaler and AWS deliver a secure foundation for cloud transformation.Here’s how:Unify security across AWS environments. Protect users, workloads, and data through the Zscaler Zero Trust Exchange, a global cloud platform built on AWS infrastructure.Secure GenAI applications. Discover and control AI tool usage while preventing data leakage and unauthorized access.Simplify access and eliminate VPNs. Provide seamless, content-based access to private apps on AWS and beyond without the cost and complexity of legacy VPNs.Protect workloads at scale. Segment and secure inter-workload traffic with cloud-native controls that reduce lateral movement and risk.Accelerate cloud migration. Move from on-prem to AWS with built-in visibility, automation, and policy consistency.&nbsp; Join us at AWS re:Invent 2025Zscaler and AWS are shaping the future of secure cloud innovation. Visit Booth #1375 at the Venetian December 1-5, to explore how Zero Trust and AI come together to protect data, accelerate transformation, and simplify security across your organization.Meet our experts, get a live demo, and learn how leading enterprises are using Zscaler and AWS to scale securely, operate efficiently, and innovate with confidence.Schedule a meeting | Explore Zscaler for AWS | Customer success stories | AWS Marketplace]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zero Trust im Fokus der it-sa 2025 – Sind wir bereit für „Zero Trust Everywhere“?]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zero-trust-in-focus-at-it-sa-2025-are-we-ready-for-zero-trust-everywhere</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zero-trust-in-focus-at-it-sa-2025-are-we-ready-for-zero-trust-everywhere</guid>
            <pubDate>Fri, 24 Oct 2025 07:08:19 GMT</pubDate>
            <description><![CDATA[Die it-sa 2025 war erneut ein zentraler Treffpunkt für IT-Sicherheitsverantwortliche. Die wachsende Zahl an Bedrohungen und innovativen Angriffsmethoden verlangt mehr denn je nach wirksamen Sicherheitskonzepten. Themen wie die Umsetzung von NIS2, künstliche Intelligenz (KI), Post-Quantum-Kryptographie, Cloud- und OT-Sicherheit dominierten die Diskussionen der Branche. Gleichzeitig wurde deutlich: Die Datenhoheit steht als übergreifendes Ziel im Zentrum der Herausforderungen.Künstliche Intelligenz: Chancen und RisikenKI verspricht enorme Potenziale für Unternehmen, geht aber auch mit neuen Sicherheitsrisiken einher. Cyberkriminelle nutzen Automatisierung und KI für gezielte Angriffsstrategien wie Prompt Hacking oder Vibe Coding. Adaptive KI-Systeme stellen Unternehmen vor zusätzliche Aufgaben, insbesondere wenn agentenbasierte KI-Anwendungen autonom kommunizieren. Die Frage lautet: Wer schützt die Daten, wenn Systeme miteinander „sprechen“?Die zunehmende Vernetzung: Ein Sicherheitsproblem?Mit der Verbreitung mobiler und dezentraler Geräte steigen auch die Anforderungen an den Schutz von Datenflüssen. Unternehmen müssen sicherstellen, dass sensible Daten durchgängig geschützt sind - unabhängig davon, wie und wo sie ausgetauscht werden. Zero Trust bietet hier ein klares Modell: Nicht Netzwerke, sondern einzelne Applikationen, Workloads und Geräte stehen im Fokus der Sicherheitsarchitektur.Zero Trust: Vision statt TechnologieWie meine Gespräche auf der it-sa verdeutlichten, setzen immer mehr Unternehmen auf das Sicherheitsparadigma Zero Trust. Der Ansatz überzeugt, da er eine ganzheitliche Sicherheitsstrategie ermöglicht – von Internetsicherheit und Remote-Zugriffen bis hin zur KI- und Gerätesicherheit. Entscheidend dabei ist, dass nicht die Technologie, sondern die Geschäftsvision im Vordergrund steht, wenn es um die Einführung geht: ein zukunftssicheres Geschäftsmodell abseits traditioneller Infrastrukturen.Der Weg zur DatensouveränitätDie Modernisierung der IT-Sicherheitsarchitektur ist in vielen Branchen – vom Gesundheitswesen bis zur Industrie oder öffentlichen Verwaltung – unabdingbar. Datenhoheit und lokale Cloud-Lösungen sind zentrale Anforderungen, insbesondere in Europa. Zscaler antwortet hier mit klaren Lösungen: Die lokale Kontrolle über Daten ist gewährleistet, ohne Abstriche bei Sicherheit und Skalierbarkeit.IT-Sicherheit als PrioritätUnternehmen müssen sich jetzt fragen: Haben sie bereits die notwendigen Schritte unternommen, um volle Transparenz und Kontrolle über ihre Datenströme sicherzustellen? Mit Zero Trust Everywhere können Organisationen ihre Sicherheitsstrategien effektiv modernisieren und gleichzeitig auf die dringlichsten Herausforderungen reagieren - sei es im Umgang mit KI, der Cloud oder mobiler Vernetzung.Unser Team steht bereit, um Unternehmen auch nach der it-sa bei wichtigen Fragen zu unterstützen und ihre Resilienz zu stärken.Falls Sie die Zscaler Vorträge auf der it-sa 2025 verpasst haben sollten, gibt es hier die Gelegenheit zum Reinhören:Dienstag, 7. Oktober:&nbsp;Resilienz und Souveränität im Zeitalter der Cloud: Eine Vision für die Zukunft entwickelnMittwoch, 8. Oktober:&nbsp;Vom Klick zur Krise: Wahre Geschichten moderner Angriffe auf MitarbeitergeräteDonnerstag, 9. Oktober:&nbsp;Von Prävention bis Reaktion: KI-gestützte SecOps in einer Zero Trust Architektur]]></description>
            <dc:creator>Christoph Schuhwerk (CISO in Residence)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Der Balanceakt zwischen dezentraler Verantwortung und strikter Sicherheit]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-tension-between-decentralized-ops-and-security-compliance</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-tension-between-decentralized-ops-and-security-compliance</guid>
            <pubDate>Thu, 23 Oct 2025 07:17:13 GMT</pubDate>
            <description><![CDATA[Geteilte Verantwortung für Sicherheitsgovernance, Implementierung und Innovation führt häufig zu fehlender Abstimmung zwischen verschiedenen Abteilungen und erschwert somit die Compliance. Für Unternehmen mit veralteter Infrastruktur wird diese Aufgabe besonders herausfordernd.  Ein Szenario, das viele große Banken im Finanzsektor kennen.Betriebliche ReibungspunkteIn großen Banken entsteht durch ihre organisatorische Größe ein komplexes Betriebsumfeld. Unterschiedliche Teams verwalten oft isoliert einzelne Technologien oder Sicherheitsbereiche, was zu fragmentierten Entscheidungen führt. Zwar fördert dieser Ansatz Fachwissen in einzelnen Bereichen, doch er verschleiert ein gravierendes Problem: Sicherheitsrichtlinien werden uneinheitlich umgesetzt. Und genau diese Uneinheitlichkeit gilt es in der stark regulierten Finanzbranche zu vermeiden.Sicherheitsverantwortung in großen Banken wird gemeinsam getragen: CISO, CIO und CTO müssen regulatorische Vorgaben, Risikomanagement und Incident Response koordinieren. Der CISO bestimmt das Sicherheitsframework, CIO und CTO setzen dessen Anforderungen in IT-Infrastruktur und Produktumgebungen um. Doch selbst mit einem einheitlichen Framework führen isolierte Arbeitsweisen häufig zu inkonsistenter Umsetzung in den einzelnen Abteilungen. Ohne einen koordinierten Ansatz steigt das Risiko, besonders in Legacy-Umgebungen, in denen Transparenz über Zugriffe und Aktivitäten nicht standardmäßig gegeben ist.Zeit und Budget sind zusätzliche Stolpersteine für Compliance. Mit der wachsenden Zahl an regulatorischen Vorgaben im Finanzsektor wird es immer aufwendiger, diese einzuhalten. Audits können sich über Wochen oder Monate hinziehen und erfordern erhebliche Investitionen in Personal und Technologie, damit Sicherheitsrichtlinien in den alltäglichen Abläufen umgesetzt werden. In Legacy-Umgebungen müssen Sicherheitsmaßnahmen oft manuell überwacht und über verschiedene, isolierte Systeme hinweg zusammengesetzt oder ergänzt werden. Die laufenden Kosten dieser Maßnahmen fallen meist auf CIOs und CTOs, die ohnehin Budgets straffen, um Kosten zu reduzieren, Resilienz zu sichern und Transformationsziele umzusetzen. Wäre Sicherheit von Anfang an in die Architektur integriert, müssten sie die langfristigen Kosten für Entscheidungen außerhalb ihres Verantwortungsbereichs nicht tragen.Wenn Innovationsgeist auf die technische Realität trifftCompliance im Tagesgeschäft ist ein bekanntes Thema – doch was passiert, wenn Banken neue Innovationen umsetzen wollen? Immer deutlicher wird die Diskrepanz zwischen dem strategischen Optimismus der Führungsebene ohne technischen Hintergrund und der nüchternen Einschätzung der technischen Teams.Neue Wettbewerber drängen auf den Markt, und viele CEOs im Bankensektor setzen auf Technologien wie KI, um wettbewerbsfähig zu bleiben. KI bietet tatsächlich großes Potenzial für Innovation, Wachstum und Marktführerschaft. Doch Legacy-Systeme bremsen die KI-Integration aus, erhöhen Risiken und erschweren die Einhaltung von Sicherheitsvorgaben. Außerdem bringt KI ein neues Arbeitsfeld mit eigenen Herausforderungen hinsichtlich Beobachtbarkeit und Kontrolle mit sich. Diese Probleme verschärfen sich noch durch fragmentierte Infrastrukturen, in denen die für KI benötigten Daten in isolierten Systemen gespeichert sind. Das Ergebnis: Früher getrennte Technologiebereiche prallen nun schneller aufeinander – und die Teams stehen unter Druck, schnell zu agieren, ohne die Sicherheit zu gefährden.Skalierbare Sicherheit ohne KompromisseWie bewältigen Banken die Aufgabe, einheitliche Sicherheitsmaßnahmen abteilungsübergreifend durchzusetzen und Innovationen mit neuer Technologie zu fördern? Zero-Trust-Architekturen bieten hier zunehmend die Lösung.Im Gegensatz zu herkömmlichen, perimeterbasierten Ansätzen geht dieses Sicherheitsmodell davon aus, dass innerhalb des Netzwerks kein implizites Vertrauen besteht. Jeder Zugriff wird streng überprüft – egal, wer sich anmeldet, welches Gerät verwendet wird oder wo der Zugriff erfolgt. Mit Zero Trust werden die Verantwortlichkeiten von CISO, CIO und CTO klar aufeinander abgestimmt, indem Richtlinien zentral durchgesetzt, Systeme transparenter gestaltet und Compliance-Management in isolierten Umgebungen vereinfacht wird.Aber Zero Trust ist mehr als nur ein Sicherheitsframework. Zero Trust schafft strategische Voraussetzungen für skalierbare Sicherheit, wie die nachstehenden Punkte verdeutlichen: Zero Trust stellt Sicherheit als Service bereit und sorgt für skalierbare Konnektivität, sodass Banken neue Technologien risikofrei und zügig einführen können. Das Modell liefert in On-Premise- und Cloud-Umgebungen einheitlichen Schutz, identische Funktionen sowie gleichwertige Kontrollmechanismen und sorgt so für die dringend benötigte Konsistenz in hybriden Umgebungen. Teams müssen also keine Kompromisse eingehen oder zwischen Anwendungsbereichen wählen. Alles funktioniert zuverlässig, unabhängig davon, wo sich die Daten oder Anwendungen befinden.Zero Trust bietet lückenlose Transparenz. Selbst wenn Technologiebereiche segmentiert bleiben, sind Transparenz und Kontrolle nicht eingeschränkt, sodass Sicherheitsteams Aktivitäten reibungslos überwachen und steuern können.Datensicherheit ist im Kern der proxybasierten Architektur von Zero Trust verankert – und wird nicht erst nachträglich hinzugefügt. So können Banken neue Technologien – sogar komplexe Integrationen wie KI-Agenten – schnell skalieren, ohne die Compliance oder operative Integrität zu gefährden.  Gleichzeitig bietet die Architektur Anbindungsmöglichkeiten sowohl für Legacy- als auch für neue Services und erweitert den Schutz nicht nur innerhalb der Bank, sondern auch über das gesamte Ökosystem hinweg – einschließlich Partnern und öffentlich zugänglichen Plattformen.Eine gemeinsame Sprache für die SicherheitIn dezentral organisierten Umgebungen hängt die Sicherheitsverantwortung weniger von der Hierarchie ab als von der Abstimmung der Teams. Zero Trust ermöglicht Banken eine einheitliche Sicherheitskommunikation, bei der Compliance in jede Aktivität integriert ist – unabhängig davon, wer gerade die Verantwortung trägt.BEREIT FÜR SKALIERBARE SICHERHEIT? Finanzinstitute benötigen einen modernen Sicherheitsansatz, um aktuelle Herausforderungen zu meistern und für die Zukunft gerüstet zu sein. Zero Trust im Kern der Architektur hilft, Sicherheit zu gewährleisten, Prozesse zu vereinfachen und Compliance sicherzustellen. Hier finden Sie Ihren zukunftssicheren Weg.]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Mehr Vertrauen, größeres Risiko: So verhindern Sie Verstöße mit Millionenschäden]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-cost-of-trust-preventing-breaches-with-damages-in-the-millions</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-cost-of-trust-preventing-breaches-with-damages-in-the-millions</guid>
            <pubDate>Thu, 16 Oct 2025 07:51:29 GMT</pubDate>
            <description><![CDATA[In der Finanzbranche ist Vertrauen von grundlegender Bedeutung. Im Bereich der Cybersicherheit kann blindes Vertrauen jedoch zur kostspieligen Belastung werden und Verluste in Millionenhöhe verursachen.Ein aktueller Bericht von IBM beziffert die durchschnittlichen Kosten eines Datenlecks in diesem Sektor auf 6,08 Mio. USD. Das ist der Preis, den Finanzunternehmen dafür zahlen, wenn sie den falschen Personen, Prozessen und Technologien vertrauen.Dieser astronomische Betrag verdeutlicht, dass herkömmliche Sicherheitsmodelle trotz ihrer anhaltenden Präsenz auf dem Markt nicht mehr ausreichen. Stattdessen ist die Umstellung auf einen Zero-Trust-Ansatz erforderlich.Die finanziellen Auswirkungen von VerstößenFinanzdienstleister sind seit jeher im Visier von Cyberkriminellen. Laut dem jüngstenIWF-Bericht zielte in den letzten zwei Jahrzehnten fast ein Fünftel aller weltweiten Cyber-Vorfälle auf Finanzunternehmen ab.Viele dieser Verstöße waren spektakulär. So berichtete beispielsweise CNN 2019 über einen Vorfall, bei dem: ein Hacker sich Zugriff auf 100 Millionen Kreditkartenanträge und Konten von Capital One verschaffte. Dies war  einer der größten Verstöße der jüngeren Geschichte mit erheblichen finanziellen Folgen. Gegen Capital One wurden Bußgelder in Höhe von 80 Millionen USD verhängt, weil die Aufsichtsbehörde OCC feststellte, dass der amerikanische Kreditgeber es versäumt hatte, vor der Migration in die Cloud Risikomanagementpraktiken einzuführen. Weitere  190 Millionen USD musste das Unternehmen im Rahmen eines Sammelklagen-Vergleichs berappen,  um Klagen betroffener Kunden beizulegen.Wenn wir über die finanziellen Folgen von Cybervorfällen nachdenken, fallen uns als Erstes die konkreten Kosten für die Wiederherstellung und Sicherung des Betriebs ein. Hinzu kommen potenzielle Bußgelder. Am schädlichsten und nachhaltigsten sind jedoch die Auswirkungen auf den Ruf einer Marke. Kunden sind zunehmend vorsichtiger, wenn es darum geht, ihre Daten Unternehmen anzuvertrauen, die von einem Verstoß betroffen waren. Ihre Sorge ist berechtigt: Die  aktuelle Studie von ThreatLabz hat ergeben, dass die Datenexfiltration im Vergleich zum Vorjahr um 92,7 % zugenommen hat. Dies zeigt, dass Datendiebstahl Erpressungskampagnen befeuert. Daher ist es verständlich, dass laut demHiscox Cyber Readiness Report 47 % der Unternehmen (branchenübergreifend) angeben, nach öffentlich bekannt gewordenen Cyberangriffen Schwierigkeiten zu haben, neue Kunden zu gewinnen.Gewonnenes Vertrauen ist ein Wettbewerbsvorteil, der jedoch leicht wieder verloren geht. Insbesondere in einem digitalen System, das durch Legacy-Sicherheitsvorkehrungen „geschützt“ wird.Wo herkömmliche Modelle versagenHerkömmliche Sicherheitstools genügen den heutigen Anforderungen in mehrfacher Hinsicht nicht. Sie konzentrieren sich auf den Schutz des Netzwerkperimeters, bieten jedoch nicht genügend Transparenz. Entsprechend wird die Resilienz des Unternehmens nicht im erforderlichen Ausmaß gestärkt.Legacy-Tools wie VPNs, Firewalls und statische Zugriffskontrollen wurden für eine Zeit entwickelt, in der User und Daten sich innerhalb des Netzwerkperimeters befanden. In den heutigen Hybridumgebungen reichen diese Tools nicht mehr aus. Sobald Angreifer den (inzwischen weitgehend imaginären) Perimeter durchbrechen, stoßen sie oft auf wenig Widerstand. Durch laterale Bewegung innerhalb des Netzwerks erhalten sie quasi ungehinderten Zugriff auf Unmengen vertraulicher Daten.Wie steht es um die Transparenz? Es gibt mehrere Gründe, warum Sicherheitsarchitekten, die herkömmliche Setups verwalten, keine transparenten Einblicke erhalten, die sie benötigen, um das Prinzip der minimalen Rechtevergabe durchzusetzen oder schnell auf Anomalien zu reagieren. Eine davon ist eine flache Netzwerkarchitektur, bei der Tools wie Firewalls Schwierigkeiten haben, zwischen normalem und verdächtigem Traffic zu unterscheiden. Ohne Traffic-Segmentierung ist es schwierig, eine kontextbezogene Überwachung durchzuführen, die die erforderliche Transparenz bietet. Ein weiteres Problem ist der umfassende Netzwerkzugriff, bei dem die Aktivitäten der verbundenen User nicht überwacht werden, sodass verdächtiges Verhalten unbemerkt bleiben kann. Das Fazit? Die Sicherheit sollte eine ständige Echtzeit-Transparenz sämtlicher User- und Geräteaktivitäten gewährleisten.Resilienz ist bei Zscaler zu einer Art Mantra geworden, und das aus gutem Grund. Wenn wir uns Technologien und Prozesse ansehen, geht es bei Resilienz nicht nur um Sicherheit, sondern auch um Reaktion: Wie schnell können Sie einen Angriff eindämmen und den Betrieb wieder aufnehmen? Wir leben in einer Zeit, in der Angriffe unvermeidlich sind und kein Unternehmen dagegen immun ist. Deshalb ist es kurzsichtig, nur auf Bedrohungserkennung zu setzen. Leider ist die Realität, dass traditionelle Sicherheitsmodelle einen Angriff kaum eindämmen können, was sich verheerend auf die Geschäftskontinuität auswirkt.Zero Trust als kostensparende StrategieAngesichts der finanziellen Folgen eines Sicherheitsverstoßes bin ich der Meinung, dass Zero Trust als kostensparende Investition betrachtet werden kann. Wir sollten uns von der Vorstellung verabschieden, dass Zero Trust „nur“ ein Sicherheits-Upgrade ist. Die Umstellung auf diesen zukunftsfähigen Ansatz hat vielmehr mit der Implementierung einer soliden Strategie zur Geschäftsresilienz zu tun.Die Kapitalrendite wirkt sich auf verschiedene Weise aus. Im Falle eines Verstoßes wird  unbefugter Zugriff auf übergeordnete Systeme blockiert, da jede Zugriffsanfrage überprüft wird. Ein weiteres Merkmal der Zero-Trust-Architektur ist die Mikrosegmentierung, die die Angriffsfläche reduziert und gleichzeitig die Durchsetzung von Zugriffsrichtlinien in Echtzeit ermöglicht, ohne andere Arbeitsabläufe zu stören.Wenn eine Zero-Trust-Architektur auf KI basiert, besteht der ROI darin, den oft überlasteten Sicherheitsarchitekten Zeit zu sparen. Sie können Anomalien erkennen, sobald sie auftreten, und die manuelle Triage reduzieren, da Eindämmungsmaßnahmen automatisiert werden können. Das Ergebnis sind schnellere Reaktions- und Wiederherstellungszeiten bei Vorfällen, was zu niedrigeren Behebungskosten beiträgt. Der Kostenvorteil ist insbesondere in regulierten Umgebungen wie dem Finanzdienstleistungsbereich von Bedeutung, wo die Geldstrafen für die Nichteinhaltung von Datenschutzbestimmungen hoch ausfallen können.Cybersicherheit ist nicht mehr nur ein technisches Problem. Wie dieser Blogbeitrag zeigt, sind die Kosten für Fehler nicht auf einen Dollarbetrag beschränkt. Es ist eng mit dem Ruf Ihrer Marke verbunden und beeinflusst Ihre Fähigkeit, den Kunden gut zu bedienen.  Für Entscheidungsträger, denen der Schutz ihres Markenwerts und der Geschäftskontinuität am Herzen liegt, ist die Umstellung auf Zero Trust der logische nächste Schritt. Ein Festhalten an Legacy-Lösungen ist mit unhaltbaren Risiken und Kosten verbunden.Ist Ihr Unternehmen bereit für die Implementierung von Zero Trust? Wenn Sie die Transformation gerade erst in Angriff nehmen, empfehlen wir Ihnen, sich vor der Investition in eine Zero-Trust-Architektur die Checkliste von Zscaler ansehen. Sie gibt Ihnen einen Überblick darüber, was Sie benötigen, um die nötige Kontrolle und Resilienz für die Navigation in unserer komplexen Welt zu gewährleisten. Details finden Sie in unserem einschlägigen E-Book  und auf unserer Seite für Finanzdienstleister.]]></description>
            <dc:creator>Marc Lueck (CISO Northern Europe, Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Resilienz neu gedacht: Das nächste Kapitel beginnt]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/resilience-reimagined-the-next-chapter-begins</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/resilience-reimagined-the-next-chapter-begins</guid>
            <pubDate>Tue, 14 Oct 2025 15:49:08 GMT</pubDate>
            <description><![CDATA[Im vergangenen Jahr verfolgte Zscaler in EMEA ein zentrales Ziel: Unternehmen dabei zu unterstützen, Resilienz auf- und auszubauen. Damit meinen wir die besondere Fähigkeit eines Unternehmens – und auch jedes einzelnen Mitarbeitenden und seines Teams –, Rückschläge auszuhalten, Abläufe flexibel anzupassen und selbstbewusst weiterzumachen. Kurz: die Fähigkeit, auch bei Gegenwind voranzukommen und an jeder Herausforderung zu wachsen.Ob in unserem wegweisenden Report zum Resilienz in Ihr IT-Ökosystem oder im beliebten Quiz zur persönlichen Resilienz: Unsere bisherigen Einblicke richteten sich vor allem nach innen. In Zeiten dauerhafter Umbrüche haben wir analysiert, wie Unternehmen ihre Strategien und Abläufe robust aufstellen, welche proaktiven Technologien dabei entscheidend sind und wie sie die mentale Stärke ihrer Mitarbeitenden gezielt ausbauen.Je näher das Jahresende rückt, desto wichtiger wird echte Cyberresilienz. Kaum ein Tag vergeht ohne Meldung über den nächsten Sicherheitsvorfall. Betroffen sind Unternehmen jeder Branche und Größe. Und die Folgen solcher Angriffe wirken heute deutlich länger nach als erwartet. Kein Wunder also, dass Resilienz auf dem jüngsten Gartner Security &amp; Risk Management Summit ein zentrales Thema war und weiterhin im Fokus von Unternehmen, Branchenanalysten, Regierungen und internationalen NGOs wie dem Weltwirtschaftsforum steht.CISOs und ihre Teams stehen nach wie vor an vorderster Front – in einer Welt, in der Cyberangriffe so sicher sind wie das Amen in der Kirche. Der nächste Vorfall? Unvermeidbar. Und er kann aus jeder Richtung einschlagen. In den heutigen, stark vernetzten Umgebungen stößt eine rein interne Resilienzstrategie schnell an ihre Grenzen.Unternehmen müssen sich nun mit folgenden Herausforderungen auseinandersetzen:Turbulente Marktkräfte: Neue Regeln, Forderungen nach mehr digitaler Souveränität und ökonomische Turbulenzen verlangen rasche Anpassungen im Betrieb, doch veraltete Architekturen bleiben dabei hoffnungslos zurück.Neue Technologien: Künstliche Intelligenz verändert die Bedrohungslage bereits drastisch, und Quantencomputing steht vor der Tür. Beide Faktoren offenbaren Sicherheitslücken, die Unternehmen gefährlich treffen könnten.Komplexe Betriebsstrukturen: Dezentrale Arbeitsmodelle, externe Mitarbeitende und instabile Lieferketten eröffnen Angreifern neue Ansatzpunkte.Deshalb richten wir unseren Fokus nun nach außen. Wir beleuchten, wie Unternehmen ihre Resilienzstrategien anpassen, um auf externe Faktoren zu reagieren – sei es, um Marktturbulenzen abzufedern, sich gegen Risiken durch neue Bedrohungen und Technologien zu wappnen oder die wachsende Komplexität von Userbasis und Lieferketten in den Griff zu bekommen.Unser Standpunkt ist klar: Unternehmen müssen von Grund auf resilient werden. Das bedeutet, reaktive Ansätze zu überdenken und Resilienz als proaktives, zentrales Prinzip zu verankern – eines, das Unternehmen befähigt, sowohl interne als auch externe Bedrohungen zu antizipieren, ihnen standzuhalten und sich schnell zu erholen.Im nächsten Kapitel geht es darum, neue Blickwinkel einzubeziehen. Dabei geht es um die Erkenntnis, dass Resilienz weit über die Sicherheit hinausgeht – sie ist ein zentraler strategischer Faktor. Ziel ist es, Führungskräfte mit den nötigen Informationen und Tools zu unterstützen, damit sie Resilienz ganzheitlich in die Stuktur ihres Unternehmens einbetten können.Dranbleiben lohnt sich also. Wir präsentieren neue Perspektiven, aktuelle Forschungsergebnisse und handfeste Tipps, damit Sie Ihre Cyberresilienzstrategie über die Grenzen Ihrer bisherigen Strukturen hinaus ausbauen können. Und falls Sie einige unserer früheren Beiträge verpasst haben, können Sie jetzt eine Kopie besorgen.Die Zukunft ist unvorhersehbar. Doch mit dem passenden Mindset und einem durchdachten Konzept wird Resilienz zu Ihrem stärksten Wettbewerbsvorteil.&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Die Souveränitätsdebatte gibt Kunden die Kontrolle über ihre Daten (zurück)]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-sovereignty-debate-gives-customers-control-over-their-data</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-sovereignty-debate-gives-customers-control-over-their-data</guid>
            <pubDate>Thu, 02 Oct 2025 12:54:21 GMT</pubDate>
            <description><![CDATA[Unternehmen haben schon immer Netzwerke gebaut, um Daten auszutauschen. Allerdings möchte die IT-Abteilung heute mehr denn je in der Lage sein zu verifizieren, ob der Datenaustausch gewünscht ist. Im Zeitalter des Zero Trust-Ansatzes kommt dazu ein Trusted Broker ins Spiel, der zwischen die im Austausch befindlichen Entitäten geschaltet wird und sicherstellen kann, dass nur autorisierte und überprüfte Kommunikation zustande kommt. Durch diese sehr vereinfachten Grundlagen von Zero Trust entsteht das Vertrauen des abgesicherten Datenaustausches.Aufbauend auf dem Least Privileged Access stellen Unternehmen sicher, das sich nur gewünschte Parteien im Austausch befinden. Der Grundtenor bei Zero Trust lautet dementsprechend, dass Unternehmen die Kontrolle über ihre Datenströme (zurück) erhalten können und dazu heute auch mehr denn je der Bedarf besteht. Die Souveränitätsdebatte hat die Notwendigkeit für einen solchen Zero Trust-Ansatz neu entfacht. Unternehmen müssen dafür Sorge tragen, dass sie nur das miteinander kommunizieren lassen, was auch kommuniziert werden soll. Angefacht durch eine Vielzahl an Cybervorfällen und Fremdzugriffen etwa über Lieferketten müssen sich Unternehmen eingestehen, dass sie den Überblick darüber, wer mit wem oder was kommunizieren darf, im Zuge der Digitalisierung vielleicht eingebüßt haben. Umso dringlicher wird heute der Ruf laut, verifizieren zu können, welche digitalen Entitäten - seien es User, Apps, Workloads, IoT/OT-Geräte, Zweigstellen, Fabriken oder Drittparteien – miteinander im Austausch stehen dürfen.Resilienz und Souveränität gehen Hand in HandDie Themen Resilienz und Souveränität werden oft in einem Atemzug genannt. Auch wenn beide Bereiche ganz oben auf der Agenda der Unternehmensverantwortlichen stehen, muss dennoch klar sein, dass diese Begriffe nicht gleichgesetzt werden dürfen. Grundlage für eine starke IT-Resilienz ist der umfängliche Einblick in alle autorisierten Datenströme, um unerwünschte Kommunikation vom Eindringen in oder Abfließen aus Unternehmensumgebungen abzuhalten. Es gilt Schaden abzuwenden, der durch lahmgelegte Systeme oder entwendete Daten entstehen könnte. Auch Souveränität dient dazu, die Hoheit der Daten unter Kontrolle zu halten. Unternehmen möchten jederzeit wissen, wo ihre Daten vorgehalten werden oder wer oder was darauf Zugriff hat. Beide Male steht die Datensouveränität im Mittelpunkt der Aufmerksamkeit.Doch genau an diesem Punkt müssen sich Unternehmen selbst hinterfragen. Haben sie bereits jetzt alles Nötige für eine allumfängliche Transparenz und Nachvollziehbarkeit ihrer Datenströme veranlasst? Diese Frage tut sich nicht zuletzt im Zeitalter der künstlichen Intelligenz auf, die ganz neue Möglichkeiten schafft, dass Daten über KI-Tools oder -Agents abfließen können. In einem ersten Schritt müssen sich Unternehmen demnach die Frage stellen, ob sie granularen Einblick haben, wo geschäftskritische und sensible Daten vorgehalten werden. In einem nächsten Schritt gilt es zu hinterfragen, wer darauf Zugriff hat, unter Einbeziehung aller möglichen Integrationen mit der Lieferkette oder von Drittparteien. Und schließlich müssen sie auch für KI-Governance sorgen und festhalten, auf welche Daten neue Tools und Anwendungen zugreifen können.Erst nach diesen internen Hausaufgaben kann der Blick auf das große Ganze erfolgen und das übergeordnete Souveräntitätsverständis definiert werden, bei dem es analog um die Fragestellung geht, wer von außerhalb Zugriff auf welche Datenbestände erhält und wie ein souveränes Angebot aus europäischer Hand aussehen kann, ohne auf die Vorteile der Cloud zu verzichten.&nbsp;Die übergeordnete strategische Bedeutung digitaler SouveränitätFür Schwarz Digits ist digitale Souveränität von zentraler Bedeutung. In der strategischen Ausrichtung und operativen Umsetzung bedeutet dies, diese Fähigkeit zu entwickeln beziehungsweise auszubauen; und zwar dort, wo es strategisch sinnvoll und betriebswirtschaftlich darstellbar ist, eine weitgehende technologische Unabhängigkeit und größere Kontrolle über digitale Systeme und Daten zu erlangen und zu wahren.&nbsp;Auf einer übergeordneten Betrachtungsebene stellt digitale Souveränität somit sicher, dass alle digitalen Komponenten und Dienste, die für die wirtschaftliche oder staatliche Autonomie von wesentlicher Bedeutung sind, weitgehend selbstbestimmt und im rechtlichen und operativen Rahmen des eigenen Handelns genutzt werden. Wir erkennen an, dass eine vollständige Autonomie für die meisten Staaten weder technologisch noch wirtschaftlich realisierbar ist. Ein solches Lagebild hilft jedoch bereits, sich kritischer Abhängigkeiten bewusst zu werden und entsprechende strategische und operative Vorbereitungen zu treffen.Die zentrale Herausforderung Europas und die Dringlichkeit einer umfassenden StrategieVor diesem Hintergrund stellt die Gewährleistung einer größtmöglichen Unabhängigkeit der digitalen Souveränität eine zentrale Herausforderung für Europa dar. Um die digitale Transformation erfolgreich und im Einklang mit unseren europäischen Werten zu gestalten, ist es unerlässlich, sich bewusst zu machen, wo und wie unsere Daten gesammelt und gespeichert werden und wer darüber Kontrolle ausübt. Die Tatsache, dass viele dieser Daten von nicht-europäischen Unternehmen gehostet und verwaltet werden, birgt&nbsp;erhebliche rechtliche, wirtschaftliche und sicherheitspolitische Herausforderungen. Insbesondere die Nutzung von Cloud-Diensten, die unter den rechtlichen Strukturen ihrer Herkunftsländer, wie dem US Cloud Act, agieren, gefährdet die Vorgaben der digitalen Souveränität für relevante Daten im deutschen Datenraum. Es wird daher immer dringlicher,&nbsp;eine umfassende Strategie für ein souveränes digitales Europa zu entwickeln&nbsp;– eine Strategie, die sowohl die globalen Dimensionen der Digitalisierung berücksichtigt als auch die Wahrung europäischer Werte und Standards sicherstellt. Dieser Balanceakt ist anspruchsvoll, aber essenziell für die Zukunft unserer Gesellschaft.Diese Fragestellungen werden von Zscaler auf der ITSA gemeinsam mit STACKIT am Dienstag, den 7. Oktober 2025&nbsp; um 15.15 Uhr aufgegriffen. Im Forum in Halle 6 wird unter dem Titel&nbsp;“Resilience &amp; Sovereignty in an Era of Cloud: Crafting a Vision for What’s Next” diskutiert, worauf es bei einem solchen Angebot ankommt. Zscaler verdeutlicht, wie Unternehmen durch Zero Trust digitale Resilienz und Souveränität stärken können – mit Fokus auf Datenhoheit, Governance und Compliance. Im Mittelpunkt der Präsentation stehen praxisnahe Strategien für eine sichere, zukunftsfähige IT-Architektur.Für die Fortführung der Diskussion freut sich Zscaler über Ihren Besuch in Halle 6 am Stand 422.]]></description>
            <dc:creator>Kevin Schwarz (Principal, Transformation Strategy)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Vom Klick zur Krise: Der Blick hinter die Kulissen realer Angriffsszenarien]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/from-click-to-crisis-a-look-behind-the-scenes-of-real-attack-scenarios</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/from-click-to-crisis-a-look-behind-the-scenes-of-real-attack-scenarios</guid>
            <pubDate>Tue, 30 Sep 2025 07:29:27 GMT</pubDate>
            <description><![CDATA[Ob Ransomware, Social Engineering oder kompromittierte Drittanbieter-Accounts: Moderne Cyberangriffe zielen häufig auf den vermeintlich schwächsten Punkt ab – den User Account. Oft beginnt alles mit einem harmlosen Klick und endet in einem Systemausfall, Datendiebstahl oder Erpressungsszenario. Wird über IT-Sicherheit gesprochen, liegt der Fokus allerdings zu oft auf Servern, Webanwendungen oder anderen sichtbaren Angriffspunkten im Netzwerk. Dabei wird ein entscheidender Faktor vernachlässigt: Der User und dessen Arbeitsrechner teilen in der Netzwerkumgebung die gleichen Rechte wie direkt erreichbare Assets. Diese Vernachlässigung öffnet Türen für Angriffe, die sich gezielt auf Mitarbeitergeräte konzentrieren und damit die Grundlage für gravierende Zwischenfälle bilden.Der User: Ein nach wie vor unterschätztes Ziel für AngriffeAktuelle Daten von ENISA und Mitre zeigen, dass bis zu 75 % aller erfolgreichen Cyberangriffe ihren Ursprung auf den Geräten der User nehmen. Oft beginnt alles mit einem Social Engineering-Angriff, etwa über raffinierte E-Mails, USB-Droppings oder gefälschte Support-Anfragen innerhalb der Supply-Chain. Ein Klick genügt, um Malware-Akteuren Zugang zum System zu verschaffen. Das eigentliche Ziel solcher Angriffe liegt jedoch nicht bei den Mitarbeitenden selbst, sondern bei kritischen Daten im Netz und dazu sind Berechtigungen auf weitere Systemressourcen erforderlich. Nach der Erstinfektion eines User Accounts bewegen sich Angreifer deshalb lateral durch das Netzwerk auf der Suche nach wertvollen Informationen. Die Strategie ist klar: Ein einziger Account dient als Ausgangspunkt, um nach und nach Zugriff auf geschäftskritische Informationen und Systeme zu erhalten.Für eine solche Kompromittierung der IT-Umgebung gewinnen KI-gestützte Social Engineering-Angriffe an Bedeutung. Dank modernster Technologien lassen sich Stimmen heute täuschend echt simulieren und werden für Vishing (Voice-Phishing) eingesetzt. Hinter einer Voicemail oder WhatsApp-Nachricht mit dringendem Anliegen, vermeintlich von einer Führungsperson im Unternehmen, steckt ein hochentwickelter KI-basierter Angriff, der mit wenigen Minuten frei verfügbarer Aufzeichnung einer Originalstimme erstellt wurde. Solche Szenarien zeigen deutlich, wie verwundbar bestehende Schutzmechanismen sind – insbesondere, wenn Menschen als Angriffsvektor genutzt werden.Zero Trust: Trennung und Überprüfung von DatenverkehrDiese aktuellen Angriffsszenarien erfordern ein Umdenken in der Planung von Sicherheitslösungen. Dabei ist einerseits die Minimierung der potentiellen Angriffsfläche entscheidend, und andererseits die Limitierung von Zugriffsberechtigungen auch im Rahmen von Drittanbieter-Zugriff und ein Zero Trust-Ansatz bietet sich als Lösung an. Zero Trust basiert auf einem Prinzip der kontinuierlichen Überprüfung aller Zugangsberechtigungen auf Basis von Richtlinien. Jeder Datenstrom, jede Interaktion – sei es zwischen Usern, Geräten oder Diensten – wird vorab validiert. Änderungen im Verhalten, der Geoposition oder der sicherheitsrelevanten Bedingungen können zu reiner sofortigen Re-Evaluierung führen. Ein entscheidender Vorteil ergibt sich hier aus granularen Zugangsberechtigungen zu den jeweils benötigten Daten oder Anwendungen anstelle eines vollständigen, direkten Netzwerkzugangs. Der Least Privileged Access verhindert die&nbsp;Ost-West-Kommunikation im Netzwerk.&nbsp;Selbst wenn ein Angreifer durch geschicktes Social Engineering mit Hilfe von KI Zugriff auf ein User System erhält, hilft die granulare Segmentierung von Zero Trust bei der Eindämmung des Angriffs. Da der User durch ein solches Sicherheitsmodell nicht mehr im Netzwerk exponiert ist und keinen ungehinderten Zugang auf alle Ressourcen besitzt, kommt der Angreifer nicht weiter. Es bleibt ihm der Zugriff auf kritische Informationen in anderen Teilen des Netzwerks verwehrt. Darüber hinaus helfen KI-gesteuerte Abwehrmethoden dabei, den Angreifer auf dem kompromittierten System zu erkennen - etwa wenn Zugriffsversuche auf unerlaubte Ressourcen gestartet werden.Im Zusammenspiel einer&nbsp; Zero Trust-Architektur mit Browser Isolation erzielen Organisationen zusätzlich eine bessere Sicherheitslage, die eine Erstinfektion unterbinden kann. Denn auch&nbsp;der Schutz vor einer Infizierung durch externe Quellen ist Bestandteil der Zero Trust-Prinzipien. So können zum Beispiel über&nbsp;Browser Isolation potenzielle Gefahren durch Webseiten von Endgeräten ferngehalten werden. Webinhalte können so isoliert auf der Zero Trust-Plattform ausgeführt werden, der User oder die Drittpartei wird vor einer&nbsp;Malware-Infektion geschützt.&nbsp;Darüber hinaus können zusätzliche Schutzmaßnahmen wie granulare Sicherheitspolicies, Watermarking oder Sicherheitschecks zum Einsatz kommen. Beispielsweise lässt sich erkennen, ob ein Mitarbeitender unterwegs, etwa bei Starbucks, aus dem Hotel oder Zug, auf sensible Daten zugreifen möchte. Statt den Zugriff pauschal zu blockieren, könnten flexible Mechanismen greifen: Daten werden mit klaren Watermarks versehen, um Missbrauch zu identifizieren. Diese Granularität ermöglicht es, Sicherheit zu implementieren, ohne den User in seiner Arbeit erheblich einzuschränken.Vom Klick zur KriseIm Rahmen der Präsentation “Vom Klick zur Krise: Wahre Geschichten moderner Angriffe auf Mitarbeitergeräte”&nbsp;auf der ITSA 2025 demonstriert Zscaler&nbsp;am Donnerstag, den 9. Oktober 2025 um 10:45 Uhr in Forum A, Halle 6, wie praxiserprobte Sicherheitstechnologien der Zero Trust Exchange-Plattform im Zusammenspiel mit Browser Isolation und KI-Unterstützung die Angriffsfläche minimieren und die Unternehmenssicherheit nachhaltig stärken.&nbsp;Im Fokus stehen dabei typische Schwachstellen in der Kommunikation zwischen Geräten, Diensten und Menschen und wie&nbsp;architektonische als auch organisatorische Entscheidungen&nbsp;dazu beitragen, die Angriffsfläche einer Organisation deutlich zu verringern.Bei weiterem Informationsbedarf können Interessenten ihre persönliche Whiteboard-Session auf der ITSA unter diesem Link buchen.&nbsp;&nbsp;]]></description>
            <dc:creator>Gerd Giese (Architect, Solutions Consulting)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Das Zusammenspiel von Zero Trust und SecOps gewinnt an Bedeutung]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/at-itsa-2025-zscaler-will-demonstrate-how-ai-powered-secops-and-a-zero-trust-architecture-optimize-corporate-security</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/at-itsa-2025-zscaler-will-demonstrate-how-ai-powered-secops-and-a-zero-trust-architecture-optimize-corporate-security</guid>
            <pubDate>Fri, 26 Sep 2025 12:34:54 GMT</pubDate>
            <description><![CDATA[Auf der ITSA 2025 zeigt Zscaler, wie KI-gestützte SecOps und eine Zero Trust-Architektur die Unternehmenssicherheit optimieren.Ob Malware, Ransomware, Phishing und neuerdings sogar KI-gestützte Angriffe auf Unternehmensressourcen: Die Bedrohungen auf moderne IT-Infrastrukturen entwickeln sich rasant weiter und stellen Unternehmen vor komplexe Herausforderungen. Sicherheitsteams müssen Angriffe nicht nur in Echtzeit erkennen und darauf reagieren, sondern auch kontinuierlich ihre SecOps-Lösungen daraufhin anpassen. Dabei werden präventive, automatisierte und Plattform-basierte Architekturansätze immer wichtiger. Genau hier setzt die Kombination aus KI-gestützter SecOps und einer Zero Trust-Architektur an.In einer solch dynamischen Bedrohungslandschaft reicht es nicht mehr aus, reaktiv zu agieren. Sicherheitsteams müssen Angriffe nicht nur in Echtzeit erkennen und bekämpfen, sondern auch ihr SecOps-System ständig optimieren und kontinuierlich weiterentwickeln. KI-gestützte Prozesse bei Threat Management, Detection und Response entlasten Sicherheitsteams durch Automatisierung von Abläufen und beschleunigte Analysen. Eine Symbiose aus einem Zero Trust-Modell, Data Lakes für den Kontext und einer SecOps-Plattform bilden die Grundlage, um modernen Bedrohungen gegenüberzutreten.Synergie von Zero Trust und KI in einer neuen SecOps-ÄraZero Trust gilt mittlerweile als unverzichtbarer Grundpfeiler moderner Sicherheitsstrategien. Das Prinzip verfolgt einen Denkansatz, bei dem keinerlei Interaktion der User ohne Überprüfung vertraut wird. Jedes System, jede Person und jedes Gerät – egal, ob innerhalb oder außerhalb des Netzwerks – wird grundsätzlich als potenziell unsicher betrachtet, bevor eine Verifizierung erfolgt ist. Doch die Implementierung dieses Modells ist im global vernetzten IT-Ökosystem ohne die Unterstützung von künstlicher Intelligenz kaum denkbar. KI tritt an, die zugrunde liegenden Prozesse zu automatisieren, SecOps auf eine neue Ebene zu heben und gleichzeitig Entscheidungen schneller und fundierter zu treffen.Sicherheitsteams benötigten künstliche Intelligenz zur Bewältigung des Alltags: Die schiere Menge an Datenströmen, Log-Daten, Alerts und Bedrohungsanalysen verlangt nach einer Automatisierung, die nicht nur effizient, sondern auch lernfähig ist. Künstliche Intelligenz und Machine Learning übernehmen diese Aufgabe und entlasten menschliche Operatoren durch automatisierte Analysen der Datenmengen, gezieltere Anomalieerkennung und dem Aufzeigen von Schwachstellen – oft in einem Bruchteil der Zeit, die ein menschlicher Operator benötigen würde.&nbsp;Eine starke Symbiose von MDR und Zero TrustMit der Integration von Red Canary in die Cloud-Sicherheitsplattform von Zscaler zeichnet sich eine klare Vision für die Zukunft von Managed Detection &amp; Response (MDR) ab. KI-gestützte Workflows verbinden die Schnelligkeit und Präzision maschineller Analyse mit menschlichem Fachwissen. Durch die riesigen Mengen hochwertiger Daten aus der Sicherheits-Cloud mit dem weltweiten Einblick des ThreatLabz Security Research-Teams wird ein hochintegriertes, agentenbasiertes Security Operations Center (SOC) ermöglicht, das KI-gesteuerte Workflows mit menschlicher Expertise verbindet.Durch die Kombination der Zscaler Zero Trust Exchange mit Red Canarys MDR-Lösung wird der gesamte Datenfluss konsolidiert, zentralisiert und für SecOps zugänglich macht. Hier laufen Sicherheitsdaten von Third Party-Systemen wie Firewalls, Identitäts- und Endpoint-Lösungen zusammen, die dann durch KI aggregiert und analysiert werden. Diese Plattform fungiert als umfassende „Data Fabric“, die nicht nur alles miteinander verbindet, sondern auch die Grundlage für smarte Sicherheitsentscheidungen bietet. Basierend auf den gewonnenen Erkenntnissen können die Zero Trust Policies dynamisch angepasst werden. Gleichzeitig wird durch automatisierte Bereinigungsprozesse die Reaktionszeit auf Vorfälle drastisch reduziert.Hand in HandZero Trust und KI-basierte SecOps stellen ein kraftvolles Duo dar, das Unternehmen durch die heutige Bedrohungslandschaft navigieren kann. Die Synergie der beiden Ansätze ermöglicht ein dynamisches, adaptives und sicheres Security Operations-Modell, das sowohl gegen klassische als auch gegen moderne Cyberbedrohungen gewappnet ist. Unternehmen, die dieses Zusammenspiel adaptieren, legen den Grundstein für eine zukunftssichere IT-Umgebung und verschaffen sich einen entscheidenden Wettbewerbsvorteil.&nbsp;Auf der ITSA 2025 wird am&nbsp;Donnerstag, den 9. Oktober 2025 um 10:45 in Forum A, Halle 6 demonstriert, wie die Symbiose von Zero Trust und SecOps-Plattformen funktioniert, fragmentierte Ansätze ablöst und Prävention und Reaktion gleichzeitig abdeckt.&nbsp;Sie wollen uns lieber persönlich treffen? Unter diesem Link können Sie Ihre persönliche Whiteboard-Session auf der ITSA buchen.]]></description>
            <dc:creator>Manuel Beicht (Transformation Architect)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Die Psychologie des Vertrauens in der Cybersicherheit (2. Teil): Die Illusion des vertrauenswürdigen Perimeters]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-psychology-of-trust-in-cybersecurity-part-2-the-illusion-of-the-trusted-perimeter</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-psychology-of-trust-in-cybersecurity-part-2-the-illusion-of-the-trusted-perimeter</guid>
            <pubDate>Thu, 11 Sep 2025 06:59:30 GMT</pubDate>
            <description><![CDATA[Herkömmliche Sicherheitsmodelle basierten auf der Idee eines vertrauenswürdigen Perimeters: Alles innerhalb dieses Perimeters galt als vertrauenswürdig und das Ziel bestand darin, externe Bedrohungsakteure fernzuhalten. Aber dieses Modell ist nicht mehr gültig.Heutzutage können User über eine Kombination aus Firmen- und Privatgeräten von jedem beliebigen Standort aus Daten auf verschiedenen Plattformen zugreifen. Einen Perimeter im klassischen Sinn gibt es nicht mehr. Damit ist auch die Sicherheit innerhalb des Netzwerks zur Illusion geworden.Netzwerkarchitekten wird das zunehmend bewusst. Sie müssen sicherstellen, dass die wachsende Zahl von Usern und Geräten eine Verbindung zum Netzwerk herstellen kann. Dazu gehört auch die Verbindung nicht verwalteter IoT-Geräte, die aufgrund ihrer faktischen Unsichtbarkeit eine kritische Schwachstelle darstellen, wenn das Netzwerk durch ein Legacy-Tool wie ein VPN „geschützt“ wird.Und diese kritische Schwachstelle wird immer größer, da wir große Fortschritte bei der Vernetzung von Fahrzeugen, intelligenten Gebäuden und dergleichen erleben. Tatsächlich wird prognostiziert, dass sich die weltweite Anzahl der IoT-Geräte von19,8 Milliarden in diesem Jahr auf über 40,6 Milliarden im nächsten Jahrzehnt mehr als verdoppeln wird.Je weiter sich das IoT verbreitet, desto größer werden die Schwachstellen in bestehenden Netzwerken. IoT-Geräte laufen mit proprietärer Software, die oft nicht in ältere Netzwerk- und Sicherheitstools integriert werden kann, wodurch Ihre Abwehrmaßnahmen gefährdet werden. Darüber hinaus nimmt die Zahl der IoT-Geräte schneller zu als die Zahl der Mitarbeiter, wodurch sich die Angriffsfläche rapide vergrößert. Da KI mittlerweile in diese Geräte integriert ist und der Trend immer mehr in Richtung agentbasierte KI geht, ist die traditionelle perimeterbasierte Architektur völlig unzureichend.Diese veralteten Architekturen ermöglichen keine granulare Anpassung von Zugriffsberechtigungen – ein kritischer Fehler angesichts der anhaltenden Bedrohung durch laterale Bewegungsfreiheit. Sie sind einfach nicht ausgereift genug, um Berechtigungen richtig anzupassen. Stattdessen wird Usern und Geräten mit verifizierten Anmeldedaten umfassender Netzwerkzugriff gewährt. Wenn diese Anmeldedaten kompromittiert werden, kann ein Hacker, der sie verwendet, Ihren „vertrauenswürdigen Perimeter“ umgehen und ohne weitere Überprüfungen auf alle intern gehosteten vertraulichen Daten zugreifen.Das Fazit? Vertrauen Sie nie, überprüfen Sie immer, denn einen sicheren Perimeter um Ihr Netzwerk gibt es nicht mehr.Die dringende Notwendigkeit einer psychologischen NeuausrichtungEs mag sich zunächst zynisch anhören: Niemals vertrauen, immer überprüfen. Dieser Grundsatz des Zero-Trust-Ansatzes wurde jedoch nicht aus Paranoia geboren, sondern aus Vorsicht. Er wird von der Erkenntnis getragen, dass Vertrauen zwar in menschlichen Beziehungen von wesentlicher Bedeutung ist, in digitalen Systemen jedoch verdient und kontinuierlich überprüft werden muss.Vor diesem Hintergrund können wir mit Sicherheit sagen, dass Zero Trust nicht nur ein technisches Framework ist. Zero Trust ist ein Mentalitätswandel. Wir müssen unsere digitale Umgebung vor der Bedrohung durch unseren eigenen Impuls schützen, dem Vertrauten zu vertrauen. Wir müssen die Entscheidung für Vertrauen in eine objektive statt subjektive Handlung umwandeln, um die Gewissheit zu haben, dass Sicherheitsrichtlinien konsequent angewendet werden. Durch die Durchsetzung des Zugriffs nach dem Prinzip der minimalen Rechtevergabe und die Durchführung einer kontinuierlichen Authentifizierung verwandelt Zero Trust die Sicherheit von einer statischen Barriere in ein dynamisches, adaptives System.Dieser Ansatz entspricht der heutigen Realität, in der Cyberangriffe so gut wie unvermeidlich sind. Er trägt der Einsicht Rechnung, dass es früher oder später zu einem Verstoß kommen wird und dass interne Akteure (ob böswillig oder kompromittiert) genauso gefährlich sein können wie externe.Natürlich ist E-Mail-Phishing nicht die einzige Möglichkeit, wie ein kompromittierter interner Akteur Daten offenlegen kann. Mitarbeiter, die öffentlich zugängliche KI-Tools zur Beschleunigung von Arbeitsaufgaben verwenden, können unwissentlich vertrauliche Daten weitergeben. Und angesichts der unterschwelligen Vertrautheitsverzerrung ist es auch weniger wahrscheinlich, dass sie mithilfe von KI verfeinertes Social Engineering erkennen. Hacker nutzen außerdem KI, um ihre Bemühungen zu automatisieren, was ihnen in kürzerer Zeit und mit weitaus weniger Aufwand größere Möglichkeiten und mehr Raffinesse bietet. Dadurch steigt die Wahrscheinlichkeit erfolgreicher Angriffe.Fest steht, dass KI eine allgegenwärtige Bedrohung darstellt, die das Vertrauen letztendlich womöglich vollkommen untergraben wird. Sie hat jedoch auch gute Seiten. Wir müssen unsere Sicht auf KI ändern: Sie kann ein mächtiger Verbündeter sein, der dazu eingesetzt wird, Sicherheitsrichtlinien objektiv durchzusetzen, ohne dass Vertrauen dabei eine Rolle spielt.Umsicht statt ParanoiaFür Entscheidungsträger in Unternehmen ist der Weg nach vorn klar. Die Bedrohungen entwickeln sich weiter. Der Perimeter ist verschwunden. Und die Psychologie des Vertrauens muss sich entsprechend weiterentwickeln.Zero Trust bietet eine Möglichkeit, genau das zu erreichen – nicht indem Vertrauen abgelehnt wird, sondern indem es für eine Welt neu definiert wird, in der Kontrolle durch kontinuierliche Überprüfung die neue Grundlage der Sicherheit bildet.Weitere Informationen finden Sie unter: https://explore.zscaler.com/emea-financial-services/SIE SIND IN EINER STARK REGULIERTEN BRANCHE TÄTIG? Für Unternehmen in streng regulierten Sektoren, insbesondere imFinanzdienstleistungssektor , ist die Einführung von Zero Trust jetzt von entscheidender Bedeutung. Wenn Sie gerade erst mit Ihrer Reise beginnen, sehen Sie sich die Checkliste von Zscaler mit den Funktionen an, die Sieberücksichtigen sollten, bevor Sie in eine Zero-Trust-Architektur investieren. Es gibt Ihnen einen Überblick darüber, was Sie brauchen, um die notwendige Kontrolle und Belastbarkeit für die Navigation in unserer komplexen Welt zu entwickeln. Details in unserem eBook zu Finanzdienstleistungen2Statista, Anzahl der Internet of Things (IoT)-Verbindungen weltweit von 2022 bis 2023, mit Prognosen von 2024 bis 2034. Juni 2025. Verfügbar bei: https://www.statista.com/statistics/1183457/iot-connected-devices-worldwide/]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[“AI-liens at the Workforce“ and how new trust frameworks provide risk management strategies in the wake of Agentic AI]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/ai-liens-at-the-workforce-and-how-new-trust-frameworks-provide-risk-management-strategies-in-the-wake-of-agentic-ai</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/ai-liens-at-the-workforce-and-how-new-trust-frameworks-provide-risk-management-strategies-in-the-wake-of-agentic-ai</guid>
            <pubDate>Tue, 09 Sep 2025 08:16:30 GMT</pubDate>
            <description><![CDATA[From Agentic AI to Geopolitics: Zscaler’s Agenda for the Gartner Risk &amp; Security Management SummitLater this month, I’ll be delivering a keynote at the Gartner Risk &amp; Security Management Summit EMEA, where Zscaler will be a Premier Plus Sponsor. Hosted in London between 22-24 September, the annual summit convenes the region’s top security minds to tackle the latest challenges in the evolving digital landscape – where a complex mix of cyber threats, AI, regulatory shifts, and sovereignty demands are all converging to put pressure on business operations.As a global leader in Zero Trust transformation, Zscaler has a wealth of insights on how organizations can adapt to a rapidly changing risk environment, while driving innovation and safeguarding operational resilience. And we’ll be delivering these insights in a variety of different forums across the three days of the Summit.&nbsp;On September 22nd, I’ll be taking to the mainstage for “AI-liens in the Workforce: A New Trust Model with the Introduction of Advanced NHI.” This session will explore how agentic AI is reshaping enterprise ecosystems – driving accelerated automation and enhancing decision-making, but also creating an urgent need for new trust frameworks and more comprehensive risk management strategies. Attendees will leave with actionable insights on how to evolve their trust models to navigate autonomous AI environments securely and adaptively.The following day in our theatre keynote, “Driving Business Leadership with AI, Cellular, and Zero Trust,” Zscaler’s innovations team will reveal how these three technologies are revolutionizing both enterprise security and operational agility. The audience will learn how cutting-edge AI-driven frameworks, secure cellular connectivity, and transformative Zero Trust architectures are enabling businesses to turn risk into strategic advantage. Armed with this knowledge, they will also discover practical strategies to protect distributed environments, future-proof their security architecture, and embrace innovation on the edge in a digital-first world.In addition to the two keynotes, Casper Klynge, our VP of Government Affairs EMEA, will host an exclusive roundtable on day one titled “Navigating the Geopolitics of Tech: Should the Private Sector Be the Custodians of the Transatlantic Relationship?” This invitation-only session will explore the evolving interplay between tech dependency and cybersecurity, set against the backdrop of Europe’s digital sovereignty debate. Focused on the private sector’s role in particular, the roundtable aims to spark meaningful dialogue on the intersections between geopolitics, technology, and private-sector leadership.The Gartner Risk &amp; Security Management Summit offers those of us in the industry an invaluable forum to engage with forward-thinking professionals and security innovators. Whether you are a CIO, CISO, governmental leader, or strategic decision-maker, I believe Zscaler has a compelling perspective to share on how to approach the most pressing challenges facing enterprises today, from managing risk in AI-driven ecosystems to navigating geopolitical complexities. We look forward to exploring groundbreaking ideas, fostering collaboration, and contributing to meaningful discussion.Join us at the Zscaler booth, attend our keynotes, and connect with our executive team at the cocktail reception on Monday, September 22nd. Reach out for your personal invitation&nbsp;here.Together, let’s shape the future of resilience, AI innovation, and security leadership.&nbsp;]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Named a Leader in The Forrester Wave™ Secure Access Service Edge Solutions, Q3 2025: The Future is Zero Trust]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscaler-named-leader-forrester-wave-tm-secure-access-service-edge-solutions-q3</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscaler-named-leader-forrester-wave-tm-secure-access-service-edge-solutions-q3</guid>
            <pubDate>Mon, 08 Sep 2025 17:26:16 GMT</pubDate>
            <description><![CDATA[We are thrilled to announce that Zscaler has been named a Leader in The Forrester Wave™: Secure Access Service Edge Solutions, Q3 2025.We are especially proud to be positioned with the highest score in the Strategy category, which we see as a reflection of our unique zero trust approach.To us, this recognition from Forrester reinforces our long-held conviction: true SASE isn't about routing packets or bolting products together; it’s about securely connecting the right user to the right application, based on policy, without ever placing them on the corporate network. This principle is the driving force behind the world's largest security cloud: the&nbsp;Zscaler Zero Trust Exchange™. The Problem with First-Generation SASEMany early SASE offerings simply repackaged old problems. They focused on optimizing network paths by stitching together disparate SD-WAN products with a separate security stack (SSE). This "good enough" approach left enterprises still owning and operating a complex WAN, managing separate policies for network and security, and struggling with visibility gaps. It remained a fundamentally network-centric architecture, creating complexity, cost, and a larger attack surface—the very issues a true SASE platform should eliminate. A New Architectural Approach: The Zero Trust ExchangeOur answer is a completely different architectural model. The Zero Trust Exchange is a cloud-native platform that acts as an intelligent switchboard between users, devices, and applications.Instead of routing packets, it focuses on one thing: brokering secure, policy-based connections.All traffic—from user laptops, guest Wi-Fi, servers, and IoT/OT systems—is forwarded to the nearest Zscaler cloud point of presence.The Zero Trust Exchange delivers comprehensive security services inline. This includes a full SSE stack—from&nbsp;ZTNA and&nbsp;SWG to&nbsp;CASB,&nbsp;DLP, and&nbsp;Firewall-as-a-Service (FWaaS)—to inspect 100% of traffic and apply granular zero trust policies.Secure connections are brokered directly between the entity and the application, eliminating lateral threat movement and completely removing the need to expose your infrastructure to the internet. The Transformative Benefits of Zero Trust EverywhereBy leveraging the Zero Trust Exchange platform, organizations unlock immediate value:Radically Simplified IT: Liberate IT by moving away from owning and operating the WAN. The Zero Trust Exchange enables you to transform traditional offices into secure,&nbsp;cafe-like branch experiences. Provision new sites with full, cloud-delivered security in minutes, not months.Massively Reduced Costs: Stop paying for expensive, private MPLS circuits and move to cost-effective direct internet access. Move from a burdensome CapEx model to a predictable OpEx model, significantly lowering total cost of ownership.Superior Security: Reduce the attack surface to zero by making users and branches invisible to the internet. With full SSL/TLS inspection and consistent policy enforcement for every connection, you can prevent lateral threat movement and stop attacks before they start.A Phenomenal User Experience: Connect users directly and quickly to cloud apps without the latency of backhauling traffic. The result is a faster, more productive experience for every user, at every location. The Future is Zero TrustThe industry is at an inflection point. Owning and managing a network to secure your enterprise is no longer sustainable in a cloud-first world. The future is built on a true zero trust architecture.Being named a Leader in The Forrester Wave™ for SASE Solutions—and recognized with the top score in the strategy category—reinforces our conviction that zero trust simplicity is the proven path forward. We are proud to be named a leader among top solutions in the market and will continue to innovate to help our customers.To learn more, access a complimentary copy of The Forrester Wave™: Secure Access Service Edge Solutions, Q3 2025 report.Discover how the Zscaler Zero Trust Exchange can transform your network and security.&nbsp;Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. For more information, read about Forrester’s objectivity&nbsp;here .]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Die Psychologie des Vertrauens in der Cybersicherheit: Vorsicht ist nicht gleich Paranoia]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-psychology-of-trust-in-cybersecurity-it-is-not-paranoia-it-is-prudence</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-psychology-of-trust-in-cybersecurity-it-is-not-paranoia-it-is-prudence</guid>
            <pubDate>Thu, 04 Sep 2025 12:58:38 GMT</pubDate>
            <description><![CDATA[Ein angeborenes Vertrauen in das Vertraute ist eine sehr menschliche Reaktion. Am Arbeitsplatz ist das Vertrauen gegenüber Kollegen, internen Systemen und Unternehmensnetzwerken quasi selbstverständlich.Doch in der heutigen Welt, in der alles miteinander vernetzt wird, kann dieser Instinkt gefährlich irreführend sein. Unternehmensnetzwerke sind anfälliger als je zuvor – und das nicht nur, weil Cloud-First-Hybridumgebungen die Angriffsfläche enorm vergrößert haben.Es gibt drei weitere Gründe, warum wir eine erhöhte Verwundbarkeit erleben. Die Gefahr einer Kompromittierung ist größer als je zuvor, da Hacker auf KI zurückgreifen, um immer raffiniertere Social-Engineering-Kampagnen zu starten. Zudem ist es für einen böswilligen Akteur einfach, sich mit verifizierten Anmeldedaten anzumelden und dann unbemerkt lateral durch das Netzwerk zu bewegen. Und schließlich wird ein besorgniserregender Anstieg der Vorfälle von Ransomware-Angriffen bzw. Datenexfiltration beobachtet.Das sind schlechte Nachrichten für jede Branche. Erst recht für jene, die bereits zu den am stärksten angegriffenen Branchen weltweit zählen.1 Angesichts der hohen Datenqualität und starken Regulierung des Sektors ist es keine Überraschung, dass sich auch Finanzdienstleister in dieser Gruppe befinden.Für etablierte Finanzmarken ist der Status als Traditionsunternehmen ein zweischneidiges Schwert. Sie haben eine unglaubliche Erfahrung angehäuft, mit der die digital ausgerichteten Herausforderer nicht mithalten können. Allerdings haben jahrelange nachträgliche Sicherheits- und Leistungsupdates ihrer veralteten technischen Infrastruktur zu komplexen, unhandlichen Umgebungen geführt. Dies bedeutet weniger Agilität und ein höheres Cyberrisiko. Die Komplexität wird noch verstärkt durch das riesige Lieferketten-Ökosystem des Sektors – und die Tatsache, dass jeder Schritt darin streng reguliert ist.Der Finanzdienstleistungssektor steht vor erheblichen Herausforderungen, insbesondere für die größeren, etablierten Banken, die sich agilen, digital ausgerichteten Herausforderern stellen müssen. Unternehmen dieser Branche und aller stark regulierten Sektoren müssen ihre Sicherheitsmaßnahmen dringend verstärken – und zwar schnell.Dabei geht es nicht um Panikmache, sondern darum, der standardmäßigen Vertrauenshaltung entgegenzuwirken, die allzu oft zu einem riskanten Fehler werden kann. Es geht um die Förderung umsichtiger Sicherheitsmaßnahmen, um sicherzustellen, dass Kontrolle und Resilienz erhalten bleiben.Wir vertrauen dem Vertrauten.Sagt Ihnen der Begriff der kognitiven Heuristik etwas? Der Begriff stammt aus der Kognitionswissenschaft und beschreibt die mentalen Abkürzungen, die wir wählen, wenn wir schnell oder mit begrenzten Informationen Entscheidungen treffen müssen. Es gibt verschiedene Arten von Abkürzungen, aber die, die wir am digitalen Arbeitsplatz wirklich kennen müssen, ist die Vertrautheitsheuristik. Dabei geht es darum, angesichts der Ungewissheit das Vertraute zu suchen. Es handelt sich um eine voreingenommene Beurteilung, der viele von uns verfallen.In einem Unternehmensumfeld kann eine Vertrautheitsheuristik dazu führen, dass wir ohne Zögern Vertrauen schenken. Beispielsweise glauben wir instinktiv, dass interne E-Mails „sicherer“ sind als externe, wir gehen davon aus, dass unsere eigenen Unternehmenssysteme standardmäßig sicher sind, oder wir glauben, dass unsere Kollegen weniger wahrscheinlich eine Bedrohung für unsere Cybersicherheit darstellen.Genau diese Annahme, dass alles Interne sicher ist, machen sich Cyberkriminelle zunutze. Unbefugte Netzwerkzugriffe können das Ergebnis einer externen Bedrohung sein. Häufiger sind sie darauf zurückzuführen, dass die Anmeldedaten von Mitarbeitern unbeabsichtigt offengelegt werden, und zwar zumeist per E-Mail. Im Jahr 2024 untersuchte unser ThreatLabz-Team 1,2 Milliarden Datentransaktionen über Anwendungen und zentrale Geschäftskanäle wie E-Mail. Die in unserem @RiskReport zur Datensicherheit 2025veröffentlichten Ergebnisse verdeutlichen das Ausmaß des Problems: Bei fast 104 Millionen E-Mail-Transaktionen wurden vertrauliche Unternehmensdaten (einschließlich Quellcode und Finanzinformationen) weitergegeben.Es ist bezeichnend, dass E-Mail-Phishing auch im Jahr 2025 trotz unseres Wissens über die Gefahren mangelnder Sicherheitsmaßnahmen noch immer einer der wirksamsten Angriffsvektoren ist. Auch hier liegt es an der menschlichen Neigung, dem Vertrauten zu vertrauen: Eine interne E-Mail von einem scheinbar legitimen Absender landet im Posteingang eines Mitarbeiters, der wie angewiesen auf einen Link klickt und damit einem Hacker Tür und Tor öffnet. Der Angreifer bewegt sich dann lateral durch das Netzwerk und bleibt in einer herkömmlichen Sicherheitsumgebung, in der Vertrauenswürdigkeit nicht überprüft, sondern vorausgesetzt wird, unentdeckt. Die Frage ist: Kann man jemals von der Vertrauenswürdigkeit einer Entität ausgehen?Den 2. Teil dieser Serie zur Psychologie des Vertrauens in der Cybersicherheit finden Sie hier. Wenn Sie mehr über Cybersicherheit im Finanzwesen erfahren möchten, laden Sie das E-Book hier herunter.1Statista, Verteilung der Cyberangriffe auf die weltweiten Branchen im Jahr 2024. Mai 2025. Verfügbar unter:https://www.statista.com/statistics/1315805/cyber-attacks-top-industries-worldwide/]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Salesloft Drift Supply Chain Incident: Key Details and Zscaler’s Response]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/salesloft-drift-supply-chain-incident-key-details-and-zscaler-s-response</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/salesloft-drift-supply-chain-incident-key-details-and-zscaler-s-response</guid>
            <pubDate>Sat, 30 Aug 2025 19:42:18 GMT</pubDate>
            <description><![CDATA[At Zscaler, protecting your data and maintaining transparency are core to our mission to secure, simplify and accelerate businesses transformation. We are committed to keeping you informed about key developments that may impact your organization. What Happened?Zscaler was made aware of a campaign targeted at Salesloft Drift (marketing software-as-a-service) and impacting a large number of Salesloft customers. This incident involved the theft of OAuth tokens connected to Salesloft Drift, a third-party application used for automating sales workflows that integrates with Salesforce to manage leads and contact information.The scope of the incident is confined to Salesloft’s Drift app and does not involve access to any of Zscaler's products, services or underlying systems and infrastructure.As part of this campaign, unauthorized actors gained access to Salesloft Drift credentials of its customers including Zscaler. Following a detailed review as part of our ongoing investigation, we have determined that these credentials have allowed limited access to some Zscaler Salesforce information. What Information May Be Affected?The information accessed was limited to commonly available business contact details for points of contact and specific CRM related content, including:NamesBusiness email addressesJob titlesPhone numbersRegional/location detailsZscaler product licensing and commercial informationPlain text support case header content from certain cases limited to the following fields: Case Number, Opened, Preferred Contact Number, Description, Priority, Case Owner, Preferred Time Zone, Case Status, Type, Customer Case Reference, Product, Last Activity, Subject, Resolution Notes, Reason for Hand Off, Current Status / Next Plan of Action, Data Collected, Issue Summary / Business Impact, and Requestor. No attachments, files, or images were included in the incident, as it solely involved structured text data from case headers.After extensive investigation, Zscaler has currently found no evidence to suggest misuse of this information. If anything changes, we will provide further communications and updates. What Did Zscaler Do?&nbsp;Zscaler acted swiftly to address the incident and mitigate risks. Steps taken include:Revoking Salesloft Drift’s access to Zscaler’s Salesforce dataOut of an abundance of caution, rotating other API access tokens.Launching a detailed investigation into the scope of the event, working closely with Salesloft to assess and understand impacts as they continue investigating.Implementing additional safeguards and strengthening protocols to defend against similar incidents in the future.Immediately launched a third party risk management investigation for third party vendors used by Zscaler.Zscaler Customer Support team has further strengthened customer authentication protocol when responding to customer calls to safeguard against potential phishing attacks. What You Can DoAlthough the incident’s scope remains limited (as stated above) and no evidence of misuse has been found, we recommend that customers maintain heightened vigilance. Please be wary of potential phishing attacks or social engineering attempts, which could leverage exposed contact details.Given that other organizations have suffered similar incidents stemming from Salesloft Drift, it’s crucial to exercise caution regarding unsolicited communications, including emails, phone calls, or requests for sensitive information. Always verify the source of communication and never disclose passwords or financial data via unofficial channels.Zscaler Support will never request authentication or authorization details through unsolicited outreach, including phone calls or SMS. All official Zscaler communications come from trusted Zscaler channels. Please exercise caution and report any suspicious phishing activity to security@zscaler.com. Need Assistance or Have Questions?If you have concerns or need additional support, Zscaler’s Customer Success and Support teams are available via&nbsp;help.zscaler.com or your existing Zscaler support channels.&nbsp;You can also reach out to our Security team at&nbsp;driftincident@zscaler.com.Your security is our top priority. Thank you for your continued partnership with Zscaler.Update: Blog updated on September 3rd, 2025 to include support case information impacted by the incident. Blog updated on September 7th, 2025 to include additional support case information impacted by the incident.]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler’s Commitment to Responsible AI]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/zscalers-commitment-to-responsible-ai</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/zscalers-commitment-to-responsible-ai</guid>
            <pubDate>Thu, 21 Aug 2025 02:00:00 GMT</pubDate>
            <description><![CDATA[There was a question recently posted about how Zscaler trains AI models. We wanted to provide accurate information on how we train our AI models. Zscaler does not use customer data to train its AI models. Each customer owns their proprietary information or personal data (user names, email addresses, device IDs, etc.) in the Zscaler logs. We only use data or metadata that does not contain customer or personal data for AI model training.Organizations want to safely unlock the value of artificial intelligence and machine learning, but they also need to ensure that this does not come at the expense of privacy, security and compliance controls. This becomes particularly charged when we consider the potential of training AI using proprietary data or personal data.&nbsp;The foundation of our architectural approach is data containment. Every customer’s tenant is self-contained: their data lives within their tenancy, under their control. Sensitive information never leaves that boundary. This is not just a principle: it’s a design choice by Zscaler that governs how we build, scale, and deliver value. This is how Zscaler can ensure that customer data is never used to train an AI model beyond a given tenant.Within that contained environment, customers can harness the power of their own data. Logs, transactions, and telemetry generated by their use of our platform are used to improve outcomes for their organization alone. This means customers benefit directly from their own signals, whether it’s for risk modeling, AI copilots, or policy enforcement, without having to trade away autonomy or privacy or security.Leveraging Data ResponsiblyA common concern is whether preserving privacy limits the ability to benefit from large-scale insights. Here’s where an important distinction comes in: personal data remains private, secured, and not included as model training data while metadata that does not contain proprietary information or personal data is used to enrich each tenant’s environment.Think of it like water flowing through pipes: while the content of the water belongs entirely to each customer, the knowledge of how the water moves (its pressure, velocity, and patterns) can inform the system without ever extracting the water itself. Similarly, Zscaler’s platform can use traffic patterns and telemetry that does not contain personal data, and aggregated signals to strengthen AI models and improve the overall environment while still enforcing the guarantee that sensitive data never leaves a customer’s tenancy.Zscaler’s ability to learn from over half a trillion transactions per day leverages a network effect without sacrificing customers’ privacy (specifically and technically a logarithmic utility). Customers benefit from the sheer breadth of signals Zscaler processes because it allows us to recognize global threat trends and provide resilient, real-time defenses. At the same time, customer-specific data is never exposed outside of respective tenancy.Instead, Zscaler leverages the aggregate knowledge of signals across the platform, never tied to an individual customer’s data, to strengthen detection and modeling. Each tenant gains from this global intelligence while maintaining strict boundaries for its own data.To re-emphasize: customers’ proprietary information or personal data in the Zscaler logs is never shared outside of the customer boundary.&nbsp;A Core Security Principle Rooted in Shannon’s Information TheoryThere is deep alignment of our approach with Shannon’s Information Theory, a topic I will delve into more in a future blog. Zscaler views data along a continuum that stretches from low entropy, high-information states such as clear text, through progressively higher entropy forms like ciphertext, and ultimately to encryption and the extreme of pure randomness. At Zscaler, our architectural principle begins with data control. Sensitive classes of data never leave a tenant boundary in any form including customer data. Beyond that, we apply a disciplined progression toward maximum entropy wherever possible, ensuring that only the minimum necessary information is exposed. Techniques such as anonymization, tokenization, de-identification, and other data strategies are not applied as afterthoughts but as deliberate mechanisms to elevate entropy while still preserving just enough structure for essential operations, such as AI modeling and training at the platform level. This approach ensures that the system operates at the highest entropy state consistent with utility, minimizing information exposure while maximizing privacy, trust, and compliance. This is how Zscaler unlocks the value of artificial intelligence but still ensures privacy and compliance for all customers.]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Resilienz ist für Unternehmen und Mitarbeiter unerlässlich]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/it-is-time-to-take-resilience-personally</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/it-is-time-to-take-resilience-personally</guid>
            <pubDate>Thu, 24 Jul 2025 15:23:42 GMT</pubDate>
            <description><![CDATA[In einem kürzlich erschienenen Blogbeitrag habe ich Resilienz als zentrales Thema für Zscaler untersucht. Zu diesem Zeitpunkt hatten wir bereits unsereStudie zum Resilience Factor veröffentlicht, die den aktuellen Stand der Cyber-Resilienz-Strategien globaler Unternehmen beleuchtet und einen proaktiveren „Resilience by Design“-Ansatz als nächsten Cybersicherheits-Imperativ vorstellt. Ich gab aber auch einen Ausblick auf unsere weitere Arbeit zur individuellen Resilienz.Sie fragen sich vielleicht, warum die individuelle Resilienz der Mitarbeiter für ein Technologieunternehmen überhaupt eine Rolle spielt.Zusammenhang zwischen resilienten Mitarbeitern und GeschäftskontinuitätWir bei Zscaler sind davon überzeugt, dass die besten Cyber-Resilienz-Strategien drei Schlüsselelemente beinhalten: Prozesse, Technologie und Menschen. Obwohl Unternehmen allzu gut wissen, wie sich Technologie und Betriebsprozesse auf Kontinuitätsstrategien auswirken, wird dieses letzte Element häufig übersehen.Und das ist ein schwerwiegender Fehler. Resilienz ist eine innere Stärke, die Einzelpersonen und Teams darauf vorbereitet, Herausforderungen zu meistern und sich schnell von Sicherheitsvorfällen zu erholen. In der heutigen Realität, in der Cyberangriffe unvermeidlich sind – unsere früheren Untersuchungen zeigten, dass 60 % der IT-Führungskräfte innerhalb der nächsten sechs Monate mit einem Cybersicherheitsversagen rechnen –, ist individuelle Resilienz für Mitarbeiter an vorderster Front der Cybersicherheit unverzichtbar geworden. Und es gibt einen nachgewiesenen Zusammenhang zwischen dieser Eigenschaft und den Geschäftsergebnissen. Studien haben sogar gezeigt, dass resiliente Mitarbeiter im Vergleich fast doppelt so häufig motiviert und produktiv sind.Kurz gesagt: Führungskräfte, die in die Stärkung der Resilienz ihrer Mitarbeiter und Teams investieren, verschaffen sich einen Wettbewerbsvorteil. Wir bei Zscaler möchten unseren Kunden diesen Vorteil ermöglichen und ihnen helfen, trotz potenzieller Bedrohungen und Störungen zuversichtlich zu wirtschaften.Stärkung der Resilienz in der BelegschaftWie gestalten Sie also Ihr Arbeitsumfeld, um sowohl die eigene als auch die Resilienz Ihrer Belegschaft zu fördern, und gegen welche Herausforderungen müssen Ihre Mitarbeiter resilient sein? Um Ihnen den Einstieg zu erleichtern, haben wir zwei wichtige Ressourcen erstellt:Individuelle Resilienz als Geschäfsfaktor: Warum Unternehmen in die Belastbarkeit ihrer Mitarbeiter investieren müssen: Zunächst haben wir uns mit den professionellen Coaching-Experten von Positive Intelligence zusammengetan, um eine praxisorientierte Roadmap zur Stärkung der Resilienz als zentrale Führungskompetenz zu entwickeln. Ergänzt durch wertvolle Erkenntnisse aus unserer Umfrage unter über 200 IT- und Sicherheitsexperten in der gesamten EMEA-Region konzentriert sich der Fahrplan auf die Integration von Resilienz in persönliche Gewohnheiten, Teamdynamik und Unternehmenskultur.Personal Resilience Superpower Quiz: Um die Resilienz-Persönlichkeitstypen in Ihrer Belegschaft zu identifizieren, haben wir das „Personal Resilience Superpower Quiz“ entwickelt. In nur 12 kurzen Fragen entdecken Sie Ihren individuelle Resilienz sowie mögliche Vorsichtsmaßnahmen und Strategien zur Verbesserung der Zusammenarbeit. Neben individuellen Ratschlägen erfahren Sie auch, wie die vier Resilienztypen zusammenarbeiten können, um ein Team zu bilden, das auf alles vorbereitet ist.Als Cool Commander spricht mich die Beschreibung, Probleme direkt anzugehen und Herausforderungen selbstbewusst und kontrolliert anzugehen, definitiv an. Daher war es interessant zu lesen, wie wichtig andere Personas wie der Practical Problem Solver sein können, um mein stürmisches Vorgehen auf Plausibilität zu prüfen.Der Zukunft entgegenSeit über 18 Jahren bietet Zscaler Cloud-basierte Services zum Schutz von Unternehmensnetzwerken und deren Daten an. Aufgrund dieser umfassenden Erfahrung wissen wir aus erster Hand, welchen Risiken Unternehmen ausgesetzt sind, wenn sie nicht in die Resilienz ihrer Mitarbeiter an vorderster Front investieren und ihr Unternehmen nicht ausreichend schützen.Wir sehen unsere Aufgabe in diesem Jahr darin, Unternehmen bei der Plannung und Umsetzung einer Resilienzstrategie zu unterstützen – darunter verstehen wir die einzigartige Fähigkeit eines Unternehmens (oder auch eines einzelnen Mitarbeiters), Widrigkeiten standzuhalten, Betriebsabläufe anzupassen und voller Zuversicht bereit zu sein, jede Herausforderung zu meistern. 47 % der IT-Fachkräfte gaben an, dass sie sich nur bedingt resilient fühlten, und 51 % glaubten, dass ihr Unternehmen keinen Wert auf individuelle Resilienz legt. Daher halten wir dies für dringend erforderlich.&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Unlock Ransomware Resilience and AI Defense with Zscaler at Black Hat 2025]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/unlock-ransomware-resilience-and-ai-defense-zscaler-black-hat-2025</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/unlock-ransomware-resilience-and-ai-defense-zscaler-black-hat-2025</guid>
            <pubDate>Mon, 21 Jul 2025 21:33:29 GMT</pubDate>
            <description><![CDATA[Black Hat 2025 is right around the corner, and this year’s agenda hits at the core of what cybersecurity professionals care about the most: stopping AI-driven ransomware by leveraging AI to stay ahead of evolving threats.Whether you are on the front lines of incident response, working to secure hybrid environments or researching the next wave of cyberthreats, Zscaler product and industry leaders will be available to provide insights and showcase new solutions and strategies designed for real-world defense.Here is what you can expect from Zscaler at Black Hat 2025:&nbsp; Experience Zero Trust Everywhere at Booth #3551Cybersecurity isn't a spectator sport - so get hands on with Zscaler at booth #3551. Our in-booth sessions and live demos are designed to help you understand how AI and automation are being used to stop ransomware in real time, reduce attack surfaces and protect sensitive data.Meet face-to-face with our product experts and technology partners to explore new capabilities in inline data protection, threat containment and exposure management. If you are tackling challenges around endpoint visibility or identity-driven policy, the Zscaler booth is the place to ask questions, test solutions and get the technical depth you are looking for.&nbsp; From Risk to Readiness: Combat the Latest Ransomware Extortion Surge with the Zero Trust Defense PlaybookThe intersection of AI and ransomware is reshaping the cybersecurity battlefield – and Deepen Desai, Zscaler CSO, and Dr. Brett Stone-Gross, Zscaler’s Distinguished Security Researcher, are diving into the heart of it. Join their session on Wednesday, August 6 at 2:35 PM to uncover the latest ransomware surge and how organizations can respond with resilient frameworks and smarter defenses. This powerhouse duo will go beyond theory, showcasing the latest research and delivering practical guidance on how to combat AI-driven ransomware.&nbsp; Your Path to AI-Powered Security Starts Here: Schedule a Meeting with Zscaler at Black Hat 2025Transform how you approach cybersecurity by scheduling an on-site meeting with the Zscaler team at Black Hat 2025. Learn how Zscaler addresses emerging threats, boosts operational efficiency, and reshapes security architecture to align with today’s fast-evolving landscape. Tailor the conversation to your unique goals for deploying modern, scalable defenses.Don’t just keep up with cybercriminals—take the lead and visit Zscaler at Black Hat 2025 to discover cutting-edge solutions designed to keep you ahead of the curve.]]></description>
            <dc:creator>Diana Shtil (Sr. Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[A New Chapter for Zscaler in the Heart of London]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/a-new-chapter-for-zscaler-in-the-heart-of-london</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/a-new-chapter-for-zscaler-in-the-heart-of-london</guid>
            <pubDate>Wed, 16 Jul 2025 10:04:45 GMT</pubDate>
            <description><![CDATA[Zscaler has proudly opened the doors to its new EMEA headquarters in London, marking an exciting milestone for the company. Our new home is located on the third floor of the iconic Royal Exchange, a historic building overlooking the Bank of England in the heart of the City district.Originally opened by Queen Victoria in 1844, the Royal Exchange has long been a cornerstone of historic trade and governance. It was the location of the first stock exchange, cementing its role as a global hub for commerce. Over the years, it has witnessed monumental moments, including the proclamation of King Edward VII in 1901 and the announcement of the new Sovereign in 2022. Now in its third iteration, rebuilt after catastrophic fires including the Great Fire of London in 1666, The Royal Exchange stands as a symbol of resilience and reinvention, qualities that closely mirror Zscaler’s mission of empowering customers to overcome challenges and thrive securely in the digital economy.The relocation underscores Zscaler’s dedication to the thriving UK market, which is among the company’s top five regions globally. London’s role as a leading tech hub makes it an ideal base, providing unmatched opportunities to engage with diverse talent, enterprise customers, policymakers, and strategic partners. Being in close proximity to many of our key partners further enhances our ability to collaborate effectively and innovate solutions. This strategic move enables Zscaler to accelerate advancements in cybersecurity, support transformative security initiatives, and strengthen collaboration with customers across EMEA.Beyond serving as Zscaler’s EMEA headquarters, this new space will also act as the primary hub for our Executive Design Center (EDC). EDCs are pivotal in hosting discussions that inspire innovation, foster collaboration, and advance strategic agendas for cyber transformation. Here in the UK, we will leverage the center to deepen relationships with customers and partners, explore new ideas to solve the most pressing cybersecurity and operational challenges, and foster the kind of thought leadership that drives impactful business results.While this move is a celebration of new beginnings, it is also about the hardworking team that drives Zscaler’s success every day. We are proud of our 300+ UK employees and are planning to&nbsp;grow our headcount over the next year, with roles focused on Sales, Marketing, Solution Engineering, Cybersecurity Analysis &amp; Research, Customer Success, and Partner Enablement. At Zscaler, we believe diversity of thought and experience is essential to building exceptional teams. This culture of growth, learning, and impact has earned us distinctions such as the UK’s Best Workplace™ for Employee Development award.The energy within the new space has been palpable as we officially welcomed our teams this week. We look forward to continuing to push boundaries in cybersecurity innovation for our customers across the region. This new office marks a brilliant step forward for Zscaler in EMEA. We’re here to stay, to grow, and shape the future of cybersecurity right from the heart of London.]]></description>
            <dc:creator>Justin Brooks (Area Vice President, Sales - UK&amp;amp;I)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Why Our New London Office Marks a Milestone for Zscaler in EMEA]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/why-our-new-london-office-marks-a-milestone-for-zscaler-in-emea</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/why-our-new-london-office-marks-a-milestone-for-zscaler-in-emea</guid>
            <pubDate>Tue, 15 Jul 2025 11:44:23 GMT</pubDate>
            <description><![CDATA[This week’s London office opening in the amazing Royal Exchange building is big news for not just the UK, but all of EMEA. More than just another address to add to our global footprint, the office represents our long-term commitment to the region as a strategic hub for security innovation, cloud transformation, talent, and customer collaboration. This new and expanded office reflects our ethos as a world-class international company.Previously, Zscaler’s EMEA operations have been distributed across several regional hubs. Now we’re proud to announce that London is the official headquarters for Zscaler in EMEA. This centralization brings together leadership, strategy, sales, and marketing under one roof – creating a vibrant environment for ideation, collaboration, and the delivery of cybersecurity strategies that protect critical data, enable agility, and drive business outcomes at scale.The centerpiece of the new space is something truly special: our first purpose-built European Executive Design Center (EDC) for the region.Until now, our only Executive Briefing Center was located in San Jose, which meant a long flight for EMEA customers looking to make use of it! With the launch of the London EDC, we’re bringing customers that same immersive, hands-on experience – right on their doorstep. This is truly a game-changer. It will allow prospects and customers to see firsthand how Zscaler technology protects and modernizes some of the world’s largest and most complex organizations. More importantly, it will enable them to co-create strategies with our top-tier consultants to solve the most pressing cybersecurity and IT infrastructure challenges facing enterprises and the public sector across EMEA.Some of the key features the EDC offers include:Access to Zscaler’s global innovation roadmapWorkshops on threat intelligence, AI in security, and Zero Trust Everywhere strategyPeer-to-peer customer sessions and best practice sharingEvery detail of the center has been carefully considered – from a dedicated customer entrance and terrace to flexible meeting rooms to accommodate larger gatherings and a private kitchen – ensuring a tailored, high-impact experience for every visitor.For our customers, the EDC ultimately means earlier access to innovations, more localized support, and direct engagement with EMEA leadership.But it is just one milestone in a far broader regional story.EMEA has always been Zscaler’s second-largest market by geography, contributing approximately 30% of our global revenue – with the UK accounting for a significant portion of that. And our presence here continues to expand. Over the past two years, we’ve established offices and customer hubs in key markets such as Germany, France, the Netherlands, and the UAE. We’ve seen significant team growth, supporting everything from go-to-market roles to technical and partner-focused functions. And we’ve built out our partner ecosystem and joint go-to-market programs with regional system integrators and MSSPs.This growth is being driven by a surge in demand from organizations in the region that are accelerating their move to zero trust security. As concerns around threat protection, data sovereignty, operational resilience and more continue to rise, we are&nbsp;scaling our people and infrastructure to meet that demand – locally and effectively.The opening of our London HQ and EDC is a reflection of EMEA’s growing significance in Zscaler’s global operations. It’s a signal of expanded investment in the region’s cybersecurity ecosystem – and a promise to our customers that we’re thinking long-term about how we support them on the journey ahead.We look forward to welcoming our staff and customers to our new home in London.]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[A Transformational Zenith Live EMEA]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/a-transformational-zenith-live-emea</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/a-transformational-zenith-live-emea</guid>
            <pubDate>Thu, 10 Jul 2025 09:39:03 GMT</pubDate>
            <description><![CDATA[As the digital landscape continues to evolve at breakneck speed, Zscaler’s Zenith Live EMEA 2025 proved to be more than just a conference—it was a bold statement about the future of secure digital transformation.&nbsp;From demonstrating our latest AI-powered innovations around segmentation, data security classification, prompt visibility and more, to providing deep dives into securing private LLM deployments and on-prem data environments, the event showcased how Zero Trust Everywhere is no longer a concept—it's a necessity.&nbsp;As was evidenced in the brilliant turnout in Prague, this is something more and more organizations – of every size and industry – are coming to realize. I had the pleasure of spending four days at the show and during that time I witnessed firsthand many lightbulb moments for our attendees – where one of our speakers or even a peer introduced an idea or solution that they hadn’t thought of previously.&nbsp;The key topics of discussion were largely what I had expected them to be. As predicated in my&nbsp;previous blog, data resiliency was a huge talking point for customers, partners and media attendees alike, and especially front of mind given the current macroeconomic climate. But we also saw a great deal of interest in data sovereignty and the different approaches organizations could take to achieving this. Whether the use case is public sector or private, country-level or regional, as sovereign demand only grows more nuanced, so too will the need for security companies like Zscaler to respond.And of course, no conference in 2025 would be complete without a heavy focus on AI. With our recent acquisition of Red Canary to expand our AI-powered security operations, and a whole batch of advanced AI security capabilities announced during Zenith Live AMS, we had a lot to say. And a lot to be proud of. As organizations continue to adapt to the AI era, Zscaler is enabling our customers to adopt cutting-edge AI technologies securely and at scale. Our platform leverages the world’s largest inline security cloud—analyzing over 500 trillion security signals daily. This unmatched volume of real-world telemetry fuels Zscaler’s AI engines, enabling precise threat detection and robust automated security.&nbsp;For newer customers attending the show for the first time from markets such as the Middle East, Africa and Eastern Europe, I hope their time in Prague will have solidified something they were already starting to see – that Zscaler isn’t just a security tool, but a platform for unlocking true transformation outcomes.&nbsp;We’re now in a race to the end of our financial year – but the show has yet again proved to us that our direction is the right one. So why not join us on the journey – we’re here to help you deliver security, resilience and operational agility wherever you need it most.&nbsp;&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The End of Network Guesswork: Cellular Control Made Simple]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/the-end-of-network-guesswork-cellular-control-made-simple</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/the-end-of-network-guesswork-cellular-control-made-simple</guid>
            <pubDate>Fri, 20 Jun 2025 06:14:08 GMT</pubDate>
            <description><![CDATA[Most organizations assume that once a device connects to a cellular network, it’s automatically under control. In reality, that assumption is rarely true. When a SIM card is active and connected, its traffic flows freely across networks and borders with little visibility or control. The result is an illusion of security that leaves organizations exposed to risks and policy violations, especially when they need to enforce compliance based on geography or behaviour.As I outlined in my previous&nbsp;blog, telcos provide a certain layer of control at the network-level, but granular control related to an organization’s specific security policies is often missing from their offering. As a result, most organizations still tend to rely on legacy architectures such as firewalls, VPNs, and backhaul networks to try and fill the gap. Not only do these add complexity and cost, but they often fail to deliver the proactive, zero trust control that today’s cellular environments demand. Once connected, devices are allowed to communicate too freely, violating zero trust principles that require strict verification of every interaction.Zscaler Cellular changes this dynamic entirely by giving organizations granular control of every packet leaving the device. Instead of having to wait for traffic to reach a network hub or firewall, every connection attempt is evaluated and decided upon instantly at the edge. This early decision determines whether the traffic is routed to the internet or a private application, and allows organizations to apply related policy enforcement before the data ever leaves the device. Because the control is integrated at this base level, organizations no longer need to deploy complex infrastructure or configure multiple layers of security. The SIM or eSIM simply activates, and control is live.This approach enables highly granular, context-aware policies to be implemented based on identity, location, behaviour, or risk factors. For example, a SIM can be restricted to operate only within specific countries or regions, preventing unwanted roaming, data transfers or misuse. Anomaly detection capabilities further enhance security by flagging or blocking unusual behaviour, such as attempts to access disallowed resources or connect from unexpected locations. These controls are delivered globally and consistently, ensuring seamless security anywhere in the world without added operational overhead.And I’d underline seamlessly here. What makes Zscaler Cellular truly revolutionary is its simplicity by design. There is no need to manage firewalls, tunnels, or backhaul networks. There is no complex setup or manual intervention required beyond inserting or activating the SIM. The traditional guesswork and delays associated with network security are eliminated. Instead, organizations gain immediate visibility and policy enforcement aligned with zero trust principles, transforming reactive security measures into proactive, intelligent control.This seamless integration of connectivity and zero trust security is made possible by uniting two previously separate domains; connectivity from mobile operators and zero trust frameworks from security providers. Zscaler is the first to bring these together in a unified service, delivering secure, ubiquitous communication with intelligent control.In a world where cellular devices increasingly power critical business functions, Zscaler Cellular offers a decisive step forward in protection. This is zero trust application without complexity - and it’s just the beginning. Because once control is simplified, the next frontier is zero trust everywhere.&nbsp;Learn more about the power of ubiquitous protection in my third and final blog of this series next week.]]></description>
            <dc:creator>Nathan Howe (SVP of Innovation)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Ein Blick in die sichere Zukunft von KRITIS auf der PITS]]></title>
            <link>https://www.zscaler.com/de/blogs/company-news/a-look-into-the-secure-future-of-kritis-at-pits</link>
            <guid>https://www.zscaler.com/de/blogs/company-news/a-look-into-the-secure-future-of-kritis-at-pits</guid>
            <pubDate>Thu, 12 Jun 2025 14:36:42 GMT</pubDate>
            <description><![CDATA[Auf der diesjährigen&nbsp;PITS in Berlin stand das Thema Cyber-Sicherheit als Schlüssel zu nationaler Resilienz im Mittelpunkt. Im Zuge der aktuellen Herausforderungen und Entwicklungen im Bereich der Cybersicherheit wurde die Bedeutung eines ganzheitlichen Cybersicherheits-Managements insbesondere für kritische Infrastrukturen (KRITIS) diskutiert. Sektoren wie der Energiebereich stehen im Visier der Aufmerksamkeit, da Cyberangriffe im schlimmsten Fall die Aufrechterhaltung des öffentlichen Lebens gefährden können. Effektive Strategien zur Risikoanalyse, Überwachung und frühzeitigen Vorfallserkennung gehören auf die Tagesordnung. Doch wie begegnet man als öffentliche Einrichtung oder Organisation diesen Anforderungen, um die Compliance-Anforderungen zu erfüllen und gleichzeitig die Resilienz der IT-Systeme zu verbessern?ISMS als Fundament&nbsp;Im Zentrum vieler Compliance-Vorgaben steht ein Informationssicherheits-Managementsystem (ISMS), das als Grundlage für die Definition und Umsetzung von Sicherheitsmaßnahmen dienen kann. Ein ISMS dokumentiert die Maßnahmen und Prozesse, mit denen Organisationen Risiken minimieren und Sicherheitsstandards durchsetzen können. Auch im Zuge von Zertifizierungen oder Regularien wie NIS2 wird geprüft, ob ein ISMS vorhanden ist und dessen spezifische Anforderungen umgesetzt werden. Hier sind eine klare Struktur und transparente Dokumentation erforderlich. Vor der Risikominimierung muss allerdings die Risikoanalyse erfolgen – und genau an diesem Punkt hakt der Prozess vielfach. Denn für eine umfassende Risikobewertung ist ein ganzheitlicher Einblick in alle Datenströme der relevanten Organisationsbereiche unerlässlich.Transparenz durch EchtzeitüberwachungEine der größten Herausforderungen bei der Risikoanalyse sehen wir im Fehlen von Transparenz. Oft sind Prozesse fragmentiert, verschiedene Datenquellen werden nicht vernetzt, und es fehlt an ganzheitlicher Einsicht. Das Problem: die linke Hand weiß häufig nicht, was die Rechte tut. Ein zentralisierter Ansatz mit einer Sicherheitsplattform bietet hier Vorteile, da Informationen gebündelt, in einen sinnvollen Kontext gesetzt und für unterschiedliche Stakeholder wie Auditoren oder Security-Analysten verfügbar gemacht werden können.&nbsp;Die Zero Trust Exchange-Plattform fungiert hierbei als „Broker“, der die Kommunikation vereinheitlicht und dadurch Risiken präventiv sichtbar machen kann. Mit Hilfe von künstlicher Intelligenz (KI) und maschinellem Lernen können Muster erkannt und Schwachstellen frühzeitig adressiert werden. Durch Einsatz der Plattform ist es möglich, physische und digitale Assets zu identifizieren und deren Interaktionen nachzuvollziehen. Von Endgeräten bis hin zu Datenübertragungen: Ein vollständiges Bild ist der Schlüssel zur Risikoanalyse und die Grundlage für fundierte Entscheidungen zu Abwehrmaßnahmen.Proaktive Vorfallserkennung und ResilienzNeben der präventiven Risikoanalyse ist die proaktive Vorfallserkennung und -bearbeitung essentiell. Durch Echtzeitüberwachung und die kontinuierliche Überprüfung von Sicherheitspolicies können potenzielle Vorfälle identifiziert werden, bevor sie eskalieren und zu Datenverlusten führen. Dies schafft einen entscheidenden Mehrwert: Anstatt auf Ereignisse lediglich zu reagieren, wird Sicherheit aktiv gestaltet und sichergestellt, dass kritische Dienste jederzeit verfügbar bleiben.Die Fähigkeit, Gefahren zu erkennen und automatisierte Gegenmaßnahmen einzuleiten, verstärkt nicht nur die operative Sicherheit, sondern auch die Resilienz einer Organisation. Dies gilt besonders für kritische Infrastrukturen wie Energie- oder Versorgungsbereiche, die für die Sicherheit und das Funktionieren der Gesellschaft unerlässlich sind.Eine ganzheitliche Strategie für CybersicherheitUm den komplexen Anforderungen des öffentlichen Sektors gerecht zu werden, ist eine zentrale, integrierte Plattformlösung entscheidend. Die Kombination aus klarer Risikoanalyse, Echtzeitüberwachung und souveräner Datenkontrolle stellt sicher, dass Behörden und Organisationen ihre IT-Sicherheit auf höchstem Niveau halten können.Mit einem ISMS als Grundlage und innovativen Tools, die Informationen nahtlos verbinden und kommunizieren, legen Unternehmen den Grundstein für Compliance, Resilienz und kontinuierliche Sicherheit. Konkret heißt das, Risiken proaktiv zu adressieren und Vorfälle schnell zu erkennen. Genau solche Ansätze durfte ich auf der PITS diskutieren. Wir waren uns einig, dass der öffentliche Sektor von Vereinheitlichung der IT-Sicherheit und damit einhergehender Transparenz profitieren kann. Heute geht es darum, das Bewusstsein für die Bedeutung eines umfassenden Cyber-Sicherheits-Managements zu stärken.Genau diese Themen stehen in einer Woche wieder auf der Agenda: Wir sehen uns auf der&nbsp;Zenith Live 25 in Prag!]]></description>
            <dc:creator>Gregor Keller (Director Solution Consulting Central &amp;amp; Eastern Europe)</dc:creator>
        </item>
    </channel>
</rss>