<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/">
    <channel>
        <title>News &amp; Announcements | Blog</title>
        <link>https://www.zscaler.com/fr/blogs/feeds/company-news</link>
        <description>Latest news and views from the leading voices in cloud security and secure digital transformation.</description>
        <lastBuildDate>Thu, 10 Sep 2026 22:44:07 GMT</lastBuildDate>
        <docs>https://validator.w3.org/feed/docs/rss2.html</docs>
        <generator>RSS 2.0, JSON Feed 1.0, and Atom 1.0 generator for Node.js</generator>
        <language>fr</language>
        <item>
            <title><![CDATA[AI is Raising the Stakes for the SOC–Here’s What Comes Next]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/ai-raising-stakes-soc-here-s-what-comes-next</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/ai-raising-stakes-soc-here-s-what-comes-next</guid>
            <pubDate>Wed, 09 Sep 2026 10:12:33 GMT</pubDate>
            <description><![CDATA[Security operations has always been overloaded with too many alerts, too many tools, and too little context. The traditional SOC model has focused on endpoint alerts and manual SIEM queries, fed by siloed tools and forcing human correlation and triage at nearly every step. High SIEM ingest costs limit the data organizations can afford to collect and retain, and many of today’s attacks are designed to evade the very controls legacy SOCs depend on.As a result, SOCs are challenged with:Limited scopeOperational complexitySlow response timesAI didn’t create these problems, but it has made solving them far more urgent, by expanding the attack surface and accelerating how att/agentic-secopsackers do recon, exploit gaps, and adapt in real time. Incremental improvements will not be enough; the SOC needs a new foundation.That foundation is Zscaler Agentic SecOps,&nbsp;launching today. Built to help security teams see, reduce, detect, respond, and remediate at machine speed.Everyone is pitching AI. The market is already overcrowded with agentic SOC providers. So why Zscaler? It comes down to four advantages:A single platform that unifies exposure management and threat responseUnmatched inline telemetry across 750 billion daily transactions – providing network, cloud, endpoint, identity, and AI insightsSpecialized AI agents trained on decades of frontline SOC, MDR, and threat hunting experienceClosed-loop inline remediation that contains threats at machine speedPut simply, Zscaler Agentic SecOps is not AI layered onto a broken workflow. It is a new operational foundation for the modern SOC.&nbsp; What Zscaler Agentic SecOps Means for YouThe impact of Zscaler Agentic SecOps is straightforward: less noise, less manual work, faster decisions, and faster containment.Instead of forcing teams to swivel between siloed tools and stitch together fragmented signals, we bring exposure data, threat detections, investigation context, and response actions into one operational flow. Exposure and threat teams can see what matters sooner, understand it faster, and act with greater confidence.The outcome is a more effective SOC. Analysts spend less time triaging ambiguous alerts and more time focusing on confirmed risk. Security leaders gain broader visibility across endpoint, identity, cloud, SaaS, and AI activity without relying on incomplete, high-cost data pipelines. Organizations can respond to threats in real time, using automated, human-guided, or hybrid actions that help contain incidents before they spread. Faster response, lower risk, without growing headcount. Zscaler Agentic SecOps – Architected for Modern ThreatsZscaler Agentic SecOps unifies proactive exposure management, advanced detections, AI-powered investigation and response, and adaptive remediation in a single platform. This holistic approach gives security teams faster, more accurate analysis and response to active threats.Just as with zero trust, architecture matters, and Zscaler has built our Agentic SecOps from the ground up to meet the moment, with an architecture that:Unifies your data: We combine Zscaler and third-party insights to assess risk more accurately. Zscaler sees 750 billion daily transactions across network, identity, endpoint, cloud, and AI activity. Because Zscaler operates inline on live traffic, it can observe threats as they happen—not just reconstruct them after the fact. We enrich that real-time visibility with critical third-party telemetry and context across identities, assets, exposures, and alerts.Applies advanced detections: We surface the threats that matter most with 7,500+ tuned analytics cultivated over a decade of ThreatLabz research and Red Canary MDR expertise. And we’re not sending you false alarms – we have validated those detections at 99.6% accuracy.Creates a security context graph: We use our Data Fabric for Security to harmonize, deduplicate, correlate, and enrich that data, creating the entity relationships that enable us to separate real risk from noise.Activates specialized AI agents: We automate triage, investigation, verdicts, and remediation. But remember: AI is very much a garbage in/garbage out exercise – strong outcomes depend on good inputs. By operating on clean, harmonized data from the context graph, our agentic workflows deliver better results. Plus, our specialized agents have been trained and continuously tuned on more than a decade of frontline SOC, MDR, and threat hunting experience.Delivers clear insights in our exposure and threat management solutions: We connect what is risky, what is happening, and what action should come next. Security teams can prioritize exposures before they are exploited; detect threats across endpoint, identity, cloud, and AI environments; investigate with richer context; and respond through automated, human-triggered, or hybrid workflows. Our expert threat hunting and MDR services enable our customers to scale their SOC, with expert human assistance steeped in a decade of finding threats in Zscaler and third-party telemetry.&nbsp;Closes the loop: To ultimately reduce risk, integrations with Zscaler and third-party inline controls drive automatic or human-assisted responses, appropriate to the level of risk. We can quarantine files, restrict access, isolate browser sessions, block traffic, and take other nuanced steps to contain threats in real time.&nbsp; Our SecOps SolutionsModern security operations teams are being asked to defend a faster, broader, more complex attack surface with workflows that were already under strain before AI. Zscaler SecOps solutions are built to change that, bringing proactive and reactive security capabilities together into a unified approach that helps teams reduce risk, detect threats with greater precision, and respond faster.&nbsp;The Zscaler&nbsp;Agentic SOC sits at the heart of our solution, correlating insights and unifying the response. It shifts the SOC from endless alert analysis to decisive action, helping analysts focus, analyze faster, and respond with greater confidence.&nbsp;Zscaler&nbsp;Exposure Management helps security teams get ahead of risks before they can turn into incidents that need a response. By contextualizing and prioritizing exposures – and automating remediation workflows – we help customers reduce their attack surface in a way that scales. As AI gets better at identifying security gaps, the volume of exposures will rise faster than any team can manage with spreadsheet-driven processes. Exposure Management is how organizations stay ahead of that curve instead of constantly reacting to it.Deception&nbsp;adds another critical layer: fast, lightweight defense designed to catch attackers early and especially tuned to find and contain AI attacks. Our decoys create a blanket of tripwires across your environment, detecting adversaries as they move and engage before they can do real damage. Deception turns the speed and parallelism of AI attacks against the adversary.Threat Hunting brings in the power of deep operational expertise. Our team has been hunting threats in Zscaler traffic for years, enabling them to identify suspicious patterns and attacker behavior that generic tools often miss. Threat Hunting is especially valuable for finding adversaries who have already slipped past your preventive controls and are trying to move quietly through your environment.MDR extends that advantage around the clock with 24x7 detection and response coverage, backed by the advanced detection library Red Canary built over more than a decade on the front lines. What differentiates our MDR is not just the analysts or the detections – it’s the data and control behind them. Our teams work across Zscaler first-party telemetry and third-party systems to pull together network, endpoint, identity, and cloud insights, with the added ability to invoke inline enforcement controls when action is needed. The result is faster detection, fewer false positives, and a much stronger ability to actually contain threats, not just identify them. It’s also a powerful way for organizations to scale their SOC without having to add headcount at the same pace. How Can Zscaler Modernize your SecOps?The threat landscape has changed in a fundamental way. Security operations must change with it.With Zscaler Agentic SecOps, and especially with the launch of Agentic SOC, Zscaler is helping organizations make that shift: from fragmented workflows to integrated operations, from reactive investigation to proactive risk reduction, and from human-speed triage to machine-speed defense backed by elite frontline expertise.Our unique combination of real-time telemetry, high-fidelity detections, operationally trained agents, and integrated response is what sets Zscaler apart. The goal is not just a faster SOC. It is a more certain one.We invite you to learn more at our Agentic SecOps&nbsp;launch event. Our keynote features insights from the front lines of threat intel, industry analysts, and our product leaders, along with highlights of our Agentic SOC solution. Breakout sessions provide a closer look at all our SecOps capabilities, showing how easily you can prioritize your exposures, find and stop AI attacks, tap our advanced detections, leverage our expert assistance, and put our Agentic SOC capabilities to use in your organization.Wherever you are in your SecOps journey, we’re here to help you reach that next level of defense.]]></description>
            <dc:creator>Michelle McLean (Sr. Director, Product Marketing)</dc:creator>
        </item>
        <item>
            <title><![CDATA[No Contradiction Here: Frontier AI Requires More Digital Sovereignty, Not Less]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/no-contradiction-here-frontier-ai-requires-more-digital-sovereignty-not-less</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/no-contradiction-here-frontier-ai-requires-more-digital-sovereignty-not-less</guid>
            <pubDate>Mon, 24 Aug 2026 14:57:40 GMT</pubDate>
            <description><![CDATA[The rise of frontier AI and the push for digital sovereignty are often treated as separate agendas. They are not. Let’s be crystal clear: the rapid emergence of powerful AI models makes the case for digital sovereignty more urgent, not less. In Europe and around the world, frontier AI should accelerate the operationalization of digital sovereignty.How Frontier AI Played into the Tech-Dependency discussionIn April and May 2026, frontier AI models Anthropic’s Claude Mythos Preview and OpenAI’s GPT-5.5-Cyber raised serious concerns in the cybersecurity community and among those responsible for enterprise security. While demonstrating the potential of embedding AI into defensive workflows, these models also expanded the attack surface and made clear that organizations and governments will soon face unprecedented and sophisticated attacks when these new capabilities are used by malign actors. Other frontier AI models will soon offer similar capabilities, making this a systemic challenge. For policymakers, that is not only a cybersecurity challenge, but a strategic one: it raises urgent questions about resilience, control, and digital sovereignty.Mythos and GPT-5.5-Cyber represent something fundamentally different from previous models. They can reason across attack paths, weigh exploitability, and generate security-relevant workflows. While malign intent may not have changed, the capabilities, speed, scale, and sophistication of attacks have increased, while the expertise required to deploy them has fallen. In Europe, the arrival of these frontier AI models was felt in two ways: first, as an inflection point in ensuring access to advanced cybersecurity capabilities needed to retain resilience; and second, as yet another reminder of Europe’s dependence on non-European technology providers. Both points were underscored in the European Parliament’s letter to Executive Vice-President Henna Virkkunen [here].Our colleague, Deepen Desai, wrote in a recent blog [here]: “The question isn't whether these models will impact your security posture; it's whether your team will harness them faster than your attackers.” In Europe, that question is not only about how quickly organizations can embed these tools into their defensive workflows, but also about how to ensure trusted access to them on terms that strengthen resilience, accountability, and strategic control.Why AI Is Also a Sovereignty IssueOn June 12, 2026, the U.S. administration imposed export controls suspending foreign access to Anthropic’s most advanced models, Claude Mythos 5 and Claude Fable 5, citing national security concerns. The controls were lifted later that month, and access was restored on July 1, 2026. The episode itself was brief. What it revealed was not: frontier AI is now being treated as a strategic asset, subject to the same instincts that have long governed semiconductors, satellites, and encryption. Those with access will be best positioned to shape, secure, and benefit from the next generation of cyber capabilities.&nbsp;That message was reinforced by a June 22 Five Eyes intelligence partners’ cyber agencies joint statement that was unusual in its directness: frontier AI models are advancing faster than public expectations, and the resulting shift in offensive and defensive cyber capability is now measured in months, not years. Their advice was strikingly unglamorous: patch faster, reduce unnecessary internet exposure, fix identity and access weaknesses, and put AI to work on defense before adversaries put it to work on offense.Europe’s Response Is Becoming OperationalAt roughly the same moment, after years of increasingly urgent debate, Europe took a significant step toward defining what technological sovereignty means in practice. Driven by geopolitical tensions and growing concern over access to critical digital capabilities on terms Europe does not fully control, the European Commission published its Tech Sovereignty Package on June 3, 2026, with the proposed Cloud and AI Development Act (CADA) at its center.CADA seeks to turn Europe’s ambition for digital sovereignty into a practical framework against which organizations can assess providers, make procurement decisions, and hold vendors accountable. It would expand EU data-center capacity, encourage public-sector buyers to consider “Union added value” alongside price, and introduce four EU-wide sovereignty assurance levels covering data location, cybersecurity, operational control, supply-chain transparency, ownership, and personnel. Importantly, the framework recognises that sovereignty is not determined solely by where a provider is headquartered: non-EU companies may still support sensitive workloads where they can demonstrate sufficient independence, transparency, and control. For public and private entities, this should bring greater clarity when selecting technologies and matching workloads to the appropriate level of assurance. For technology providers, it raises the bar from making broad sovereignty claims to demonstrating that their products and operations can deliver sovereignty in practice.AI Changes the Cyber and Sovereignty EquationAs frontier AI models make attacks faster, more adaptive, and harder to catch, the conversations about sovereignty and resilience start to converge. Frontier AI is compressing the timeline across every stage of the cyber lifecycle at once: vulnerability discovery, exploit development, and defensive response are all accelerating together. This points to a structural shift that challenges assumptions security teams have relied on for two decades: that patch cycles measured in weeks are adequate, that legacy systems can be triaged rather than replaced, and that obscurity can still function as a form of defense.This also helps explain why European policymakers are increasingly framing frontier AI as a question of resilience, competitiveness, and strategic dependency. Members of the European Parliament have openly asked whether Europe’s limited access to frontier AI capability is itself becoming a security vulnerability. The Commission’s AI Cyber Action Plan reflects that shift in emphasis, focusing on strengthening Europe’s cyber resilience, improving trusted access to advanced AI for defenders, and reducing strategic dependencies in ways consistent with European security and sovereignty objectives.Cybersecurity is no longer just a niche policy area among many. It is becoming one of the defining enablers, or constraints, of Europe’s technological ambitions and, as the Draghi report made clear, a key condition for growth, job creation, competitiveness, and Europe’s ability to shape global developments. For organizations, that means preparing now for the cyber effects of frontier AI before these capabilities fall into adversaries’ hands. And recognizing that without cybersecurity, digital sovereignty is impossible.The Five Cs of Digital SovereigntyAs a US headquartered technology company it's not our place to decide how Europe should handle that challenge. It's Europe's call to make, and it's a legitimate one - also in the current geopolitical environment. What we can do is build for it. At Zscaler, we think about digital sovereignty through five practical principles that define what sovereignty should mean in operational terms. For us, sovereignty is fundamentally about choice, control, continuity, collaboration, and compliance. Together, these principles provide a way to understand sovereignty as an operational capability rather than a marketing slogan or political rhetoric. As a technology provider, we are prepared to be judged by how effectively our products deliver against them:Choice: provides organizations the flexibility to select and switch providers without prohibitive cost, vendor lock-in, or interoperability barriers.Control: ensures organizations remain in charge of their data, policies, and encryption keys, including when AI systems are making decisions on their behalf.Continuity: supports resilience through disruption, whether from a cyberattack, a regulatory shift, or an export-control decision.Collaboration: enables localized offerings through partnerships with trusted local providers.Compliance: reflects the legitimate and evolving regulatory expectations of the jurisdictions in which organizations operate.Architecture MattersBuilding on this 5C approach, architecture becomes critical. Many of the technical properties CADA asks organizations to demonstrate — continuous control, strong identity, operational resilience, supply-chain transparency, and reduced structural dependency — are precisely the properties modern Zero Trust architectures were designed to deliver.We are already seeing this shift emerge in how enterprises are architecting for the agentic AI era. AI agents challenge most of the assumptions on which legacy security models were built: known human identities, predictable access patterns, and static directories. An agent can hold valid credentials and operate entirely within its authorized scope, yet still pose serious risk if it is over-permissioned, loosely governed, or invisible to the security stack.&nbsp;Zscaler starts from a different premise: if you’re reachable, you’re breachable. In an AI-driven threat environment the true strategic advantage lies in reducing exposure by hiding applications from the internet, eliminating lateral movement, and replacing implicit trust with direct, policy-based connections. In our view, resilience and sovereignty depend not just on where systems are hosted, but on making them materially harder to reach and exploit.This is the logic behind extending the Zscaler Zero Trust Exchange - a platform that already brokers more than 750 billion transactions daily - into a dedicated architecture for frontier AI models and agentic AI. Defenders now have the chance to improve speed, precision, and scalability in ways that were difficult to achieve through human effort alone, but adversaries will pursue the same advantages creating unprecedented threats. In this next phase, leadership will depend on combining frontier AI with strong architecture, trusted context, and disciplined enforcement. In our view, this is the point at which frontier cyber capabilities, Zero Trust, and digital sovereignty begin to converge.Zscaler’s European CommitmentEurope now has a genuine opportunity to shape a model of technology sovereignty that strengthens resilience while remaining open to innovation and trusted international partnerships. The Commission has been explicit that sovereignty should not mean isolation or decoupling, and getting that balance right will matter for more than competitiveness. It may also determine how well Europe navigates the next era of AI-driven cyber risk, at a moment when European governments and the Five Eyes alliance are warning, in unusually blunt terms, that AI is increasing both the likelihood and the potential impact of damaging cyberattacks.In line with our 5C framework, we also recognize the need to adapt and align with Europe’s sovereignty priorities and that collaboration will be essential. That is why we recently announced a strategic partnership with Schwarz Digits, the IT and digital division of Schwarz Group&nbsp;[here] combining Zscaler’s Zero Trust Exchange platform with STACKIT, Schwarz Digits’ European sovereign cloud, the partnership creates a sovereign Zero Trust secure access service edge (SASE) service designed to counter AI-driven threats and strengthen cyber resilience. The service will be hosted in STACKIT-operated data centers. More importantly, the partnership reflects a practical commitment to Europe at a time when the tech sovereignty package is beginning to take shape. Together, we will help customers reduce their attack surface and limit lateral movement while supporting compliance with European legislation through EU data residency. The goal is straightforward: to deliver strong security in a way that is fully aligned with Europe’s sovereignty expectations.The world has become more challenging and less predictable, and cybersecurity has become an increasingly critical and complex domain to navigate. Meeting that challenge requires policymakers, regulators, and technology providers to work closely together to defend organisations, institutions and in many ways the societies and values they were built upon. Europe is, rightly, demanding greater control over its own digital destiny. For the technology industry, that means adapting, aligning, and delivering through the design of our technologies and products. For every organisation, it means making deliberate choices about the architecture it relies on to strengthen both resilience and digital sovereignty. At Zscaler, we will continue to innovate on a foundation that was architected from day one to be digitally sovereign&nbsp;by default.Adam Geller is Chief Product Officer &amp; Casper Klynge is VP &amp; Head of Government Partnerships &amp; Public Policy EMEA.]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zero Trust can’t stop at a claim. You need to prove it.]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zero-trust-can-not-stop-at-a-claim-you-need-to-prove-it</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zero-trust-can-not-stop-at-a-claim-you-need-to-prove-it</guid>
            <pubDate>Thu, 20 Aug 2026 13:09:20 GMT</pubDate>
            <description><![CDATA[A senior executive at a large international bank in London told me recently that AI wasn’t a risk to his firm. His people weren’t allowed to use it, it was against policy, and as far as he was concerned that closed the conversation. It didn’t. A policy describes what a company intends. It says nothing about what people&nbsp;actually&nbsp;do. In a firm full of capable people working against deadlines, the chance that not one of them had quietly opened an AI tool was close to zero. He was describing a control he had never tested. He’d mistaken a rule for a fact.That mistake is everywhere right now, and it reaches well past shadow AI. Most organizations can describe their security in exhaustive detail. Far fewer can show that it holds when something goes wrong. The distance between those two things is where leaders must turn their attention.Available is not the same as resilientThe costliest version of that mistake is quiet and almost universal: many leaders treat “the service is up” as proof that the service is resilient. This isn’t always the case. Well, at least for services that haven’t been stress-tested. A system that stays available only because no one has seriously come after it yet isn’t resilient, it’s an incident waiting for a start date. Resilience is what’s left when something does go wrong but your customers don’t feel the impact. Can the service take a hit, keep running or recover fast, and can you show that it has? Uptime isn’t that. Uptime is just the good weather you’ve had so far.Regulators need proof, not paperworkRisk isn’t new. What’s new is that regulators expect you to prove you can manage it, not just assert that you can. DORA entered into force in 2023, but the compliance deadline only landed in January 2025, and the technical standards underneath it have kept raising the bar since. The requirement is blunt: don’t describe your controls; show that they hold when a real threat scenario hits.DORA asks you to test secured services, govern them, measure how well the security held up, and show you’ve improved over time. That moves the question from “what is our control model?” to a much harder one: “can you show that your critical services stay operational under stress?”, and that accountability rests with the C-suite, not the security team.What proof actually looks likeBeyond the policy binder and tooling inventory is where we find our proof: knowing how a service behaves when something breaks. Take any critical service in the financial sector: retail payments, claims processing, trade settlement, customer onboarding. The questions are the same for all of them. When did you last test a real disruption to it? How did it perform? How long did recovery take? What decisions were made under pressure, and what did you change afterwards? These are the questions leadership should be asking well before regulators ever do.Leadership must get comfortable telling that story end to end: which services matter, what threatens them, how they were tested, what broke, and what got fixed. If you can’t tell that story, everything else you say about your security is just narration without substance.&nbsp;Frontier AI is what applies the pressureIf DORA raised the expectation, frontier AI is the reason the expectation is justified. As the newest generation of intelligent AI models, frontier systems are now finding vulnerabilities faster than security teams can triage them. Anthropic’s Project Glasswing, built on the Mythos frontier model, surfaced more than 10,000 high- and critical-severity vulnerabilities in systemically important software in its first month, much of it in code people viewed as well understood so “safe enough”. The bottleneck in security has moved from finding flaws to fixing them before someone else uses them against you.Mythos is the most capable offensive security model I’ve seen, and the results genuinely stopped me. It’s the clearest picture yet of what the next few years might look like. But the point isn’t one model or one lab, and it certainly isn’t the fact that this lab’s model is pointed in a defensive direction. The same capability that lets Glasswing find flaws so they can be fixed lets a less friendly operator find them so they can be weaponized. Once a model this good exists, you plan for the ones that come after it, including the ones nobody is publishing benchmarks about. Offensive-capable frontier AI is now a class of threat, not a single headline.Governments have read the same signal. They’ve stopped treating frontier AI like ordinary software and started treating it like strategic infrastructure, with restricted access, staged deployment, and models requiring review before release. It’s a recognition that the speed of discovery has changed what “safe enough” even means.The systems you won’t touch are the proofEvery large finance business has systems it refuses to touch. “This one makes money, it’s stable, leave it alone” is the mentality. Freezing a ‘stable’ critical revenue system used to be an acceptable trade-off because threats moved slowly enough for organizations to respond. That trade-off logic doesn’t hold water now because the threat landscape is far less forgiving. Again, the argument boils down to validating assumptions for&nbsp;proof: how do you&nbsp;know your system is ‘safe enough’ if you haven’t tested it? The code you’ve left alone longest has had the least scrutiny, and frontier models are built to find exactly that kind of code.&nbsp;This is the availability trap in the flesh. That untouchable, untested system is up and generating revenue. Leadership sees uptime but what’s really there is unknown risk. It’s up until it’s breached, and ‘operational-until-attacked’ is not a security posture. Some of these systems need rearchitecting. Most, in the near term, need to be treated as exposed rather than exempt: protected, tested, patched, and put on a plan instead of a pedestal.Let’s be honest with ourselves about riskUnprovable security isn’t a tooling problem; it’s a credibility problem. If you can’t demonstrate how your critical services behave under disruption, regulators start questioning your resilience, investors start questioning your oversight, and your own people lose confidence in the system exactly when they need it most. All of it lands on the customer in the end.So, when a regulator, an auditor, or an investor asks how you stay in control while a disruption is actually unfolding, the real question isn’t whether your systems are up. It’s whether you can prove they’d survive your worst-case scenario. If the only answer you have is “it hasn’t gone down yet,” that isn’t resilience. That’s luck, and luck isn’t something you get to put in a filing.A policy that says "no AI" doesn't mean no AI is happening. Across nearly one trillion enterprise AI transactions analyzed, the gap between assumption and reality is now measurable, and widening according to our&nbsp;AI Security Report.The hardest question in this piece is also the simplest: can you show that your critical services survive under stress?&nbsp;If you're not sure, start here. Run a free security risk assessment&nbsp;.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[From Air Gaps to Always Connected: The Uptime Challenge Security Must Solve]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/air-gaps-always-connected-uptime-challenge-security-must-solve</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/air-gaps-always-connected-uptime-challenge-security-must-solve</guid>
            <pubDate>Wed, 05 Aug 2026 09:40:10 GMT</pubDate>
            <description><![CDATA[The idea that a factory is secure because it's disconnected is, frankly, a 2005 mindset. Connectivity is now core to how manufacturing operates. It’s not bolted on, not optional, uptime depends on it. The air gap isn't a security strategy anymore, it's just a constraint waiting to be worked around.But if the factory floor has evolved from isolated to ‘always connected’, what does that mean for security?The problem isn't connectivity itself. Most factories need more of it, not less. The challenge is that many of the control models used to govern those environments were designed for a world that was easier to see, easier to predict, and easier to lock down. That world is gone.Why Workarounds Become the DefaultThe gap between connectivity and control creates real operational friction, and traditional security models, built for a more isolated era, are often the bottleneck. What we’re seeing is engineers waiting on manual approvals for urgent remote access. Third-party vendors needing to troubleshoot equipment with no secure mechanism to do so. Security teams making decisions without a complete picture of who's connecting, from where, and to what.&nbsp;When that's the reality, security teams default to restriction. Understandable, but when those decisions directly affect uptime, the factory floor finds its own solutions.I visited one of the world's biggest consumer-goods manufacturers and sat in on a conversation between their CISO and head of factory about exactly this problem. Their fix for a downed production line? Pull a SIM from a phone, stick it in a hotspot, connect it to the production controller, and let the remote specialist do their thing. It works. It also drives the CISO quietly mad. Nobody was trying to bypass security; they were just trying to keep the line moving. But the result is an unmanaged path straight into their production environment. That trade-off is precisely why this has become a leadership problem, not just a security one.&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Why Control Is Getting HarderMore connectivity means more devices, more access paths, more remote users, more third-party maintenance windows, and more machine-to-machine interactions. That's not inherently a problem, it's often what keeps operations running. The harder question is whether anyone can still see the web of connections, govern them, and understand the dependencies that come with them.This is where traditional approaches break down. Production teams&nbsp;optimise for uptime. Warehouse teams&nbsp;optimise for throughput. Factory teams&nbsp;optimise for output. And legacy security models? Well, they weren't designed to keep pace with these pressures, and the friction shows up in unexpected places.&nbsp;Take handheld scanners used for warehouse logistics. Credentials required, security box ticked. That’s great, except half the floor is wearing gloves or has oil on their hands from the machinery. Logging in is a hassle; logging out so a colleague can use the same device feels like unnecessary admin when a line is waiting. The result: one device, one login, twelve people on shift. Identity becomes meaningless. Visibility evaporates. That's not a technology failure. That's a governance model that never accounted for the reality of the shop floor.Questions Every Leadership Team Should Be AskingSecurity must be frictionless to be effective. If it's complicated, people will route around it, not out of recklessness, but out of operational necessity. And that’s when every workaround becomes a visibility gap. And, if governance and control models are still rooted in the air-gap era, more tooling won't solve this problem.&nbsp;The better starting point is an honest assessment of where the gaps actually are. Where are operations genuinely dependent on connectivity, and where have workarounds quietly filled the gaps? Where are third parties accessing operational systems, and through what mechanisms? And, critically, which security controls are improving visibility, and which are simply creating the friction that drives people around them?The answers tend to reveal whether security is built around how work&nbsp;actually&nbsp;happens, or how leadership&nbsp;assumes it happens. Those are often very different things.The issue was never that these environments were air gapped. It's that the security models built for that era were never redesigned when the era ended. The&nbsp;organisations best placed for what&nbsp;comes next aren't necessarily the ones with the most tools. They're the ones who understood where connectivity became essential and where visibility was lost. They’re the ones who chose to close that gap before it became a business failure.&nbsp;The threats to connected factories aren't theoretical. IoT attacks on critical industries jumped 40% last year, and most environments still lack the visibility to see them coming.&nbsp;Get the full picture: Download the ThreatLabz 2025 Mobile, IoT &amp; OT Threat Report →&nbsp;&nbsp;&nbsp;&nbsp;]]></description>
            <dc:creator>Alex Fray (Innovation Lead)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Named a Leader in the 2026 Gartner® Magic Quadrant™ Reports for SASE and SSE]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-leader-gartner-magic-quadrant-sase-sse-2026</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-leader-gartner-magic-quadrant-sase-sse-2026</guid>
            <pubDate>Tue, 04 Aug 2026 15:10:27 GMT</pubDate>
            <description><![CDATA[I'm incredibly proud that Zscaler has been named a Leader in the 2026 Gartner® Magic Quadrant™ reports for SASE and SSE.This recognition means a great deal to our team, and more importantly, to the thousands of enterprise customers who have placed their trust in Zscaler to secure and connect their organizations. This is the fifth year in a row that we have been recognized as a Leader in the SSE Magic Quadrant, and we’re thrilled to also be recognized as a Leader in the SASE Magic Quadrant this year. We believe this reflects the significant progress our team has made in executing on our Zero Trust SASE Everywhere vision, and our rapid customer adoption.&nbsp; &nbsp; The Zero Trust SASE DifferenceGartner defines SASE platforms as “offerings that deliver converged network and security capabilities. This includes software-defined WAN (SD-WAN) and secure access to the web, cloud services and private applications regardless of the user’s location, the device used or where that application is hosted. These offerings primarily use a cloud-centric architecture delivered as a platform by one vendor". Delivered via a cloud-native platform, customers that embrace this model expect to see significant security and operational benefits by consolidating onto a converged platform.We see that while other vendors bolted on traditional SD-WAN to their SSE offerings, at Zscaler we took a different approach. We have long maintained that legacy networking has too much implicit trust, which inevitably expands the attack surface and facilitates lateral movement of threats. This risk is further amplified today in the age of frontier AI models that can launch exploits at machine speed. If you’re reachable, you’re breachable!Zscaler’s Zero Trust SASE solution is designed from the ground up with an entirely different architecture: one that intentionally does not extend the same network connectivity to every branch and IoT device. Rooted in zero trust foundations, it securely connects users, IoT/OT devices and AI agents to the applications they need, while continuously enforced adaptive access, and without the exposed ports and lateral movement inherent to traditional networking. Branches become as simple as coffee shops, eliminating firewall complexity. The Zero Trust Exchange: Built for ScaleZscaler’s AI-powered Zero Trust Exchange platform processes over 750B daily transactions and is relied upon by over 40% of Global 2000 customers to secure their organizations. The insight derived from this enormous volume of data creates a virtuous circle by training our AI fabric, strengthening our ability to counter dynamic online threats. Over 160 data centers around the world keep policy decisions as close to the user as possible, minimizing latency for a better experience.By pairing the Zero Trust Exchange with our innovative Zero Trust Branch solution, Zscaler delivers unparalleled security, performance, and scale for global organizations. Additionally, our unified Experience Center and ZAgent Framework streamline operations, providing all the benefits of SASE without the heavy cost and complexity associated with traditional networking and SD-WAN. Moving Towards The FutureWe are not slowing down. We announced many more innovations on the Zero Trust SASE platform recently.ZAgent Framework: Automates security and network operations, reduces response times, and surfaces insights that were previously buried in noise.Zero Trust Browser: Integrates Zero Trust SASE natively into a cross-browser extension or full Chromium-based browser, replacing expensive VDI and VPN setups for unmanaged and BYOD devices.&nbsp;Zscaler B2B Exchange: Enables bi-directional application access for Zscaler customers and their partners without ever exposing networks or managing complex firewall rules.Together, we believe these innovations make Zero Trust SASE the industry’s only comprehensive platform to connect and secure everything. Read the ReportsIn our opinion, this recognition from Gartner validates our disruptive approach to SSE and SASE and the confidence our customers have shown in us. We are extremely proud of this recognition, on behalf of our team and our customers, and excited about the journey ahead.We invite you to read the full reports to understand why Gartner has recognized Zscaler as a Leader.Download the 2026 Gartner® Magic Quadrant™ reports for SASE and SSE here. Gartner, Magic Quadrant for SASE Platforms, Jonathan Forest, Andrew Lerner, John Watts, 28 July 2026.&nbsp;Gartner, Magic Quadrant for Security Service Edge, Charlie Winckless, 30 July 2026Gartner and Magic Quadrant are trademarks of Gartner, Inc., and/or its affiliates.Gartner does not endorse any company, vendor, product or service depicted in its publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner publications consist of the opinions of Gartner’s business and technology insights organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this publication, including any warranties of merchantability or fitness for a particular purpose.This graphic was published by Gartner, Inc. as part of a larger research document and should be evaluated in the context of the entire document. The Gartner document is available upon request from Zscaler.]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Expanded Risk360 Availability Brings Foundational Risk Insights to More Zscaler Customers]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/expanded-risk360-availability-brings-foundational-risk-insights-more-zscaler</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/expanded-risk360-availability-brings-foundational-risk-insights-more-zscaler</guid>
            <pubDate>Thu, 30 Jul 2026 14:00:00 GMT</pubDate>
            <description><![CDATA[More eligible customers can now access Risk360 to turn Zscaler-native telemetry into clearer, more actionable cyber risk insights—without the complexity of additional data collection or integrations.Security leaders are under growing pressure to reduce cyber risk, demonstrate the value of security investments, and communicate security posture in terms the business can understand. But as environments become more distributed and threats more sophisticated, getting a clear view of risk has become increasingly difficult.That’s why Zscaler is expanding the availability of&nbsp;Risk360, helping more eligible customers access foundational, data-driven risk insights built from the telemetry they already have in the&nbsp;Zscaler Zero Trust Exchange platform. Risk360 is now included in most&nbsp;ZIA and platform SKUs for organizations with more than 500 users.Built on Zscaler-native telemetry, Risk360 helps customers turn existing platform data into clearer, more actionable cyber risk insight. Why deeper risk insight mattersOrganizations today are managing risk across users, devices, applications, and cloud environments while facing growing expectations from executives, boards, and regulators. Security teams often have no shortage of data, but turning that data into clear, actionable insight is another matter.Fragmented signals can make it harder to identify priorities, measure progress, and communicate outcomes. What many organizations need is not more data, but a better way to understand the risk signals already available to them.Risk360 helps organizations track risk over time and benchmark their posture against peers. Turn Zscaler telemetry into actionable insightRisk360 helps organizations better understand and prioritize cyber risk using data already available in the Zscaler platform. It analyzes Zscaler-native telemetry across users, devices, applications, and policy signals together with telemetry from Zscaler’s External Attack Surface Management (EASM) engine. This gives security teams a more precise view of where risks are concentrated and where corrective actions are most critically required.There is nothing additional to deploy, so customers can immediately derive more value from their Zscaler investment.Risk360 includes guided investigations to reduce riskBetter risk insight matters because it supports better decisions. Risk360 helps organizations move beyond isolated signals to more focused prioritization, making it easier to identify important risks, improve visibility, and take action faster.Customers like&nbsp;Inter,&nbsp;Gray Media,&nbsp;Rodgers,&nbsp;NHS,&nbsp;Guaranteed Rate, and&nbsp;AkzoNobel are using risk quantification to strengthen their organizations' cybersecurity preparedness.“The key risk indicators that Zscaler provides have been essential to improving our risk posture. It's taking us many steps forward in our cybersecurity maturity.” - Raffaele Maresca, CISO,&nbsp;AkzoNobelWatch this 2 minute video to see how Risk360 helps organizations quantify and reduce cyber risk. Helping more organizations gain a clearer view of riskSecurity teams already have access to enormous amounts of data. The challenge is turning that data into clarity, prioritization, and measurable progress.By expanding the availability of Risk360, Zscaler is helping more customers access foundational risk insights based on the telemetry already available in the platform. For organizations looking to better understand cyber risk, improve posture, and communicate security value more effectively, Risk360 offers a practical starting point.With Risk360, organizations can:Gain clearer visibility into risk across their Zscaler environmentSurface configuration or control gaps that may affect risk postureMap Zscaler controls and configurations to common compliance frameworksFollow guided investigations to reduce risk&nbsp;Communicate risk posture and reduction progress more clearly to executives&nbsp;If you’d like to learn whether your organization is eligible for Risk360, reach out to your Zscaler account team to discuss next steps.To learn more about how it can help you quantify and reduce risk, watch this&nbsp;Risk360 webinar replay.]]></description>
            <dc:creator>Chris Taylor (Director, Product Marketing)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Secure Agentic AI at Machine Speed: Meet Zscaler at Black Hat 2026]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/secure-agentic-ai-machine-speed-meet-zscaler-black-hat-2026</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/secure-agentic-ai-machine-speed-meet-zscaler-black-hat-2026</guid>
            <pubDate>Tue, 28 Jul 2026 22:35:36 GMT</pubDate>
            <description><![CDATA[Zscaler is redefining what’s possible for security in the AI era. Visit booth #2557 at Black Hat 2026 August 4-6 to discover the AI Security Platform built on Zero Trust.Meet with Zscaler at Black Hat 2026: Schedule a meeting | Explore Zscaler at Black HatAI isn’t just changing workflows—it’s changing the attacker’s playbook. When copilots and autonomous agents can move data, call tools, and trigger actions in seconds, the blast radius of a single compromise grows exponentially. Now, the hard truth for defenders is that you can’t “detect later” what happens at machine speed.At Black Hat 2026, Zscaler will showcase the AI Security Platform built on Zero Trust. Come see how to secure every AI interaction, broker every agent action, and hunt at machine speed—so you can stop threats before they become incidents. What to expect at Black Hat 2026 with ZscalerHere is what you will see:Live demos on how to extend zero trust to AI agents and their actions&nbsp;Proven strategies on how to discover AI usage across the enterprise&nbsp;Expert insights on protecting data used by (and exposed to) AI across prompts, models, clouds and endpoints&nbsp;In-depth theater presentations on the latest Zscaler solutionsDon’t miss these sessions:Weds, Aug 5 10:15am: ThreatLabz Insights Into the Latest Attack Trends with Diana Shtil from ThreatLabzWeds, Aug 5 11:25am: 90 Days with Frontier AI. What We Learned with Emily Laufer, Director, Product Marketing&nbsp;Weds, Aug 5 1:30pm: Securing the Enterprise in the Age of AI Agents: From Zero Trust to Agentic Security with Dhawal Sharma, EVP - AI Security and Strategic Initiatives Zscaler: The AI Security Platform Built on Zero TrustAt Black Hat 2026, we’ll showcase how Zscaler helps security teams:Secure every AI interaction with visibility and control across AI apps and copilotsBroker every agent action by governing agent behavior and tool use in agentic workflowsHunt at machine speed to surface risk earlier and accelerate responseStop every threat by reducing attack surface and applying consistent policies across users, apps, branches, and AI agents Join us at Black Hat 2026&nbsp;Zscaler is shaping the future of security for the AI era. Visit booth #2557 at Black Hat 2026 to see how the AI Security Platform built on Zero Trust protects data, reduces risk, and helps teams act fast and stay secure.Meet our experts, get a live demo, and learn how leading enterprises are extending zero trust to AI apps, copilots, and autonomous agents—while simplifying operations and strengthening protection across the organization.Schedule a meeting | Explore the Platform | Customer Success Stories&nbsp;]]></description>
            <dc:creator>Diana Shtil (Sr. Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Joins the Hiroshima AI Process Partners Community]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-joins-hiroshima-ai-process-partners-community</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-joins-hiroshima-ai-process-partners-community</guid>
            <pubDate>Mon, 20 Jul 2026 12:01:00 GMT</pubDate>
            <description><![CDATA[Zscaler has joined the&nbsp;Hiroshima AI Process (HAIP) Friends Group Partners’ Community, reinforcing our commitment to advancing secure, transparent, and trustworthy AI adoption.Launched under Japan’s 2023 G7 Presidency, the HAIP advances international discussion on safe, secure, and trustworthy AI. Its Partners Community brings together organizations committed to supporting practical progress on AI governance and responsible adoption.As AI adoption accelerates, organizations are not only deploying AI more broadly but also confronting a growing range of AI-powered attacks. Zscaler AI helps them use AI safely for productivity, protect their AI initiatives, and improve their security outcomes with AI-driven defenses and controls.Zscaler will contribute to the HAIP our lessons from this real-world experience securing AI and defending against AI-enabled attacks. Importantly, the HAIP already provides a framework for this through its International Guiding Principles and Code of Conduct for advanced AI systems, which emphasize risk assessment, security testing, transparency, incident response, and safeguards against misuse.This focus aligns with Zscaler’s approach to AI security. Alongside support for international governance efforts, Zscaler is actively engaged in frontier AI security initiatives including Anthropic’s Project Glasswing and OpenAI’s Trusted Access for Cyber program. Participation in these efforts strengthens understanding of advanced AI capabilities in cybersecurity and supports more rigorous security testing and evaluation. Why transparency mattersTrust in AI cannot rest on broad assurances alone. It depends on evidence, visibility, and candid reporting.That principle is reflected in Zscaler’s approach to AI security research and threat intelligence publications. Our ThreatLabz team regularly publishes AI security findings, including an annual AI Security Report.&nbsp;The 2026 report found that AI adoption is creating critical security gaps across global enterprises.Zscaler has also moved quickly to share its frontier model security research. In “When the Scanner Starts Thinking: Learnings from Mythos and GPT 5.5 Cyber Security,” Zscaler shared a structured evaluation of frontier models in cybersecurity, outlining our testing methodology, assessment of model capabilities, and practical security recommendations.Zscaler has also been transparent about the company’s internal AI governance, including its commitment not to use proprietary customer data or personal information to train AI models. Sam Curry, Zscaler’s Global CISO, has&nbsp;explained this commitment&nbsp;and our data containment architecture and use of anonymized, aggregated signals to improve security while protecting privacy. These actions reflect Zscaler’s commitment to using AI in a way that is governed, transparent, and responsible. A global commitmentJoining the Hiroshima AI Process Partners Community is an important milestone in Zscaler’s broader commitment to supporting secure digital transformation worldwide.As AI policy and practice continue to evolve, Zscaler looks forward to contributing its perspective on how security, transparency, and practical governance can help organizations securely adopt AI and defend against its malicious uses.Zscaler also looks forward to working with governments, industry partners, and the broader Hiroshima AI Process community to help ensure that AI adoption is matched by practical safeguards, stronger transparency, and security by design.]]></description>
            <dc:creator>Adam Dobell (Head of Government Affairs, APJ)</dc:creator>
        </item>
        <item>
            <title><![CDATA[GLOBSEC: How to overcome the digital trust crisis]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/globsec-how-to-overcome-the-digital-trust-crisis</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/globsec-how-to-overcome-the-digital-trust-crisis</guid>
            <pubDate>Wed, 20 May 2026 07:02:02 GMT</pubDate>
            <description><![CDATA[In today’s AI era, the trust between nations that underpins supply chains and digital economies is at risk. As uncertainty continues to dominate the geopolitical landscape, and threat actors move faster than institutions can adapt, one reality is becoming harder to ignore: the digital trust crisis is also a cybersecurity challenge.&nbsp;In order to shape the discussion around these systemic transformations, we’re continuing our partnership with&nbsp;GLOBSEC&nbsp;in Prague at the GLOBSEC FORUM from the 21st to 23rd of May 2026. Over the years, this forum has established itself as a critical place for a candid, high-level dialogue among political leaders, business decision-makers, and policy experts. This year’s theme&nbsp;“The Global Systemic Transformation: 21st-Century Solutions to 21st-Century Challenges” matches the moment: a period defined by strategic uncertainty, contested technology relationships, and a rapidly changing cybersecurity risk environment.I’m looking forward to participating in a panel discussion on&nbsp;“The Transatlantic Alliance at the Crossroads: Can the West Survive Itself?” on&nbsp;Thursday 22nd, 12:05 am CET.&nbsp;The premise is clear: the “old (security) playbook” is obsolete in today's world. This raises necessary questions that leaders can no longer ignore, including where genuine common ground still exists on defence, AI, and security and what does pragmatic partnership look like when trust is strained? Is the desire for greater digital autonomy a signal of a rapture in the relationship, or can U.S. and European interests converge for renegotiated relationships?Security as the foundation of digital sovereignty&nbsp;We believe digital sovereignty must be delivered on European terms as a genuine commitment backed by capabilities, transparent practices, and products designed to meet real-world cybersecurity requirements. We’ve said this consistently, and we’ll continue to say it clearly: we are a&nbsp;technology company that listens to European concerns and adapts to today’s reality. In times of political turmoil, the private sector has a responsibility to step up helping to sustain credible cooperation and contribute to cyber resilience where it matters most.When we surveyed 1750 global decision makers in our recent resilience study “The Ripple Effect”, there was a concerning theme associated with digital resilience strategies: delay. The majority (73%) of respondents said digital sovereignty concerns had caused them to delay or cancel security transformation initiatives. That pause is dangerous and negatively impacts the resilience posture of organisations. It prolongs exposure to legacy risk and weakens cyber security readiness. It also leaves organisations less able to absorb disruption from ransomware, supply chain compromise, systemic outages, or sudden changes in cross-border rules at a time when the threat landscape is changing faster than ever before.The challenge for the private sector is to build technology and operating models that respond to those concerns in practice, especially when trust is strained and the stakes are rising in a sovereignty debate. In today’s AI-driven cyber threat landscape, one principle is non-negotiable: cybersecurity is the foundation for digital sovereignty.&nbsp;And without security, sovereignty remains aspirational.For policymakers and business leaders, sovereignty ultimately comes down to three practical tests:Control:&nbsp;Can your organization maintain governance over your data, identities, and access especially under pressure?Choice:&nbsp;Can your organization switch providers, architectures, operating models without being trapped?Continuity:&nbsp;Can your organization rely on the service remaining fully operational when you need it most?These are the questions that matter when resilience is being tested. And they point to an important conclusion: companies should be judged on control, choice, and continuity and not merely on where their headquarters happens to be. Alignment, products, and sustained commitment matter more than geography.Why Zero Trust is the modern security baselineIf today’s environment is defined by constant probing, compromised identities, and sophisticated disruption, then security can’t be built on assumption. Zero Trust provides a pragmatic foundation: verify explicitly, reduce implicit trust, and limit the blast radius when incidents occur. This is an operating model for a world where the security perimeter is gone and trust must be continuously earned.As governments and industry navigate sovereignty requirements, resilience planning, and the implications of AI, the security baseline must match the threat reality. For us, Zero Trust is central to modern security because it aligns with how attackers operate especially under the new conditions of frontier AI and with how critical services can be protected.Meet us at GLOBSEC in PragueAt GLOBSEC, we will be focused on dialogue and participate in closed-door roundtables designed for candid, working-level discussion with senior leaders from politics, business, and academia. In addition, we are available for 1:1 meetings on demand. Reach out if you want to learn more on our digital sovereignty approach based on the Zero Trust paradigm. Because if we agree that trust is a strategic asset, we also have to agree on the foundations that sustain it.&nbsp;]]></description>
            <dc:creator>Casper Klynge (VP, Government Partnerships)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The Next Advancement with OpenAI: Zscaler Steps Up To GPT-5.5-Cyber]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/next-advancement-openai-zscaler-implements-gpt-5-5-cyber</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/next-advancement-openai-zscaler-implements-gpt-5-5-cyber</guid>
            <pubDate>Mon, 11 May 2026 14:00:00 GMT</pubDate>
            <description><![CDATA[OverviewCybersecurity has always been a race. Attackers look for a way in, defenders try to stop it, and whoever moves faster wins. For thirty years, both sides moved at human speed. With AI, the game has changed, making AI security an urgent priority. The most advanced AI can now find weaknesses in software and turn them into real attacks in minutes. It does not sleep, get tired, or miss details. The advantage cybersecurity defenders used to have, knowing their own systems better than anyone, is gone.OpenAI has been thoughtful about what to do with that capability. Rather than release their most powerful cyber-focused AI to anyone, they created the Trusted Access for Cyber program, or TAC, to make those capabilities more useful for verified defenders. Zscaler has been a proud member of the TAC program since the beginning, starting with GPT-5.4-Cyber. Today, we are stepping up to GPT-5.5-Cyber, the next advancement from OpenAI.If your security strategy still depends on patching faster than the adversary can find the bug, you have already lost. The cycle time has collapsed. The winning move is to stop applications from being visible to the adversary in the first place, and to bring an AI of equal caliber to the work of finding what humans miss. That is what TAC delivers, and that is what Zscaler was built for. Two Things Defenders NeedThere are two things a modern defender needs, and they have to work together.1. An architecture that removes the target - If an application is invisible to the internet, it does not matter how clever the model is on the offensive side. There is nothing to scan, nothing to reach, and nothing to weaponize. This is the entire point of Zero Trust, and it is the principle the Zscaler Zero Trust Exchange has operationalized for nearly two decades. Users do not connect to the corporate networks. Applications do not have public IP addresses. Every session, human or machine, is securely brokered one-to-one against a verified identity. We have a saying inside Zscaler: if you are reachable, you are breachable. You need to make yourself unreachable.2. Frontier AI Working on the Defender’s Side -&nbsp;Removing the target is necessary, but it is not sufficient. There are still bugs in code, still misconfigurations in the cloud, still phishing in inboxes, still anomalies in the 500 billion daily transactions we see on our platform at Zscaler. Sorting through that volume and acting on it at machine speed is what a model like GPT-5.5-Cyber is built for. Make the application, data and workloads invisible to attackers via the Zero Trust Exchange platform. Then leverage a frontier model with what remains. That is the combination. Advancements Leveraging GPT-5.5-CyberWe have spent a significant amount of time inside TAC with GPT-5.4-Cyber, and we have learned where a model of this caliber pays off most. GPT-5.5-Cyber sharpens the work in three places.Hardening the AI our customers are racing to deploy: AI tools can be tricked or manipulated into giving up sensitive data. Our AI Red Teaming capabilities (formerly SPLX) has used OpenAI since early 2024 to generate the attack sequences that test and harden customer AI across text, voice, and images. With GPT-5.5-Cyber, when Zscaler finds a weakness, it generates an optimized fix in the same loop, a working first step toward a stronger security posture. The same engine scans the code behind complex AI agents and the tools they connect to, and it powers our Agentic Radar open source project, which fueled the largest OpenAI hackathon last year in Warsaw.Building safer software inside Zscaler:&nbsp;GPT-5.5-Cyber works alongside our engineers across the way we design, build, and ship our solution, validating security thinking at the design stage, assisting with code reviews, finding vulnerabilities at machine speed, and probing finished software the way an attacker would. Problems get caught and fixed long before any customer is exposed to them.Faster investigations without losing the human in the loop: Inside Red Canary, our managed security service, OpenAI-powered agents do the tedious context-gathering that traditionally overwhelms security teams, while our human experts make the final call. The same foundation supports continuous red teaming, prompt hardening, and AI asset analysis across our broader platform — faster, more accurate defense at the speed our customers need.We are also committed to giving back for the benefit of everyone. As part of TAC, the lessons we draw from running GPT-5.5-Cyber at this scale flow back to OpenAI and the broader coalition. Defenders win as a community, or not at all. A Pattern the Industry Keeps ForgettingWhen the cloud arrived, most of the industry believed existing defenses would still work. They did not. When everyone moved to phones and online apps, most believed traditional remote-access tools would adapt. They did not. Each time, the winners were the companies that accepted the world had changed and built for what was coming.&nbsp;Zscaler was one of those companies. More than 17 years ago, we made a bet that the future would not be defended by firewalls and VPNs guarding a network-based perimeter. We built our cybersecurity platform on Zero Trust instead, an architecture where applications are invisible to the internet, and every user or device is securely verified for one-to-one connections. That bet was right for the cloud era, and it is also right for what’s next.AI is the next of these moments, and it is moving faster than the ones before it. Attackers already have the technology. Through our partnership with OpenAI, defenders do too. But the architecture matters even more now than it did before. A frontier-class AI pointed at an exposed application is a problem no patch cycle can keep up with. A frontier-class AI pointed at an application it cannot even see is a different conversation entirely. That is the conversation Zscaler has been preparing the industry to have since 2008.&nbsp;The question for every leader is simple. Keep guarding a front door the attackers no longer use, or move to a security model built for what is coming. The longer the decision waits, the more likely a breach makes it for you.]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Introducing the Next Phase of the Zero Trust Browser]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/introducing-next-phase-zero-trust-browser</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/introducing-next-phase-zero-trust-browser</guid>
            <pubDate>Wed, 29 Apr 2026 18:49:58 GMT</pubDate>
            <description><![CDATA[For years, Zscaler has been a leader in enabling secure and seamless browsing and application access for organizations worldwide. We have partnered with thousands of organizations and our Zero Trust Cloud Browser to secure access not only to the internet but also to SaaS and private web apps.&nbsp;As many have realized, securing both browsing and app access from the browser is more critical than ever, as data loss risk rises, risk of non-compliant devices accessing data, and browser-borne threats continue to grow. Attackers increasingly target the browser to steal sensitive data, including:Malicious extensions that execute unauthorized actions or exfiltrate sensitive information.Phishing and identity attacks in the browser aimed at capturing credentials or OAuth tokens.Keystroke loggers and screenshots that silently steal critical corporate data and credentials.GenAI risks, particularly, accidental exposure of sensitive data. What is more, unmanaged devices used by contractors to access apps also present a challenge. By accessing corporate resources without the safeguards of managed endpoints, they increase the risk of data breaches and compliance failures. Without visibility into device posture, such as whether EDR is in place or if the OS is out of date, organizations struggle to determine whether the devices accessing their apps meet security and compliance standards, increasing security risk.To make matters worse, many organizations still rely on risky or expensive tools for app access like VPNs and VDI. These legacy solutions add cost, complexity, and latency, but do little to resolve browser-specific risks be it stopping threats or protecting data. While enterprise browsers are sometimes a viable option, they do require browser migrations that can disrupt work, rendering them unsuitable in certain environments.Ultimately, this means security teams need consistent protections—protections that isolate web threats and stop browser threats, secure app access, and data protection—but delivered through the right form factor for each scenario. Contractors on unmanaged devices may need protection without a migration; sensitive workflows may require stricter in-session controls; and some teams prefer a dedicated managed browser for standardization.Zero Trust Browser uniquely solves for this reality, letting organizations choose the right deployment approach for each scenario. The New Zero Trust BrowserZscaler is excited to announce the Zero Trust Browser is moving into its next phase by expanding into a unique set of form factors that let organizations match security to each use case while also delivering browser-centric security no other enterprise browser can match.This evolution begins with the Zscaler Zero Trust Browser Extension—a new solution for securing modern browsing and application access. Designed to work seamlessly with users’ existing browsers, this lightweight extension delivers Browser Detection and Response (BDR), to stop browser-borne threats like malicious extensions, malicious script, identity and OAuth credential theft or reassembly attacks.&nbsp; It also applies in-browser data protection controls (for example, inline DLP policies and data controls to restrict copy/paste, upload/download, printing, and other risky actions). It also adds real-time device posture signals to app access decisions—so access to SaaS and web apps can be allowed, blocked, or revoked at any time, based on whether the device meets device security requirements such as OS version, EDR, or if disk encryption enabled.&nbsp;All of this helps protect web browsing and enable secure access without relying on VPNs, VDI, or forcing a browser migration when it doesn’t make sense.Zscaler is also bringing the same security and access found in the Extension to a purpose-built Chromium Enterprise Browser. Our dedicated browser brings the same security, access and data protection as our extension, but allows a form factor that lends itself to standardization and a managed browser experience for workers.&nbsp;These two new form factors complement our existing clientless Zero Trust Cloud Browser that offers key protections that isolate web threats in the cloud, and extends secure app access from any browser, while keeping data secure with cloud-deliver data controls and inline Zscaler data security. Our Cloud Browser is excellent for high-security use cases because execution happens in the cloud, keeping data off endpoints. It is also a practical option when installing an extension or new browser on an unmanaged device is not possible.Together, these three form factors—browser extension, enterprise browser, and cloud browser—extend protection across mixed environments and managed or unmanaged devices without fragmenting policy. Zscaler’s Zero Trust Browser pairs advanced security with flexible deployment, so teams can choose the right option for each user, device, and risk level. User ExperienceUser experience is also critical given the browser is a key productivity tool for workers.&nbsp; Zscaler delivers a frictionless “work profile” in the browser that makes secure access simple on their device.&nbsp; Workers are greeted by a customizable home page that makes accessing the app they need for work easy–and it clearly demarcates work from personal use on their device. Cloud users will encounter a similar cloud-delivered portal to app access. The Zero Trust Browser delivers key capabilities in our diverse form factors:Adaptive App Access: Zscaler provides app access with integrated device posture controls, ensuring secure, real-time access to applications only for trusted users and devices from their browser of choice. App access is revocable should device posture deteriorate.Browser-Based Threat Protection: Only Zscaler protects against browser-borne threats with Browser Detection and Response, such as malicious extensions, OAuth and browser identity attacks, malicious scripts, and more.&nbsp; This complements our isolation of web threats.In-Browser and cloud-delivered data security: Granular data security, enforced in the browser or from the cloud, blocks risky actions such as unauthorized screenshots, keystroke logging, printing, and copy/paste, upload and downloads and more.&nbsp; Inline DLP controls, whether browser or cloud, detect and stop sensitive data from exfiltration.Polished User Experience: Users gain a distinct browser profile (on their device or in the cloud) for work activities, separate from personal browsing, for a seamless and polished user experience.&nbsp;&nbsp;Streamlined Security Architecture: By eliminating the need for legacy tools like VDIs or complex infrastructure, the Zero Trust Browser dramatically simplifies secure access and browsing by leveraging existing Zscaler ZIA, ZPA, and data security footprints. It works with any browser, making it scalable and lightweight for enterprise deployment.&nbsp;&nbsp; Only the Zero Trust Browser delivers unmatched deployment flexibility with consistent protections, including browser detection and response, for organizations navigating today’s complex security landscape.Ultimate Form Factor Flexibility: Only Zscaler provides the ability to secure every use case with a choice of form factors—cloud browser, browser extension, or enterprise browser—ensuring seamless protection and access for any user on any browser or device.Unified Cloud and Browser Protection: Leverage world-class cloud threat isolation combined with in-browser threat detection to create the industry’s strongest security posture for modern browsing.Total "Last-Mile" Browser Control: Instantly block browser-layer attacks and data exfiltration by neutralizing threats like malicious extensions, identity theft, unauthorized screenshots, printing, and ensuring data exfiltration never occurs.Browser Freedom, Zero Friction: Secure users in the browsers they already use, eliminating costly migrations to proprietary browsers and reducing change management complexity for organizations.With Zscaler, organizations can seamlessly protect their users while enabling productivity and embracing a modern, secure, and user-friendly approach to browser security.To learn more, sign up for a demo here or contact your account team for a deeper dive.]]></description>
            <dc:creator>Vishal Gupta (Senior Director, Product Management)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Is Proud to be Part of Project Glasswing: AI Can’t Breach What It Can’t Find]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-anthropic-project-glasswing</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-anthropic-project-glasswing</guid>
            <pubDate>Tue, 21 Apr 2026 22:00:32 GMT</pubDate>
            <description><![CDATA[OverviewAnthropic has been at the forefront of AI innovations. Dario Amodei, Anthropic CEO, has always been mindful of the dangers of very powerful AI models and has advocated for their responsible use. Recognizing the power of their Mythos model to uncover long-hidden software vulnerabilities, Anthropic took a responsible approach. Through Project Glasswing, they made the model available only to a select group of organizations that either operate or protect our country's critical infrastructure. Zscaler is proud to collaborate with Anthropic on Project Glasswing, which has provided us with access to Claude Mythos Preview.&nbsp;The premise is simple, frontier AI models have reached a point where they can find software vulnerabilities faster than humans can. Mythos Preview understands code the way a skilled human researcher does, reading logic, chaining multiple weaknesses together, and producing working exploits in hours, at machine speed, instead of weeks. It has already uncovered thousands of high-severity flaws across major operating systems and browsers. The ability of AI to rapidly uncover vulnerabilities and produce working exploits is going to accelerate, and when it does, defenders need to be ahead.Reactive patching is no longer a viable defense strategy. You cannot outpace AI-driven vulnerability discovery, and you cannot out-hire the efficiency of an automated adversary. The only durable answer is founded on architecture. This means simply adding another tool on top of your security stack won’t cut it. You cannot patch, detect, or respond your way out of a problem created by exposing applications to the internet in the first place; you have to stop exposing them. The Old Game Is LostFor thirty years the industry has played the same game. Put a firewall at the edge. Put a VPN in front of your applications. Scan for known vulnerabilities. Patch what you find. Hope you find them before the adversary does.That game assumed a human-speed attacker. Mythos Preview ends that assumption. If your application is exposed to the internet behind a firewall or a VPN, a frontier model can already see it. It can scan every internet-facing surface parallel, test for weaknesses no human team has the bandwidth to check and do it continuously. Once that capability is in the hands of a nation-state or a ransomware group, your patch cycle is irrelevant.Legacy security was built on the hope that we could outrun the attacker. In an era of AI-driven exploits, that race is over. We now have to assume the attacker is already inside. A Fundamentally Different ArchitectureZscaler was built for exactly this moment, and we have been saying it for more than 18 years. If you are reachable, you are breachable.Zero Trust is not a feature. It is not a firewall with a new label. It is a fundamentally different architecture, built on a different principle. Users never connect to the network and applications are never exposed to the internet. Endpoint context is understood, and devices are verified before they connect. Data is protected the moment it is accessed. Every connection, whether human or AI agent, is brokered one to one with a verified identity in real time, with no lateral path to anything else.When an application is hidden behind the Zscaler Zero Trust Exchange, it has no public IP, open port, or discoverable surface. An attacker scanning the internet cannot find what is not there. The vulnerability may exist in the code. It may even be cataloged in a CVE (Common Vulnerabilities and Exposures) database. But the adversary has no way to reach it.This is the difference between detecting attacks and taking your applications off the public internet entirely, so there is nothing for attackers to target. Both matter. Only one scales against machine-speed offense. What Zscaler Brings to Project GlasswingZscaler is the platform that 40% of the Global 2000 trust to run their businesses. Our contribution is grounded in how the Zero Trust Exchange platform already operates at the core of the enterprise.&nbsp;The largest security cloud in the world:&nbsp;Zscaler processes over 500 billion transactions every day and hundreds of trillions of signals. That scale is what lets our AI distinguish a benign request from a reconnaissance probe. We do this inline, before a connection is ever established.Attack surface elimination:&nbsp;The Zscaler Zero Trust Exchange makes internal applications invisible to the internet. Whether those applications are running in your data center, or in the public cloud, Zscaler hides them from attack. No firewalls or VPNs to exploit, and nothing for a frontier model to find.Data protection at the point of use:&nbsp;The new risk is not someone breaking in. It is your own AI tools quietly taking sensitive data out. Zscaler’s AI guardrails see every request as it happens, across SaaS, private apps, email, and encrypted traffic, and stops the data before it leaves.Zero trust for AI agents:&nbsp;Agents are now acting autonomously on behalf of users. They are authorized to access data, they take action and connect to other systems. They must be governed with the same architecture we apply to human users. Every agent gets a verified identity, access to one specific application, and a full record of what it did.&nbsp; How Zscaler Will Use Mythos PreviewWe are integrating Mythos Preview into our secure software development lifecycle. It will enable us to rapidly find vulnerabilities in our software stack and Zero Trust Exchange, further hardening our environment and reducing risk for our customers. As a proud member of the Project Glasswing coalition, we will share our findings back to the community, helping everyone improve security outcomes for the world. Additionally, we will integrate Anthropic’s Opus 4.7 model into our AI Red Teaming and Agentic SecOps offerings, to help fight AI threats with advanced AI security capabilities. A Familiar PatternWhen the cloud arrived, the industry said the old perimeter would hold. It did not. When mobile and SaaS arrived, the industry said VPNs would adapt. They did not. Every twenty to thirty years the architecture has to change, and the companies that adapt win the next decade.AI is that inflection, and it is moving faster than any shift before it. The adversary already has the model. So do we. The question is whether the enterprise will keep defending a perimeter that no longer exists, or take its applications off the public internet entirely.There is no such thing as a Zero Trust firewall or an AI-proof VPN. There is only the architecture you choose before the next breach.Zscaler is that choice. Project Glasswing is how we accelerate it across the industry. The time to act is now. Where to Learn MoreWatch the webinar recording form Wednesday, April 22 or Thursday, April 23, where we discussed how to protect your organization against vulnerabilities found by frontier AI models like Claude Mythos.]]></description>
            <dc:creator>Jay Chaudhry (CEO and Founder of Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler and OpenAI Partner to Advance the Next Era of Cybersecurity]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-and-openai-join-forces-advance-next-era-cybersecurity</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-and-openai-join-forces-advance-next-era-cybersecurity</guid>
            <pubDate>Thu, 16 Apr 2026 04:27:12 GMT</pubDate>
            <description><![CDATA[OverviewZscaler is proud to partner with OpenAI as part of their&nbsp;Trusted Access for Cyber (TAC) program, which expands trusted, verified access to advanced AI capabilities for defenders. As part of this program, we plan to use GPT 5.4-Cyber, a TAC-enabled variant of GPT‑5.4, to further improve cybersecurity for our Zero Trust Exchange platform and for our customers. GPT 5.4-Cyber will be integrated into our secure Software Development Lifecycle (SDLC) workflows, empowering our teams to instantly detect, triage, and mitigate vulnerabilities earlier and patch security vulnerabilities faster. In addition to safeguarding software, Zscaler has a long history of harnessing OpenAI technology to fight AI-based attacks, including within our&nbsp;AI Red Teaming and&nbsp;Agentic SecOps solutions. Safeguarding the Zscaler PlatformSecure software development is a business imperative at Zscaler. Participating in Open AI’s TAC program enables us to integrate GPT 5.4-Cyber and&nbsp;Codex Security into Zscaler’s internal multi‑agent security architecture for cyber defenses and product hardening. GPT 5.4-Cyber is a key enabler to offer Security-as-a-Service to our developers throughout the SDLC process, from validating threat models in designs, to assisting with secure code reviews, finding vulnerabilities, and executing black-box testing on built artifacts.We are approaching TAC with both a defensive and offensive mindset. In addition to improving security through the SDLC, we are leveraging the model to improve cyber readiness by turning large volumes of security signals into actionable intelligence, prioritizing true risk, and accelerating remediations. Moreover, we are relying on the model for offensive-informed posture hardening by modeling adversarial attack paths and highlighting weak controls, which enables us to neutralize exposures at unprecedented speeds.&nbsp;&nbsp;Combining the frontier OpenAI models with Zscaler’s industry‑leading Zero Trust architecture leads to better security outcomes for our customers. In addition to leveraging AI to identify and remediate any software vulnerabilities, Zscaler’s Zero Trust architecture adds another layer of protection by making critical apps and software invisible to the Internet. This combination provides Zscaler customers superior protection compared to obsolete VPNs and firewalls, maximizing software resiliency while systematically eliminating the internet-facing attack surface.&nbsp; Harnessing OpenAI for AI Red Teaming&nbsp;Zscaler has been using OpenAI’s 4.x and 5.x models for building advanced capabilities in our AI Red Teaming suite of products to help customers safely build and deploy AI systems, including:Continuous Red Teaming Prompt hardening AI Asset AnalysisAgentic Radar open source programZscaler’s&nbsp;AI Red Teaming platform (formerly SPLX) has relied on OpenAI models across the stack since early 2024. Multiple versions of OpenAI models have been central to dynamically generating attack sequences to harden AI systems. With multimodal red teaming (spanning voice and images), OpenAI’s image generation, text-to-speech, and speech-to-text capabilities deliver a decisive tactical advantage. Together, these capabilities provide an industry leading solution to strengthen the security of their AI initiatives.&nbsp;&nbsp;Beyond merely exposing vulnerabilities during red teaming exercises, Zscaler’s solution dictates instant remediation in true closed loop fashion by generating optimized system prompts. This serves as the definitive first step AI engineers take to help improve security and safety posture.&nbsp;Zscaler is also using OpenAI models as part of its AI Asset Analysis solution, which analyzes MCP tools and risks, and provides overall risk analysis for complex AI agents based on source-code scanning. This is an enterprise version of the&nbsp;Agentic Radar open source program, which powered the largest&nbsp;OpenAI hackathon last year in Warsaw, Poland. Leveraging OpenAI for Agentic SecOpsZscaler's&nbsp;Red Canary Managed Detection and Response (MDR) service combines AI-powered threat detection with expert security operations in partnership with OpenAI. OpenAI-powered agents work alongside Zscaler experts to handle the tedious context-gathering that traditionally overwhelms SecOps analysts. Elite human analysts dictate workflows, enforce rigid guardrails, and rigorously validate all outputs, maintaining the 99.6% true-positive rate our customers depend on. By pairing OpenAI's adaptive capabilities with Zscaler’s data pipelines, expert procedures, and rigorous validation, we deliver faster, more consistent investigations without sacrificing the accuracy that defines the Zscaler Red Canary MDR service. Building the Right FoundationAI is fundamentally rewriting the rules of cybersecurity. By partnering with leading vendors like OpenAI, Zscaler is ensuring AI can be used to help improve the overall resilience of our security infrastructure, and mitigate risks from AI-based attacks. We look forward to working with OpenAI as part of their TAC program to improve outcomes for our customers. Enterprise organizations will benefit immensely by using state of the art OpenAI models for better defenses combined with Zscaler’s industry leading Zero Trust architecture to minimize the attack surface and assets exposed on the Internet with traditional VPNs and Firewalls.&nbsp;]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[AI Machine Speed is Breaking VPN Security]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/ai-machine-speed-breaking-vpn-security</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/ai-machine-speed-breaking-vpn-security</guid>
            <pubDate>Mon, 23 Mar 2026 22:27:12 GMT</pubDate>
            <description><![CDATA[Key Findings from the Threatlabz 2026 VPN Risk Report&nbsp;Remote access isn’t a new problem. VPN risk isn’t a new conversation. What’s new, and what the Zscaler ThreatLabz 2026 VPN Risk Report makes unmistakably clear, is the speed at which the threat landscape is changing.Why this matters now:&nbsp;The #1 fear among defenders is AI speed, and it’s already showing up in the field. 79% fear AI exploitation speed. The same VPN controls that felt “good enough” even a year ago can become dangerously slow when attackers can iterate and adapt at machine speed.AI machine speed compresses the time from weakness to exploit, while VPN visibility and patch cycles often can’t keep up. Meanwhile, many organizations are still defending VPN-centric access with realities that move far slower: limited inspection coverage, and access models that can expand blast radius once a user is connected.This report is a snapshot of where the industry is right now, and a wake-up call that “good enough” remote access controls can become “not even close” when adversaries scale faster than defenders can respond.Below are the key findings from our survey of 822 IT and cybersecurity professionals. It is a real-world view of what teams are seeing and what they mean for CISOs, network/security ops, and IT leadership, followed by practical actions you can take to shrink the breach window. What the report reveals: AI is already here, and VPN visibility is laggingThe report shows AI-enabled attacks are no longer hypothetical:61% of organizations report encountering AI-enabled attacks in the last 12 months.But the bigger issue is what comes next: visibility and control. The report found:70% say they have limited or no visibility into AI-enabled threats moving over VPN. And there’s an additional layer to that visibility problem:One in five organizations cannot distinguish an AI-assisted intrusion from a conventional attack.Only one in four has managed to deploy AI-powered monitoring (24%).That combination is the perfect recipe for faster compromise. AI helps attackers iterate quickly on social engineering, reconnaissance, and targeting, while many teams still struggle to see enough of what’s happening inside VPN connections to catch abuse early. The breach window is widening because patch timelines don’t match exploit timelinesWhen critical VPN vulnerabilities emerge, the risk isn’t just the CVE. It’s the time it takes to remediate across upgrade cycles, change windows, and validation.&nbsp;The report highlights a difficult operational reality:54% of organizations say it takes a week or more to patch critical VPN vulnerabilities. It’s not just a technical problem. It’s an operational one.56% rank patching as their top operational challenge.A week may be a perfectly reasonable timeframe in traditional IT operations. In an AI-accelerated threat environment, it can be a lifetime. Attackers don’t need to “wait you out” anymore. They can identify targets, test attack paths, and operationalize new techniques quickly, often while defenders are still triaging impact, coordinating change windows, and validating fixes. Encrypted traffic is creating blind spots where attackers can operateEncryption is table stakes. But encryption without visibility can become a hiding place.The report found:1 in 3 organizations inspect 0% of encrypted VPN traffic.Even among organizations that do inspect, near-total visibility is rare.&nbsp;Only 8% can inspect virtually everything.This is a defining vulnerability in modern environments. If meaningful traffic flows are opaque, defenders lose detection opportunities and response confidence. In the AI era, adversaries can move quickly and quietly, reducing the dwell time required to be successful. Lateral movement is the multiplier once attackers get in&nbsp;Once an attacker gets a foothold, the real risk is how far they can move. The report shows that most VPN environments still grant network-level reach rather than app-level containment.&nbsp;Only 11% can restrict a compromised session to a single application.&nbsp;In other words, in the vast majority of organizations, a stolen credential can become a pathway to broader internal access. This is exactly the condition attackers exploit to move laterally and expand impact. User behavior is a risk signal, not a blame pointOne of the most actionable findings in the report is also one of the most human:63% say users bypass VPN controls to reach apps faster.The “why” behind bypass is most often about performance and reliability.Slow connections top the complaint list at 29%, followed by inconsistent device behavior (23%) and frequent disconnections (19%).This isn’t about users being careless. It’s about friction. When secure access feels slow, inconsistent, or cumbersome, people route around it to get work done. Those workarounds create “shadow access paths” that are harder to govern and easier to exploit.For IT leadership, this is a reliability and productivity warning: if access isn’t dependable, people will find alternatives.For security and network ops, it’s a control-plane warning: policy enforcement becomes fragmented across tools and paths.For CISOs, it becomes a risk governance issue: if “official access” isn’t the default, then your risk model is built on exceptions. What this means for leaders: it’s no longer “VPN secure vs not secure”The report’s headline, AI machine speed kills VPN security, is less about a single technology and more about a structural mismatch:AI accelerates attacker speed and variationVPN models often expand reach once connectedVisibility into what matters can be incomplete (especially with encryption)Patch and change timelines remain constrainedUser workarounds widen the attack surfaceThis is how breach windows open. And in 2026, breach windows don’t stay open because teams don’t care. They stay open because the architecture and operations weren’t built to close them fast enough. Containment-first access is becoming the mainstream directionThe report’s findings are pushing many organizations to evolve from network-based remote access toward app-based access principles by reducing broad connectivity, tightening access policies, and improving visibility and control without adding friction.That momentum is already mainstream:84% are planning or transitioning to zero trust, up from 78% two years ago.If you’re evaluating modernization, keep it outcome-driven:Shrink blast radius (limit what a session can reach)Improve meaningful visibility (especially around encrypted traffic patterns and sensitive apps)Enforce access using identity, context, and device postureDeliver a user experience that makes the secure path the easy pathThe hero's move isn’t “buying something.” It’s leading a shift from connectivity-first to containment-first access. The report is a benchmark—use it to take your next stepThe ThreatLabz 2026 VPN Risk Report offers more than stats. It offers a benchmark for how organizations are experiencing AI-driven pressure on VPN security visibility gaps, patch timelines, and user workarounds included.AI machine speed kills VPN security when defenders are forced to operate with broad reach, blind spots, and slow exposure windows. The way forward is measurable containment: smaller blast radius, faster detection, fewer bypass paths, and an access model built for how work happens now.&nbsp;Download the ThreatLabz 2026 VPN Risk Report to see the full data behind these findings.]]></description>
            <dc:creator>Olivia Vort (Senior Product Marketing Manager, Zero Trust Browser)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Act Fast: RSA 2026]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/act-fast-rsa-2026</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/act-fast-rsa-2026</guid>
            <pubDate>Fri, 20 Mar 2026 16:00:05 GMT</pubDate>
            <description><![CDATA[Next week, the cybersecurity industry gathers in San Francisco for the RSA Conference. While the scale of the event is always a spectacle, its true value lies in how it nurtures the realignment in our collective understanding of risk.This year, that understanding must undergo a fast and fundamental shift because the systems we are trying to secure no longer behave like bounded systems. They behave as networks of decisions which carry risk in every direction.&nbsp; From Static Systems to Dynamic Supply ChainsEnterprise security once relied on a comfortable assumption: systems were bounded and knowable. AI has rendered that assumption obsolete.A single interaction with an AI assistant can trigger a cascade of activity across external models, APIs, and autonomous agents. Data leaves, transforms, and returns. Decisions are delegated across components that often lack a unified security posture. We are no longer just managing applications; we are overseeing AI supply chains.Risk in these environments is not confined to a single breach point. It emerges from the relationships between components. Our research at ThreatLabz confirms the fragility of this new architecture: in controlled testing, 100% of enterprise AI systems analyzed exhibited exploitable vulnerabilities. Often, a full compromise required nothing more than a single interaction.We have also spent years optimizing detection and response, a model that assumes we have time to act. In the age of AI, that time has further evaporated to nothing.Findings from the ThreatLabz 2026 AI Security Report show that AI systems can fail in as little as one second, with a median time to compromise measured in mere minutes. There is no meaningful dwell time in this scenario. There is only the interaction.This implies a hard truth: security cannot be an afterthought. It must exist within the flow of transactions everywhere. Extending Zero Trust to the InteractionThe shift from bounded systems to distributed networks requires a fundamental evolution of our security principles. Zero Trust has traditionally focused on verifying users, devices, and networks. In the age of AI, we must extend this to the interaction.Continuous Evaluation: Trust cannot be granted at the point of entry and assumed thereafter. It must be reassessed at every step of the decision chain.Visibility Beyond the Edge: Security must be able to follow the data and context as they move across models and third-party services.Inline Control: Policies must operate at the point of interaction, where decisions are made, rather than after an outcome is produced.The gap in security today isn't a lack of tools, but a mismatch of models. The traditional perimeter has not just dissolved; it has been replaced by a complex web of AI supply chains and model interactions. While we have focused on securing the edges of environments that are no longer bounded, the true risk has moved to the interaction layer. Understanding and governing the AI supply chain is the only way to close that gap. At RSA, we need to move past the hype and discuss the practical architecture required to secure these dynamic high-velocity workflows.&nbsp; Complexity is a Gift to the AdversaryOne of the biggest challenges I regularly hear from CISOs is the exhaustion caused by tool sprawl. Over the last decade, organizations have layered point product upon point product. While each was intended to solve a specific problem, the collective result is a fragmented mess that creates fatal blind spots.Amongst the many other challenges, every siloed tool is an opportunity for a threat actor. This is why the industry is increasingly shifting toward platform-based security architectures that unify visibility across users, devices, applications, data, and now AI interactions.You will hear a lot of noise about end-to-end solutions next week. However, there is a fundamental difference between a suite of products stitched together and a platform built from the ground up to share intelligence. A cloud-native AI security platform doesn’t just reduce costs; it provides the inline context and automation needed to solve complexity and outpace threats. In a world of high-velocity attacks, simplification is a strategic imperative. Alignment at RSAThe industry does not lack awareness; it lacks alignment between how systems are built and how they are secured. At RSA, we will demonstrate how the Zscaler AI Security Platform applies Zero Trust to this new reality—securing the interactions that now define enterprise risk.We invite you to visit us at Booth #N-5269 and connect with the Zscaler team to discuss how to discover your AI supply chain, reduce risk fast, and stay secure.I look forward to seeing many of you in San Francisco.]]></description>
            <dc:creator>Sunil Frida (Chief Marketing Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[See You at RSA 2026]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/see-you-rsa-2026</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/see-you-rsa-2026</guid>
            <pubDate>Fri, 13 Mar 2026 17:01:59 GMT</pubDate>
            <description><![CDATA[Every year, the cybersecurity industry gathers in San Francisco for one reason.RSA.For one week, Moscone becomes the center of the security world. Thousands of practitioners, builders, researchers, CISOs, and innovators come together to share ideas, debate the future, and challenge how security needs to evolve.The conversations start early. They spill out into the hallways, across the show floor, and late into the night.And every year, the drumbeat gets louder.This year feels different.AI is changing how every organization works, builds, and innovates. At the same time, it is expanding the attack surface and accelerating the pace of risk. Security leaders everywhere are asking the same question:How do we move faster without losing control?That is the conversation we are bringing to RSAC 2026.Meet with us | Learn more | Register for RSAC 2026 What Zscaler Is Bringing to RSACAt Booth #N-5269, the Zscaler team will be showcasing the AI Security Platform built on Zero Trust.Not as a concept.As something you can see, experience, and challenge with your toughest questions.Throughout the week we will be demonstrating how organizations are applying security outcomes that matter:Zero Trust EverywhereSecure every user, every app, and every location.Secure AI EverywhereProtect AI adoption and govern how AI is used across your organization.Protect Data EverywhereDiscover sensitive data automatically, secure it across all channels including AI, and prevent exposure before it becomes a breach.Reduce Risk EverywhereUnify exposure and threat management and accelerate response with intelligent security operations.If you are navigating AI adoption, updating your architecture, or simply trying to reduce complexity in your environment, these are conversations worth having. Must See Sessions at RSARSA is always packed with great content, and this year the Zscaler team is bringing five different sessions to get excited about. These are conversations that get to the heart of what security leaders are navigating right now.March 23 | 10:15 – 10:45 AM: Join Jay Chaudry, CEO of Zscaler at the CSA Summit 2026 where he will be discussing Zero Trust and AI as the architecture for the intelligent age with Alan Rosa, CISO, CVS.March 24, 2026 | 9:40 AM – 10:30 AM: Securing GenAI Adoption: Usage Insights, Threats, and Defenses with Deepen Desai, EVP Engineering (Agentic Security Operations) and Dhawal Sharma, EVP Products &amp; Strategy (AI Security).March 24, 2026 | 1:15 – 2:45 PM: Hands-On Threat Hunt: Building a Dynamic Hunt Program with Michael Wylie, Director of Threat Hunting.March 25, 2026 | 12:00 PM – 12:50 PM: What Are You, Really? Authenticating Workloads in a Zero Trust World with Sam Curry, SVP Global CISO and Yaroslav Rosomakho, Chief Scientist.March 25, 2026 | 2:25 PM – 3:15 PM: MASQUE of the Red Death: Rethinking Secure Connectivity with Sam Curry, SVP Global CISO and Yaroslav Rosomakho, Chief Scientist. What I Love About RSARSA is not just about products.It is about the community.It is the one week a year where the entire security industry shows up in one place. The hallway conversations. The sessions. The spontaneous debates about what’s working and what’s not.Some of the most valuable moments happen between meetings, events, and the show floor.That is why so many of us continue to show up every year.And it’s why I am excited for this one. Let’s Connect at RSACIf you are heading to San Francisco, come find us.Stop by the booth. Watch a demo. Attend a speaking session. Challenge our thinking. Share what you are seeing inside your organization.The best part of RSA has always been the conversations.We cannot wait to have them.We will see you at RSAC 2026.Booth #N-5269Moscone Center | San FranciscoAct Fast. Stay Secure.Meet with us | Learn more | Register for RSAC 2026]]></description>
            <dc:creator>Emily Laufer (Director, Product Marketing - AI Security)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Restrict risk not innovation.  A new mindset for the Financial Services boardroom]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/restrict-risk-not-innovation-a-new-mindset-for-the-financial-services-boardroom</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/restrict-risk-not-innovation-a-new-mindset-for-the-financial-services-boardroom</guid>
            <pubDate>Fri, 13 Mar 2026 13:03:01 GMT</pubDate>
            <description><![CDATA[I met with a CISO last week who could see clear gaps in his internal and external security posture because users were free to disable security controls. He knew it was creating risk but didn’t want to change it because of a ‘user-first’ mentality. This is not a user-centric behaviour, it is creating risk that your organization (and, incidentally, your users) doesn’t need.When caution is risky&nbsp;Big banks can’t out-innovate digital challengers if all their energy is spent ticking compliance boxes. And, if we look at where AI accountability is headed, it’s clear innovation will keep drawing the short straw.&nbsp;That ‘stay in your lane’ understanding between business versus IT is old-school at best, counter-productive at worst. The days of leadership seeing security issues as “something that IT handles” are gone. Singapore is already considering holding top banking execs&nbsp;personally accountable for AI-related risks.&nbsp;If this becomes a global benchmark, leaders will shoot down more bold bets. They will cling to compliance because it feels safe, even if it costs them the win. Customers won’t wait around. If you stall, or seem irrelevant, they’ll jump to the next shiny thing.C-Suite must greenlight innovation to stay competitive. But each new system, AI-driven service or merger comes with risk. Regulators don’t ease up. Every move you make needs evidence, signatures, and someone to blame if it goes wrong. In the financial sector, none of this is new, and it doesn’t go away. Question is, can we protect innovation in this security-first space? Yes. Can we do it without AI? No. If innovation needs confidence and speed, AI gives you the speed. The confidence? That’s where people freeze.Make it safe to go fastIndecision is expensive. While the board takes six months to debate pros and cons of a new capability, a hundred fintechs have beat them to it. It isn’t caution, it’s self-sabotage. They recognize the opportunity but, still, they hesitate.&nbsp;The problem is how we view security. Security isn’t the brakes. It’s the helmet, the seatbelt, and the training the driver gets. You need a roll cage in place. Something that allows you to take the corners at speed, that lets you push hard without worrying that the whole thing will flip over.&nbsp;This is where zero trust comes in. Talk of it is everywhere. Most of it is noise. Here’s what matters: zero trust&nbsp;IS that roll cage. It lets you move fast because it’s built to expect failure and limit the blast radius. It assumes nothing and checks everything; it contains damage, not creative ideas.&nbsp;If the board had the comfort to commit to fast change, they could stop asking “Is this safe?” and start asking “How far can we push this idea?” That’s leadership freedom. It’s not about slowing innovation but about making it safe to maintain speed. Zero trust transforms security from ‘the office of No’ into the foundation that lets the business say “Yes” faster. It gives leaders the confidence to make bold calls.What’s the alternative, really? Keep playing defense? Keep letting legacy liabilities dictate your pace of innovation? Do that and watch competitors lap you.&nbsp;Zero Trust isn’t procurement. It’s postureJust remember not to treat zero trust deployment like a checkbox exercise. It’s a mindset. It’s not just buying a tool; it’s rethinking access, identity, and trust across your entire environment. Beware of vendors who pitch zero trust like it’s a product you can buy on a Tuesday and deploy by Thursday. If someone promises you zero trust in a box, they’re selling you a box.It takes effort to build a great zero trust foundation because ‘verify everything’ isn’t one-size-fits-all. You must define exactly what that means for your business: which users can touch which applications, under what conditions, and which data is truly business‑critical versus routine. It relies on identity‑led policies, granular application access, and data classification that reflects real risk, not blanket permissions or inherited trust.Getting all of this right takes planning and discipline. But done properly, it’s the difference between leading and lagging. This is why zero trust is a leadership issue, not just a technical one.So, here’s my question: What’s the project you’ve been sitting on because you couldn’t justify the risk… to your budget, time, people? What would it take to greenlight it tomorrow?Restrict risk, not innovation:&nbsp;Before you greenlight that project you’ve been sitting on, read&nbsp;The Ripple Effect: A Hallmark of Resilient Cybersecurity for a clear blueprint on extending resilience beyond your walls.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[L’effet domino : pourquoi votre cyber-résilience doit s’étendre au-delà des murs de l’entreprise]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-ripple-effect-why-your-cyber-resilience-must-look-beyond-your-walls</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-ripple-effect-why-your-cyber-resilience-must-look-beyond-your-walls</guid>
            <pubDate>Fri, 27 Feb 2026 20:34:22 GMT</pubDate>
            <description><![CDATA[Le monde devient chaque jour plus incertain. Entre cyberattaques dopées à l’IA, menace émergente de l’informatique quantique, tensions géopolitiques et instabilité des chaînes d’approvisionnement, les facteurs externes provoquent des ondes de choc qui traversent l’ensemble des entreprises. Pour les entreprises qui cherchent à préserver la continuité d’activité et l’agilité, simplement réagir aux perturbations ne suffit plus. La résilience ne peut plus se limiter à un mécanisme de défense interne, elle doit devenir un principe de conception tourné vers l’extérieur.Pour mieux comprendre comment les entreprises gèrent ces pressions externes, Zscaler a interrogé 1 750 responsables IT dans 14 marchés à l’échelle mondiale. Bien que l’engagement et l’investissement dans la cyber-résilience sont élevés, nos conclusions mettent en lumière un écart critique : la confiance des entreprises repose souvent sur un sentiment de contrôle des systèmes internes, plutôt que sur une véritable préparation aux perturbations externes. Une majorité (61 %) des responsables IT dans le monde reconnaissent que leurs stratégies de résilience restent trop centrées sur l’interne.Le rapport de cette année, « L’effet domino : Comment rendre votre cybersécurité plus résiliente ? », démontre que la véritable résilience doit se diffuser à travers les différentes couches de dépendance — partenaires, plateformes et chaînes d’approvisionnement — afin de se prémunir des risques externes avant qu’ils ne déstabilisent les opérations. En adoptant une approche Resilience by Design qui dépasse les murs de l’entreprise, les entreprises peuvent intégrer, dès la conception, la capacité de faire face à l’inévitable.Lacunes critiques : les limites d’une approche axée sur l’interneUne approche de sécurité axée sur les systèmes internes présente quatre vulnérabilités majeures. Premièrement, la dépendance à l’égard des tiers constitue une source majeure de vulnérabilité : 68 % des entreprises s’appuient davantage sur des tiers, mais moins de la moitié ont mis à jour leur stratégie de résilience et le taux d’adoption de mesures de contrôle des risques reste inférieure à 50 %. Cet écart considérable critique a entraîné l’an dernier une défaillance majeure liée à un fournisseur pour 60 % des entreprises. Plus inquiétant encore, seules 54 % des entreprises sont couvertes par une assurance cyber en cas de compromission impliquant un tiers. Deuxièmement, l’évolution technologique constitue un défi : 52 % des responsables IT estiment que leurs dispositifs de sécurité actuels ne sont pas capables de contrer des menaces existantes ou émergentes telles que l’IA agentique et l’informatique quantique. Si 42 % testent l’IA agentique et 34 % l’ont déjà déployée, la moitié l’a fait sans cadre de gouvernance. Sept responsables IT sur dix déclarent ne pas avoir de visibilité sur l’usage de « l’IA fantôme », et 56 % redoutent une exposition de données sensibles. Par ailleurs, 57 % n’ont pas encore intégré la cryptographie post-quantique (PQC) dans leur stratégie de sécurité, alors même que 60 % reconnaissent que les données volées aujourd’hui pourraient être exploitées dans trois à cinq ans. Troisièmement, les pressions macroéconomiques imposent des ajustements rapides : 74 % des responsables IT estiment que l’environnement macroéconomique les contraint à réorienter rapidement leurs priorités. Si la planification progresse (71 % pour la conformité réglementaire, 69 % pour la localisation des données), une grande partie des réponses reste encore réactive.La dépendance aux technologies étrangères alimente également les débats autour des politiques et des réglementations de souveraineté et pousse les entreprises à agir : notre enquête révèle que les responsables IT s’attaquent activement à ce risque. Ainsi, 79 % évaluent leur dépendance aux technologies étrangères, tandis que six sur dix ont mis à jour leur stratégie de cyber-résilience au cours de l’année écoulée afin de répondre à de nouvelles exigences de souveraineté ou à leur évolution. L’an dernier, 60 % des entreprises ont mis à jour leurs stratégies de cyber-résilience en réponse à l’évolution de la réglementation, notamment NIS2, DORA et le RGPD.Enfin, l’architecture héritée demeure un obstacle majeur, dans la mesure où 81 % des entreprises dépendent encore de manière critique ou modérée à des systèmes hérités. Par ailleurs, 64 % des répondants reconnaissent que leur infrastructure actuelle entrave une réponse efficace aux incidents, et 59 % estiment que leur architecture ne parvient pas à s’adapter au rythme des évolutions de l’entreprise. Pour se montrer véritablement résilientes, les entreprises doivent procéder à des tests de résistance externes — par exemple en simulant des perturbations liées à l’informatique quantique, à l’IA ou aux interdépendances entre fournisseurs — afin de révéler les risques cachés.Renforcer votre approche Resilient by Design : trois actionsPour combler les failles de sécurité et déclencher « l’effet domino » protecteur, les entreprises doivent étendre leur réflexion sur la résilience au-delà de leur périmètre interne. Cela implique de faire de la visibilité une priorité et d’intégrer une démarche proactive d’identification des risques à tous les niveaux : au-delà des systèmes internes, vers les forces externes qui façonnent le risque opérationnel, tout en suivant les données à travers les systèmes internes, les partenaires externes et l’ensemble de la chaîne d’approvisionnement. Pour y parvenir, trois changements stratégiques s’imposent :Prendre du recul et veiller à ce que les changements architecturaux soient gérables : l’agilité est essentielle et suppose des architectures flexibles capables de s’adapter à des menaces externes en rapide évolution. Une architecture de plateforme facilite cette adaptation ; la complexité est l’ennemie de l’agilité, et découpler la sécurité de l’infrastructure réseau est indispensable pour agir rapidement.Faire de la visibilité une priorité et intégrer une démarche proactive d’identification des risques à tous les niveaux : passer d’une recherche réactive des menaces à une recherche proactive des risques, en suivant les données partout — à travers les systèmes internes, les partenaires externes et l’ensemble de la chaîne d’approvisionnement.Construire progressivement, car préparer l’avenir relève d’une évolution et non d’une rupture : avec une architecture de plateforme robuste et interopérable, la préparation aux menaces futures devient un processus continu. Par exemple, sécuriser l’IA agentique s’appuie sur les capacités existantes de protection contre la perte de données (DLP), et la préparation à la cryptographie post-quantique repose sur une démarche progressive fondée sur la visibilité et des mises à jour incrémentales.Une résilience qui rayonne vers l’extérieurZscaler Zero Trust Exchange est conçue pour offrir cette résilience étendue, tournée vers l’extérieur. Plateforme de sécurité native du cloud, elle permet aux entreprises de :Prioriser la visibilité : une plateforme de sécurité unifiée qui gère la sécurité des données, la sécurité de l’IA et la sécurité des tiers, offre un contrôle de bout en bout sur l’ensemble de la surface de risque, y compris les sous-traitants et les chaînes d’approvisionnement.Simplifier grâce à une approche plateforme : en découplant la sécurité de l’infrastructure réseau, elle permet des connexions sécurisées fondées sur l’identité et donne aux entreprises la capacité de reconfigurer rapidement marchés et flux de données à mesure que les conditions évoluent, tout en répondant aux exigences de souveraineté des données grâce à 25 data centers répartis à travers l’Europe.S’adapter rapidement grâce au Zero Trust : cette approche offre une trajectoire évolutive dans laquelle la sécurité de l’IA générative et la visibilité sur la cryptographie post-quantique peuvent être activées simplement depuis un tableau de bord unique, en s’appuyant sur des contrôles unifiés pour garantir une préparation durable.Dans l’économie actuelle fondée sur les tiers, la résilience d’un entreprise n’est jamais plus solide que l’écosystème dont elle dépend. Si un entreprise ne conçoit pas et ne valide pas en continu ses contrôles de sécurité à travers l’ensemble de son écosystème — fournisseurs, prestataires et plateformes partagées — l’incident d’un partenaire peut rapidement devenir sa propre interruption de service.Pour prospérer dans l’incertitude, les entreprises doivent consolider leurs fondations internes afin d’étendre leur résilience à l’ensemble de leur écosystème, et passer de mesures réactives à une approche proactive et stratégique.Bâtissez votre résilience sur des bases solides afin que la protection qu’elle procure se diffuse vers l’extérieur et atténue l’impact des risques externes qui échappent à votre contrôle.Besoin de conseils ? Contactez Zscaler pour amplifier l’effet domino au sein de votre entreprise et consultez le rapport completici.]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[MWC 26: Zscaler Cellular provides a secure and connected world with Telecommunication partners]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/mwc-26-zscaler-cellular-provides-a-secure-and-connected-world-with-telecommunication-partners</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/mwc-26-zscaler-cellular-provides-a-secure-and-connected-world-with-telecommunication-partners</guid>
            <pubDate>Thu, 19 Feb 2026 09:44:23 GMT</pubDate>
            <description><![CDATA[Mobile World Congress is where industries come together to shape what’s next in connectivity - from cellular and private networks to massive-scale IoT. But as enterprises accelerate deployment of connected devices in all manner of environments, from warehouses and retail kiosks to EV chargers and smart city infrastructure, security teams are facing a hard truth: traditional, network-based security models were not built for today’s highly mobile and distributed cellular environments. With AI tools and services booming in organizations, the need for secure device connectivity and accurate data is bigger than ever before.Legacy approaches to cellular-connected security often rely on costly backhaul architectures and infrastructure that can’t scale at the speed of business. Many of these devices operate beyond the practical reach of firewalls, VPNs, and software agents. They are often deployed in hard-to-access locations, managed by different teams, and moved across regions and borders. As a result, organizations struggle with the fundamentals: having visibility into all data streams, controlling how devices connect, enforcing consistent policy, and responding fast when something changes. That lack of visibility and control creates security vulnerabilities and expands organizations' attack surface in exactly the places attackers increasingly target.Zscaler Cellular eliminates these challenges by embedding Zero Trust protection into the SIM itself. That means every packet of data from a cellular-connected device can be evaluated at the first connection—enabling real-time policy enforcement and secure routing through Zscaler’s global, cloud-native security platform. This is a foundational shift from “add security later” to initiate security immediately, at the point where connectivity begins.Visibility and control in “black box” cellular ecosystemsIn many cellular deployments, the customer experience has historically been connectivity-heavy. But security and application-level control are typically left to the enterprise, creating a shared responsibility model where the biggest immediate gap is often visibility. Zscaler Cellular addresses that gap from day one by enabling organizations to treat each asset as an isolated environment, aligned with the Zero Trust architecture. Assets can communicate only according to policy, rather than inheriting implicit trust simply because they are connected. A modern cellular security approach can pair carrier resilience with a control plane for SIM management, while adding security policy enforcement on top turning a fragmented, opaque environment into something measurable and governable. Based on its initial success with the cellular security offer, Zscaler takes the cellular service one step further into the connectivity world.Zscaler partners with leading telecommunications companies to bring advanced Zero Trust security to cellular-connected devices. Connectivity has always been perceived as part of the end-to-end solution and Zscaler is focused on delivering a complete outcome to customers, together with the telecommunication service provider; Providing secure access, protection, and visibility for cellular-connected environments at cloud scale. By leveraging the Zscaler Zero Trust Exchange with telecom infrastructure, Zscaler Cellular delivers secure, scalable, and seamless connectivity to all kinds of mobile devices or things.&nbsp;For enterprises, these partnerships help deliver managed security services that address the unique challenges of securing distributed, cellular-connected environments and thus extending Zero Trust principles across global cellular networks to reduce risk and enable transformation at scale.&nbsp;Partnering with providers to extend reach without heavy liftThat is the reason why Zscaler is investing in partnerships with telecom service providers at this year's MWC. Those partners bring&nbsp;reach, spectrum, and the connectivity footprint, while Zscaler enables&nbsp;Zero Trust security, visibility, and control for the data streams. Zscaler has always been an overlay technology as we don’t depend on&nbsp;how packets move from A to B, but rather focus on securing the conversation between the source and destination. Based on this handshake, providers can deliver an end-to-end offering that customers are actively asking for. This partner-led approach supports the customer‘s choice. Some organizations want to keep their existing provider relationships and SIM estates. Others prefer a fully managed solution. Mobile World Congress 2026 is the right moment for telecom providers to turn security into a growth engine.&nbsp;Zscaler is working with a select set of telecom providers like NTT and Singtel amongst others to build deep integrations that benefit both sides. Providers can continue selling their own SIMs domestically, while enabling customers with international footprints to extend secure connectivity through Zscaler Cellular, delivered via the provider relationship. The result is a practical way for service providers to expand reach and local breakout options without requiring large upfront investments in new equipment or complex deployments. This allows telecom providers to monetize next-generation 5G networks and security with one of the most powerful value-add services they can bring to market. Zscaler has built a global, cloud-native security backbone that now also understands mobile networking. By integrating with Zscaler Cellular, providers can accelerate secure local breakout and deliver 5G-ready experiences with an enterprise-grade security layer without forcing major capital expenditure or rebuilding their portfolios from scratch.Ask for your personal meeting with the Zscaler team on site via this&nbsp;meeting scheduler. See you in Barcelona at MWC!]]></description>
            <dc:creator>Daan Huybregts (Head of Innovation)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zenith Live Encore Highlights Resilience and the secure Future of AI]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zenith-live-encore-highlights-resilience-and-the-secure-future-of-ai</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zenith-live-encore-highlights-resilience-and-the-secure-future-of-ai</guid>
            <pubDate>Mon, 22 Dec 2025 13:40:26 GMT</pubDate>
            <description><![CDATA[It was a privilege to join my colleagues on stage for Zenith Live Encore in London earlier this month at the Vision Hall in King’s Cross. Alongside Lee Langley we welcomed over 400 security leaders and innovators to discuss the convergence of AI and Zero Trust. The energy was palpable, and if you couldn’t join us, here is a summary of the key themes and discussions that defined the day.&nbsp;A year of bold transformationThe pace of transformation across EMEA over the last 12 months has been remarkable. We are proud to having been able to help a growing number of organizations fully embrace Zero Trust, consolidate their platforms, and effectively counter real-world threats.&nbsp;However, as we move forward, the lines between internal networks and the public cloud have become increasingly blurred. To navigate this evolution, organizations must shift their mindset. I am continually inspired by the boldness and innovation demonstrated by our customers, but we must all recognize that we aren’t just deploying technology for technology’s sake, we are deploying it to solve critical business challenges.&nbsp;Value over enforcementIn a session on Secure AI Innovations led by James Tucker, Head of CISO at Zscaler, we dug into the reality of AI adoption. There was a clear consensus: the implementation of AI is fundamentally a business process discussion. We need to move from application to finding genuine value. This means focusing on what brings the most time back to employees and identifying where the biggest vulnerabilities lie. Often, the simplest problems to identify are the most complex to solve, which is why bringing employees into the conversation is vital to understand what AI tools they are using to bridge these gaps. This insight is critical for mapping the true flow of data across an organization is a necessary step when we accept that the AI universe is in fact a data security challenge.&nbsp;Speed vs. security – can we have both?&nbsp;One of the day’s standout moments was our industry panel, “The Need for Speed (And Security): Enabling Agentic AI Innovation Without Hitting the Brakes”. Featuring insights from Zeki Turedi, Field CTO at CrowdStrike, Rob Hale, Principal EMEA Security Leader at AWS, and Yaroslav Rosomakho as Zscaler Chief Scientist. The discussion underscored that we are in the midst of the Agentic era and shifting from where AI simply automates tasks but actively executes them on our behalf. This means that we will face more adversaries and more threats than ever before, requiring our defenses to keep pace.&nbsp;As AI agents become more autonomous, the attack surface expands, making it even more of a challenge to enable innovation without wanting to take pause. For security leaders, this means we now need to find that delicate balance and apply a slight break to ensure that we can move at the speed of AI, while still maintaining robust Zero Trust principles.&nbsp;Zero Trust EverywhereFrom disrupting new cyberthreats online, to hearing the real-world stories shared on stage, I feel even more assured that security must be woven into the very fabric of our digital future. And our mission – Zero Trust Everywhere, Powered by AI – is the blueprint for that future.&nbsp;But we cannot do it alone and none of this is possible without the trust of our customers and the dedication of our partners. Thank you for your continued faith in us and I look forward to seeing you all at our next&nbsp;event in January 2026 where we will demonstrate how organisations can accelerate their AI initiatives with Zero Trust.&nbsp;]]></description>
            <dc:creator>Justin Brooks (Area Vice President, Sales - UK&amp;amp;I)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zenith Live Encore: How to Build a Resilient Digital Future with Zero Trust and AI]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zenith-live-encore-how-to-build-a-resilient-digital-future-with-zero-trust-and-ai</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zenith-live-encore-how-to-build-a-resilient-digital-future-with-zero-trust-and-ai</guid>
            <pubDate>Wed, 26 Nov 2025 21:50:57 GMT</pubDate>
            <description><![CDATA[Organizations face unprecedented pressure to push their technological boundaries as AI adoption accelerates and competition intensifies. However, the current pace of AI integration far outstrips the speed in which organizations normally assess and address the risks. As a result, the race between innovation, speed and security is leaving defenders in an increasingly vulnerable position.&nbsp;IT security practitioners must enable this new technology’s use - whether public tools or internal deployments - while establishing reasonable guardrails that ensure visibility and robust data security assessments. Organizations are urgently seeking best practices to navigate AI-driven transformation. Extending Zero Trust principles to regain visibility and control of all data streams is now more critical than ever.As companies rethink how employees safely consume generative or agentic applications, they must also apply Zero Trust to their broader ecosystem of suppliers, partners, and B2B integrations. Modern supply chains increasingly share data, applications, and now AI models - creating a new attack surface if not properly secured.That’s why Zscaler’s Zenith Live event series is returning in its one-day roadshow format across Europe - turning AI insights into action. The events will showcase how a cloud-based approach to Zero Trust Everywhere can help security practitioners reduce risk, complexity, and cost in the new technology era. Zscaler experts will reveal how AI and Zero Trust are converging to redefine networking and security, fuelling rapid digital transformation and building resilient, mission-critical infrastructures to safeguard today's business aspirations.&nbsp;Participants will discover how a cloud-centric Zero Trust approach is redefining security to protect every connection, from users and workloads to IoT, OT, branches, and even AI. Security practitioners, IT architects, or networking professionals will gain practical insights and tools to drive real transformation, learning from their peers how to reset boundaries&nbsp; in the pursuit of digitalization while carefully managing cybersecurity risks. Zscaler experts will be on hand to share the latest strategies to minimize attack surfaces, eliminate lateral movement and prevent data loss.&nbsp;Following the recent SPLX acquisition, attendees will get first-hand insights at how this addition to the Zero Trust Exchange platform will extend shift-left AI asset discovery, automated red teaming, and governance - helping organizations secure their AI investments from development through deployment. We’re also bringing back industry panels and fireside chats, offering attendees the opportunity to learn from industry leaders and network with their peers.Agentic AI – Friend or Foe?As part of the agenda, we will also be speaking with Zscaler customers at different stages of their Zero Trust transformation journey. Panellists from leading private and public organizations will share their learnings in a ‘fireside chat’ - helping others who wish to take that first step towards a Zero Trust architecture. Having overcome their own implementation challenges, they’ll offer insights and guidance to make Zero Trust a reality.&nbsp;New this year: a panel on the emergence, adoption and security of Agentic AI. Zeki Turedi, Field CTO at Crowdstrike, and Rob Hale, Principal Security Segment Leader at AWS, will debate whether Agentic AI is a friend or foe - and underline the importance of retaining control over critical digital infrastructure, redefining data governance, and unlocking innovation securely.To learn more about the Zenith Live Encore agenda in your city and discover how Zscaler secures data, applications, devices and users on organizations’ transformation journeys, visit the&nbsp;registration site. See you in London on Tuesday, 9th of December 2025 in Vision Hall!&nbsp;]]></description>
            <dc:creator>Yaroslav Rosomakho (Chief Scientist)</dc:creator>
        </item>
        <item>
            <title><![CDATA[La souveraineté numérique de l’Europe exige une technologie moderne et résiliente]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/enabling-europes-digital-sovereignty-through-technology</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/enabling-europes-digital-sovereignty-through-technology</guid>
            <pubDate>Fri, 14 Nov 2025 20:21:06 GMT</pubDate>
            <description><![CDATA[Depuis des années, l’Europe s’interroge sur le concept de souveraineté numérique, mais la fragmentation géopolitique et l’aspiration croissante à l’indépendance technologique ont fait évoluer cette réflexion théorique vers une dynamique d’action. Le 18 novembre, les gouvernements français et allemand organisent un sommet pour transformer cette ambition en plan d'action concret. Il s’agit d’un moment charnière, alors que leaders politiques, dirigeants et acteurs engagés unissent leurs efforts pour préserver l’avenir numérique de l’Europe. Soyons clairs : l’Europe explore de nouveaux territoires.Ses ambitions ? Maîtriser les infrastructures numériques critiques, redéfinir la gouvernance des données et stimuler l’innovation. Des objectifs audacieux, légitimes et, par nature, complexes. Le concept lui-même n’est toutefois pas clairement défini. Un tour d’horizon des capitales européennes révélerait autant de lectures différentes de la souveraineté numérique qu’il existe d’États membres, chacun en proposant une interprétation nuancée. L’absence d’une définition cohérente et consensuelle ne doit toutefois pas prêter à confusion. Pour paraphraser un haut responsable de l’un des plus grands États membres lors d’un récent échange : « L’appel à la souveraineté numérique est puissant et idéologique ».  Une convergence se dessine toutefois en Europe autour d’un certain nombre de principes. Il s’agit avant tout d’assurer l’avenir, de maîtriser les données, d’affirmer son indépendance, de garantir la continuité des services, d’exiger une transparence réelle et de veiller à ce que l’Europe bénéficie pleinement de l’ère numérique tout en demeurant compétitive sur la scène mondiale.Le secteur du numérique porte, à ce titre, la responsabilité d’apporter une réponse à la hauteur des enjeux. Chez Zscaler, nous mesurons pleinement l’importance stratégique de cet objectif. Nous considérons que la souveraineté doit se construire selon les exigences fixées par l’Europe elle-même. Leader mondial de la cybersécurité et partenaire de confiance de près de 2 500 clients en Europe, nous sommes résolument engagés à innover et à fournir des technologies de pointe conformes à la vision numérique de l’Europe et à son niveau d’exigence.Cet engagement s’illustre dès 2010, lorsque Zscaler devient le premier fournisseur de sécurité à bâtir un cloud dédié à l’Europe. En amont de la réunion à Berlin le 18 novembre, nous partageons notre analyse des principaux piliers de la souveraineté numérique et détaillons la manière dont nos solutions répondent aux besoins de sécurité, de flexibilité et d’indépendance indispensables aux entreprises européennes dans un environnement mondial interconnecté. 1. Protéger les données européennes Les données européennes doivent rester privées, sécurisées et traitées localement. La crainte de perdre la maîtrise des informations sensibles face à des acteurs externes ou à des cybermenaces s’intensifie à mesure que les entreprises adoptent des systèmes cloud globaux. La souveraineté des données implique de garantir une protection efficace, d’assurer le respect des réglementations nationales et d’instaurer la confiance indispensable aux opérations critiques.Zscaler soutient les objectifs européens de protection et de localisation des données : Zscaler ne conserve pas les contenus de ses clients finaux : l’ensemble du traitement du trafic en temps réel s’effectue en mémoire au sein de l’infrastructure locale, ce qui simplifie le contrôle des données. La plateforme Zscaler Zero Trust Exchange sécurise l’accès aux applications sans jamais exposer les données sensibles.La conception cloud-native de la plateforme repose sur le chiffrement, la visibilité des données et des contrôles d’accès granulaires, et s’aligne harmonieusement sur le RGPD et les cadres de conformité plus larges.Les clients peuvent choisir d’utiliser exclusivement l’infrastructure européenne. Zscaler dispose de 25 data centers en Europe, dont 20 sont situés dans des États membres de l’UE, garantissant un traitement local des données qui optimise à la fois les performances et la souveraineté.Les entreprises européennes ont l’assurance que leurs données de journalisation sont stockées en Europe.  Toutefois, les clients conservent un contrôle total sur leurs choix de stockage et peuvent décider d’héberger leurs données dans n’importe quelle zone de journalisation souveraine ou locale. Zscaler simplifie le contrôle des données et permet aux entreprises de respecter les principes de protection des données dès la conception et par défaut, tout en fournissant un accès hautement sécurisé à faible latence. 2. Renforcer l’autonomie numérique La souveraineté numérique implique de réduire la dépendance excessive aux technologies étrangères et de conserver le contrôle des systèmes. L’Europe a besoin de cadres adaptables qui évitent la dépendance à un unique fournisseur tout en soutenant une innovation sécurisée. Sans autonomie, les entreprises risquent de compromettre leur capacité à évoluer et à protéger leurs actifs numériques les plus critiques.Zscaler facilite l’indépendance technologique et les objectifs de cybersécurité de l’Europe :Renforcer l’indépendance technologique de l’Europe :L’architecture indépendante des fournisseurs de Zscaler permet aux entreprises européennes de maintenir la flexibilité de leurs environnements IT, en leur donnant la possibilité de combiner des solutions couvrant le cloud, les données, les terminaux, l’identité et les services provenant de différents fournisseurs technologiques. Pour plus d’informations, veuillez vous reporter à : /partners/technologyZscaler propose une approche du contrôle d'accès basée sur les rôles qui garantit que seuls des citoyens de l’Union européenne peuvent définir les politiques, gérer la journalisation et consulter les données sur notre plateforme. Une approche basée sur le cloud permet aux entreprises de réduire leur dépendance aux systèmes traditionnels tout en évitant l’enfermement propriétaire, préservant ainsi leur souveraineté et leur liberté d’innover.Zscaler accompagne la migration des systèmes existants sans imposer de contraintes liées à un matériel particulier, à un écosystème propriétaire ou à des dépendances externes.Sécuriser les infrastructures critiques de l’Europe :L’architecture Zero Trust de Zscaler impose une authentification et une autorisation continues des utilisateurs et des dispositifs avant tout accès aux applications, afin d’éviter les intrusions.Les capacités de détection des menaces avancées de Zscaler protègent les entreprises contre les malwares, les vulnérabilités Zero-Day et les cybermenaces pilotées par l’IA, garantissant la sécurité des opérations sur l’ensemble du continent. Zscaler collabore avec des fournisseurs d’hébergement et de services pour déployer et opérer des solutions souveraines reposant sur les solutions cloud de Zscaler au sein de leurs data centers européens. Zscaler redéfinit les standards de sécurité pour bâtir une Europe résiliente et autonome, en associant des technologies fiables et efficaces à une sécurité évolutive de premier ordre.3. Accélérer l’innovation L’innovation est un moteur de croissance et de compétitivité, et l’Europe se doit d’adopter les nouvelles technologies pour conserver son avance. Pour réussir, les entreprises doivent s’appuyer sur des solutions sécurisées et conformes qui leur permettent d’opérer et d’évoluer sans compromettre leurs données sensibles.Zscaler soutient les objectifs d’innovation et de compétitivité de l’Europe :En facilitant l’adoption de stratégies cloud-first sécurisées, Zscaler réduit les coûts d’infrastructure et libère des ressources qui pourront être réinvesties dans l’innovation et la croissance. Des solutions évolutives et flexibles permettent aux entreprises d’adopter sereinement les technologies émergentes.Les capacités de Zscaler aident les entreprises à déployer des environnements de travail hybrides sécurisés, garantissant la flexibilité opérationnelle et la protection adaptée aux modèles de travail actuels.Zscaler innove, améliore l’efficacité opérationnelle et anticipe plus rapidement les tendances du marché, renforçant ainsi l’avantage concurrentiel face aux acteurs internationaux, tout en respectant les normes réglementaires rigoureuses de l’Europe.Une approche Zero Trust sans compromis garantit aux entreprises la capacité d’innover et de se développer sans exposer leurs systèmes, leurs équipes ou leurs données à des risques inutiles.L’abandon des systèmes traditionnels présente un avantage supplémentaire :  une protection efficace et une diminution des coûts. Contrairement aux évolutions technologiques antérieures, cette transition permet de libérer des ressources qui seront utiles dans d'autres domaines. Zscaler redéfinit les conditions d’une innovation sécurisée à l’ère du numérique, permettant aux entreprises européennes de se développer et de rester compétitives au niveau international.4. Promouvoir une IA responsable L’IA a le potentiel de transformer l’économie numérique, mais elle introduit également des failles de sécurité et des risques d’usage malveillant. L’Europe entend l’adopter de manière responsable, en privilégiant la protection de la vie privée, des normes éthiques exigeantes et des garanties solides assurant confiance et transparence des systèmes d’IA. Un récent rapport conjoint des autorités françaises et allemandes rappelle par ailleurs que le principe de Zero Trust doit s’appliquer aux systèmes LLM afin de répondre aux enjeux de sécurité propres à l’IA.Zscaler soutien une adoption responsable de l’IA :Pour tirer pleinement parti des gains de productivité liés à l’IA, ces systèmes doivent fonctionner de manière sécurisée, sans exposer les entreprises à des risques. Zscaler s’assure que tous les systèmes d’IA déployés dans ses produits respectent les exigences du règlement européen sur l’IA (EU AI Act), premier cadre complet au monde établissant des standards de transparence, d’équité et de responsabilité pour l’intelligence artificielle. Les principes du modèle Zero Trust protègent les jeux de données sensibles et les pipelines de données d’IA, empêchant la manipulation, le vol et l’exploitation malveillante. L’intégrité des algorithmes et des modèles est ainsi préservée. L’architecture Zero Trust de Zscaler sécurise l’usage des modèles d’IA, de l’IA agentique et de leurs pipelines de données, garantissant l’intégrité des solutions d’IA. Zscaler aide les entreprises européennes à maximiser le potentiel de l’IA, à respecter des normes éthiques et à protéger leurs systèmes et leurs pipelines de données contre toute utilisation abusive.5. Assurer la résilience opérationnelle Les cyberattaques, les catastrophes naturelles, les dommages aux câbles sous-marins ou encore l’incertitude politique peuvent mettre en péril les systèmes et les données critiques. La résilience opérationnelle aide les entreprises à maintenir leurs activités et à préserver leur sécurité, garantissant la stabilité et la continuité d'activité même en cas d’imprévu.Zscaler renforce la résilience opérationnelle :L’architecture Zero Trust de Zscaler assure un accès direct et sécurisé aux services et applications cloud, y compris lors de pannes Internet ou d’attaques touchant des infrastructures critiques comme les câbles sous-marins. L’architecture de data centers résiliente de Zscaler permet aux entreprises européennes de rester opérationnelles lorsque cela compte le plus. Zscaler protège contre les menaces en temps réel et neutralise les ransomwares et autres cybermenaces avant qu’ils ne perturbent les infrastructures et les opérations essentielles. Zscaler offre un accès sécurisé et flexible qui permet aux équipes de travailler de n’importe où tout en maintenant les normes de sécurité.Zscaler dissocie la sécurité des modèles traditionnels de réseau et s’appuie sur des solutions cloud-native pour aider les entreprises à s’adapter sans retard aux évolutions géopolitiques et à maintenir leurs opérations dans les environnements les plus incertains.Zscaler est la première solution de sécurité cloud à proposer une solution de continuité d’activité. Qu’elle soit hébergée en interne ou par un prestataire, l’infrastructure de Zscaler protège les entreprises contre les interruptions liées aux pannes totales, aux baisses de la qualité de service réseau, aux défaillances sévères d’infrastructure, au terrorisme ou aux changements réglementaires. En cas d’incident local, d’interruption entre l’utilisateur et le cloud ou d’anomalie côté cloud, le basculement vers une solution de continuité d’activité s’opère automatiquement. Les entreprises peuvent poursuivre leurs opérations via un service edge privé auto-hébergé, même en cas d’incident de routage global qui rendrait tous les services cloud indisponibles.Zscaler intègre la résilience au cœur des systèmes, protège les opérations contre les perturbations et soutient les objectifs de souveraineté numérique.Zscaler garantit une connectivité sécurisée et ininterrompue en réorientant le trafic et en ajustant les routes en temps réel, y compris lors de perturbations d’Internet ou du cloud.La nouvelle réalité exige un engagement renouvelé envers l’avenir numérique de l’EuropeÀ l’approche du sommet franco-allemand sur la souveraineté numérique européenne, deux principes se distinguent comme essentiels à la réussite des ambitions numériques de l’Europe : La souveraineté numérique et l’autonomie stratégique ouverte doivent se définir selon des modalités européennes, en fonction des priorités et des valeurs européennes. Cela signifie que les entreprises technologiques doivent innover et proposer des solutions qui s’alignent sur les besoins et les aspirations de l’Europe.Les fournisseurs de technologies qui contribuent réellement à la souveraineté de l’Europe — au-delà de simples déclarations — doivent pouvoir continuer à soutenir cette vision. La politique de l’UE doit permettre à ces fournisseurs de confiance, dont les actions renforcent clairement la souveraineté de l’Europe, de continuer à y prendre part.La mise en œuvre de ces principes est, à notre avis, essentielle pour bâtir un avenir numérique souverain pour l’Europe, et préserver sa compétitivité mondiale à ce moment charnière de l’histoire.Chez Zscaler, nous considérons que la souveraineté numérique consiste à donner aux entreprises européennes la capacité de sécuriser leurs systèmes, d’innover librement et de progresser selon leurs propres priorités. Leader mondial de la sécurité Zero Trust, Zscaler occupe une position unique pour aider les entreprises européennes à relever les défis propres à cette phase de transition et à bâtir un avenir résilient et autonome.]]></description>
            <dc:creator>Casper Klynge (VP, Government Partnerships)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Step Into the Future of Zero Trust + AI Security with Zscaler at AWS re:Invent 2025]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/step-future-zero-trust-ai-security-zscaler-aws-re-invent-2025</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/step-future-zero-trust-ai-security-zscaler-aws-re-invent-2025</guid>
            <pubDate>Tue, 04 Nov 2025 19:46:37 GMT</pubDate>
            <description><![CDATA[Zscaler and AWS are redefining what’s possible in the cloud. Visit Booth #1375 at the Venetian, December 1-5, to see how zero trust + AI security come together to protect data, power innovation, and simplify cloud security operations.Meet with Zscaler at AWS re:Invent 2025: Schedule a meeting | Explore Zscaler for AWSIn today’s cloud-first world, agility and innovation are everything. Yet many organizations are still weighed down by legacy tools that can’t keep up. VPNs, firewalls and static security models were never built for AI-driven transformation or a distributed workforce. They slow progress, create blind spots and expose new attack surfaces in the cloud. As organizations move more applications to the cloud and adopt GenAI, traditional security approaches put users, devices, and data at risk. The future of security depends on moving beyond these limitations towards a unified zero trust architecture. Together, Zscaler and AWS help enterprises simplify, automate, and scale securely across workloads, users, and data while keeping innovation moving forward.&nbsp; What to Expect at AWS re:Invent with ZscalerHere’s what you’ll see:Live demos showcasing Zero Trust + AI innovations in actionExpert insights on securing GenAI Apps and cloud workloadsProven strategies to eliminate VPNs/Firewalls and reduce riskReal-world customer use cases powered by Zscaler on AWSExpert theater presentations on the latest Zscaler solutionsDon’t miss these sessions:Tue., Dec. 2, 2:30PM: Securing the AI Era with Dhawal Sharma, EVP Products &amp; Strategy, ZscalerWed., Dec. 3, 4:00PM: Zero Trust: The Blueprint for Securing AI-Powered SDLC with Brian Lazear, VP, Product Management - Cloud Workloads How Zscaler + AWS Make It PossibleTogether, Zscaler and AWS deliver a secure foundation for cloud transformation.Here’s how:Unify security across AWS environments. Protect users, workloads, and data through the Zscaler Zero Trust Exchange, a global cloud platform built on AWS infrastructure.Secure GenAI applications. Discover and control AI tool usage while preventing data leakage and unauthorized access.Simplify access and eliminate VPNs. Provide seamless, content-based access to private apps on AWS and beyond without the cost and complexity of legacy VPNs.Protect workloads at scale. Segment and secure inter-workload traffic with cloud-native controls that reduce lateral movement and risk.Accelerate cloud migration. Move from on-prem to AWS with built-in visibility, automation, and policy consistency.&nbsp; Join us at AWS re:Invent 2025Zscaler and AWS are shaping the future of secure cloud innovation. Visit Booth #1375 at the Venetian December 1-5, to explore how Zero Trust and AI come together to protect data, accelerate transformation, and simplify security across your organization.Meet our experts, get a live demo, and learn how leading enterprises are using Zscaler and AWS to scale securely, operate efficiently, and innovate with confidence.Schedule a meeting | Explore Zscaler for AWS | Customer success stories | AWS Marketplace]]></description>
            <dc:creator>Dhawal Sharma (Executive Vice President, AI Security and Strategic Initiatives)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Le dilemme entre « opérations décentralisées » et « conformité de la sécurité »]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-tension-between-decentralized-ops-and-security-compliance</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-tension-between-decentralized-ops-and-security-compliance</guid>
            <pubDate>Thu, 23 Oct 2025 07:17:13 GMT</pubDate>
            <description><![CDATA[Quand la gouvernance, l’innovation et la mise en œuvre de la sécurité sont réparties entre plusieurs entités, le manque de cohésion complique inutilement la conformité. La tâche est encore plus complexe pour ceux qui s’appuient sur des infrastructures héritées. Il s’agit d’un problème fréquent dans les grandes banques du secteur financier.Points de friction opérationnelsL’ampleur organisationnelle des banques établies crée naturellement un écosystème opérationnel complexe. Cela entraîne souvent une prise de décision fragmentée, différentes équipes gérant des parties isolées de l’environnement technologique et de sécurité. Cet éclatement peut éventuellement renforcer l’expertise métier, il occulte un problème plus important : l’application incohérente de la gouvernance de la sécurité. Or, l’incohérence est une notion à proscrire dans un secteur bancaire hautement réglementéSur le plan de la sécurité, les équipes du RSSI, du DSI et du CTO doivent partager certaines responsabilités essentielles : la conformité réglementaire, la gestion des risques et la réponse aux incidents. En tant qu’autorité en matière de gouvernance de la sécurité, le RSSI définit le cadre directeur de l’entreprise. Le DSI et le CTO doivent ensuite en appliquer les exigences dans leurs domaines respectifs : l’infrastructure IT pour l’un, les environnements produits pour l’autre. Même avec un cadre commun, le cloisonnement opérationnel entraîne souvent une mise en œuvre incohérente entre les services. Sans une approche unifiée, l’exposition au risque augmente, dans des environnements traditionnels où la visibilité (qui se connecte, à quoi et quand) n’est pas garantie par défaut.Le temps et les budgets ajoutent d’autres contraintes de conformité. Avec l’accumulation de réglementations dans les services financiers, la conformité mobilise de plus en plus de ressources. Les audits peuvent durer des semaines, voire des mois, et exigent d’importants moyens humains et technologiques pour ancrer les politiques de sécurité dans les opérations quotidiennes. Dans les environnements traditionnels, cette charge implique une surveillance manuelle et la mise en place de contrôles de fortune sur des systèmes fragmentés. Les dépenses opérationnelles courantes liées au maintien de ces contrôles incombent généralement au DSI et au CTO, qui jonglent déjà avec des budgets serrés pour réduire les dépenses, maintenir la résilience et atteindre les objectifs de transformation. Si la sécurité avait été intégrée dès la conception, les DSI et CTO n’auraient pas à assumer, sur le long terme, le coût de décisions qui échappent à leur contrôle.Vérifications de la réalité techniqueSi les défis de conformité liés aux opérations quotidiennes sont bien connus, que se passe-t-il si les banques tentent d’innover ? Un fossé entre l’optimisme stratégique des dirigeants non techniques et le réalisme des équipes techniques.Face à l’émergence de nouveaux acteurs, de nombreux PDG de banques associent la compétitivité à l’adoption de technologies émergentes telles que l’IA. Et c’est vrai : l’IA a un fort potentiel pour stimuler l’innovation, la croissance et le leadership commercial. Mais un obstacle majeur persiste : les systèmes traditionnels n’ont pas été conçus pour intégrer l’IA, ce qui augmente le risque d’exposition et la complexité du maintien de la conformité. De plus, l’IA introduit un nouveau domaine opérationnel avec ses propres défis de contrôle et de visibilité. Les infrastructures fragmentées aggravent ces défis, car les données dont dépend l’IA restent enfermées dans des systèmes cloisonnés. Des domaines technologiques autrefois distincts se heurtent désormais à grande vitesse. La pression interne augmente, les équipes tentant d’avancer rapidement tout en préservant la sécurité.Résoudre les problèmes de sécurité à grande échelleComment les banques peuvent-elles unifier la sécurité entre différentes divisions et innover à l’échelle de l’entreprise avec les technologies émergentes ? Nombre d’entre elles se tournent vers l’architecture Zero Trust. Contrairement aux approches périmétriques traditionnelles, ce modèle n’accorde aucune confiance implicite au sein du réseau et impose une vérification stricte à chaque point d’accès, quel que soit l’utilisateur, l’appareil ou l’emplacement. Le Zero Trust harmonise les responsabilités du RSSI, du DSI et du CTO. Il centralise l’application des politiques, renforce la visibilité sur les systèmes et allège la complexité de la conformité dans des environnements cloisonnés.Mais le Zero Trust est plus qu’un cadre de sécurité : c’est un catalyseur stratégique de protection évolutive, comme le démontrent les points suivants : En offrant la sécurité en tant que service et la connectivité à grande échelle, Zero Trust permet aux banques d’adopter rapidement et en toute sécurité de nouvelles technologies. Il assure le même niveau de protection, de fonctionnalités et de contrôle, qu’en local ou dans le cloud, apportant une cohérence indispensable dans des environnements hybrides. Les équipes n’ont plus à faire de compromis ou à choisir entre différents usages. Tout fonctionne de manière cohérente, où que se trouvent les données ou les applications.Il offre une visibilité sur tous les domaines. Les domaines technologiques peuvent rester segmentés, mais la visibilité et le contrôle, eux, s’exercent de bout en bout. Les équipes de sécurité surveillent et pilotent l’activité sans friction.La sécurité des données est intégrée au cœur de l’architecture proxy Zero Trust, et pas ajoutée après coup. Les banques peuvent ainsi déployer rapidement de nouvelles intégrations technologiques, même des intégrations aussi avancées que des agents d’IA, sans compromettre la conformité ni l’intégrité opérationnelle. La solution offre aussi des points d’accès tant pour les services existants que pour les nouveaux, étendant la protection à l’ensemble de l’écosystème : la banque elle-même, ses partenaires et les plateformes ouvertes au public.Langage de sécurité communDans un environnement opérationnel décentralisé, la responsabilité de la sécurité ne se joue pas sur la hiérarchie, mais sur la cohésion. Le Zero Trust fournit ce langage commun, il intègre la conformité dans chaque action, à tous les niveaux, quel qu’en soit le pilote.PRÊT À SÉCURISER À GRANDE ÉCHELLE ? Les services financiers souhaitent et ont besoin d’une approche moderne de la sécurité pour gérer le présent et anticiper l’avenir. La clé consiste à trouver l’architecture Zero Trust idéale pour sécuriser, simplifier et assurer la conformité en toute confiance. Découvrez la voie à suivre ici.]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Le prix de la confiance : prévenir des violations dont les dommages se chiffrent en millions]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-cost-of-trust-preventing-breaches-with-damages-in-the-millions</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-cost-of-trust-preventing-breaches-with-damages-in-the-millions</guid>
            <pubDate>Thu, 16 Oct 2025 07:51:29 GMT</pubDate>
            <description><![CDATA[Dans les services financiers, la confiance est fondamentale. En cybersécurité, la confiance implicite peut entraîner des pertes de plusieurs millions de dollars.Pour mesurer l’ampleur du risque, retenez ce chiffre : 6,08 millions de dollars. C’est le coût moyen d’une violation de données dans les services financiers, selon les dernières données d’ IBM. Le prix payé pour avoir fait confiance aux mauvaises personnes, à de mauvais processus ou à de mauvaises technologies. Les enjeux astronomiques plaident en faveur d’une approche Zero Trust et montrent que les modèles de sécurité traditionnels, toujours présents, ne suffisent plus.L’impact financier des violationsLes services financiers restent une cible privilégiée des cybercriminels. Selon le dernier rapport du FMI, près d’un cinquième des cyberincidents mondiaux de ces vingt dernières années ont visé une société financière.Le chiffre est important, et il inclut des attaques très médiatisées. En 2019, CNN titrait : Un hacker accède à 100 millions de demandes et de comptes de cartes de crédit Capital One. Ce fut l’une des violations les plus graves de ces dernières années, avec un impact financier majeur pour l’émetteur américain. Le régulateur OCC a infligé une amende de 80 millions de dollars, estimant que Capital One n’avait pas mis en place les pratiques de gestion des risques nécessaires avant sa migration vers le cloud. L’entreprise a également dû verser 190 millions de dollars dans le cadre d’un règlement collectif destiné à indemniser les clients concernés.Quand on pense aux conséquences financières d’un cyberincident, le premier poste qui vient à l’esprit est le coût concret de la relance et de la sécurisation des opérations. Viennent ensuite les amendes réglementaires. Mais l’impact le plus durable reste celui sur la réputation. Les clients hésitent de plus en plus à confier leurs données à une entreprise qui a été victime d’une violation. Leur inquiétude est légitime : selon la dernière étude de ThreatLabz, l’exfiltration de données a bondi de 92,7 % en un an. Ces vols alimentent les campagnes d’extorsion. Pas étonnant que 47 % des entreprises déclarent avoir du mal à attirer de nouveaux clients après une cyberattaque médiatisée (rapport Cyber Readiness).La confiance est un avantage concurrentiel, … qui se perd facilement. Surtout dans un système numérique « protégé » par une sécurité dépassée.La où les modèles traditionnels échouentLes outils de sécurité traditionnels ne répondent plus aux exigences actuelles à bien des égards. Ils protègent surtout le périmètre, mais offrent peu de visibilité et négligent la résilience.Les VPN, les pare-feu et les contrôles d’accès statiques ont été conçus pour une époque où les utilisateurs et les données restaient à l’intérieur du périmètre du réseau. Les environnements hybrides actuels, axés sur le cloud, rendent ces outils caducs. Une fois franchie la frontière floue et imaginaire du périmètre, les hackers rencontrent peu de résistance. Et le déplacement latéral leur ouvre un accès quasi illimité à des masses de données sensibles.Qu’en est-il de la visibilité ? Il existe plusieurs raisons pour lesquelles les architectes de sécurité qui gèrent des configurations traditionnelles n’obtiennent pas la visibilité nécessaire pour appliquer le principe du moindre privilège ou réagir rapidement aux anomalies. Première raison : une architecture réseau plate où les pare-feu peinent à distinguer le trafic normal du trafic suspect, car tout se ressemble. Sans segmentation du trafic, il est difficile d’appliquer une surveillance contextuelle qui apporte la visibilité nécessaire. Deuxième raison : un accès réseau trop large. L’activité des utilisateurs connectés n’est pas surveillée, et certains comportements suspects passent inaperçus. En conclusion ? La sécurité doit fournir une visibilité permanente et en temps réel de l’activité des utilisateurs et des appareils.Dernier point : la résilience. Chez Zscaler, c’est devenu un mantra — et pour de bonnes raisons. La résilience ne consiste pas seulement à sécuriser, mais à réagir : à quelle vitesse pouvez-vous contenir une attaque et relancer vos activités ? Nous vivons une époque où la question n’est plus “si” mais “quand ” une cyberattaque surviendra. Aucune entreprise n’est à l’abri. Se limiter à la détection des menaces est donc une vision à court terme. Or, les modèles traditionnels peinent à contenir une attaque, ce qui met en péril la continuité d'activité.Zero Trust en tant que stratégie de réduction des coûtsCompte tenu des conséquences financières d’une violation, le Zero Trust doit être considéré comme un investissement rentable. Il ne s’agit pas seulement d’une mise à niveau de sécurité. Adopter le Zero Trust, c’est avant tout mettre en place une stratégie solide de résilience pour l’entreprise.Le retour sur investissement se mesure de plusieurs manières. D’abord, le Zero Trust empêche les hackers de passer d’un système compromis à d’autres systèmes. Il bloque aussi toute élévation de privilèges : en cas de violation, chaque demande d’accès est vérifiée, empêchant l’intrusion dans les systèmes sensibles. Autre atout : la microsegmentation. Elle réduit la surface d’attaque et applique en temps réel les politiques d’accès, sans perturber les autres activités.Lorsqu’une architecture Zero Trust est renforcée par l’IA, le ROI se traduit par un gain de temps précieux pour les architectes de sécurité, souvent débordés. Ils pourront détecter les anomalies dès qu’elles surviennent et limiter le tri manuel grâce à des mesures de confinement automatisées. Résultat : une réponse aux incidents et une reprise plus rapides, avec à la clé une réduction des coûts de remédiation. Le rapport coût-bénéfice est particulièrement important dans les secteurs réglementés comme les services financiers, où les amendes liées à la protection des données peuvent être très lourdes.La cybersécurité n’est plus seulement une question technique. Comme cet article l’illustre, le coût d’une erreur ne se résume pas à une ligne budgétaire. Il touche la réputation de la marque et votre capacité à tenir vos promesses envers vos clients. Pour les leaders soucieux de protéger la valeur de leur marque et d’assurer la continuité d’activité, le Zero Trust s’impose comme l’étape logique après des années d’approches traditionnelles. Il est temps de tourner la page.Prêt à déployer le Zero Trust ? Si vous débutez votre transition, appuyez-vous sur la checklist des fonctionnalités proposée par Zscaler avant d’investir dans une architecture Zero Trust. Elle vous donnera une vue d’ensemble des contrôles et du niveau de résilience indispensables pour naviguer dans un monde particulièrement complexe. Retrouvez tous les détails dans notre e-book Services financiers et sur notre page dédiée.]]></description>
            <dc:creator>Marc Lueck (CISO Northern Europe, Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[La résilience réinventée : le prochain chapitre commence]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/resilience-reimagined-the-next-chapter-begins</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/resilience-reimagined-the-next-chapter-begins</guid>
            <pubDate>Tue, 14 Oct 2025 15:49:08 GMT</pubDate>
            <description><![CDATA[Au cours de l’année écoulée, l’une des missions principales de Zscaler dans la zone EMEA a été d’aider les entreprises à libérer le facteur résilience. Nous définissons cette mission comme la capacité unique d’une entreprise, ou même d’un employé et de son équipe, à affronter les adversités, à adapter ses opérations et à aller de l’avant avec confiance, afin de relever tous les défis.De notre rapport de recherche phare sur le facteur résilience au quiz interactif sur le super-pouvoir de la résilience individuelle, nous avons principalement exploré la résilience sous un angle interne. Face à la perturbation constante devenue la norme, nous avons examiné comment les entreprises peuvent élaborer des stratégies et des processus robustes, les technologies proactives qu’elles devraient privilégier et, tout aussi important, comment elles peuvent cultiver la résilience de leurs collaborateurs.À l’approche de la fin de l’année, la mise en œuvre d’une véritable cyber-résilience est plus cruciale que jamais. Il ne se passe quasiment pas un jour sans que l’on apprenne une nouvelle violation de données touchant des entreprises de toutes tailles et de tous secteurs, et les conséquences de ces violations persistent bien plus longtemps que prévu. Il n’est donc pas surprenant que la résilience ait été un thème central de la récente conférence Gartner sur la sécurité et la gestion des risques, « Gartner Security &amp; Risk Management Summit ». Il s’agit d’un sujet incontournable pour les entreprises, les analystes du secteur, les gouvernements et les ONG internationales comme le Forum économique mondial.Les RSSI et leurs équipes continuent d’opérer en première ligne dans un monde d’incidents de cybersécurité qui ne sont plus une éventualité, mais bien une réalité, la seule certitude étant que la prochaine violation inévitable pourrait provenir de n’importe quelle direction. Cependant, dans le paysage interconnecté d’aujourd’hui, se concentrer uniquement sur la résilience interne ne suffit plus.Les entreprises doivent désormais faire face aux éléments suivants :Forces de marché turbulentes : les changements réglementaires, les exigences en matière de souveraineté et les perturbations économiques imposent des réorientations opérationnelles rapides auxquelles les architectures traditionnelles ne peuvent pas s’adapter.Technologies émergentes : l’IA remodèle déjà considérablement le paysage des menaces et l’informatique quantique est à l’horizon, révélant des angles morts dangereux dans les stratégies de sécurité.Complexité de l’écosystème opérationnel : la dispersion des effectifs, de plus en plus composés de sous-traitants, et la volatilité des chaînes d’approvisionnement introduisent de nouvelles vulnérabilités dans la surface d’attaque d’une entreprise.C’est pourquoi nous devons tourner désormais notre attention vers l’extérieur. Nous examinerons comment les entreprises font évoluer leurs stratégies de résilience pour faire face aux facteurs externes : la gestion de l’exposition aux perturbations du marché, les risques émergents liés aux menaces et technologies les plus récentes, et la complexité de leur base d’utilisateurs et de leur chaîne d’approvisionnement en constante expansion.Notre position reste inchangée : les entreprises doivent adopter l’approche « Resilient by Design ». Cela implique de repenser les approches réactives et d’adopter la résilience comme principe proactif et central, un principe qui permet aux entreprises d’anticiper et d’affronter les menaces internes et externes pesant sur la continuité de leurs opérations, et de s’en remettre avec confiance.Ce prochain chapitre vise à élargir le débat. Il s’agit de reconnaître que la résilience n’est pas seulement un impératif de sécurité, mais aussi un impératif stratégique. Il s’agit de doter les dirigeants des connaissances et des outils dont ils ont besoin pour intégrer une résilience complète au cœur même de leurs entreprises.Restez à l’écoute. Nous partagerons de nouvelles perspectives, des recherches inédites et des conseils pratiques pour vous aider à étendre vos stratégies de cyber-résilience au-delà de vos murs qui sont en train de se dissoudre. Et si vous avez manqué certains de nos articles précédents, c’est le moment idéal pour vous rattraper.L’avenir est imprévisible. Mais avec la bonne mentalité et une conception adaptée, la résilience peut devenir votre plus grand atout concurrentiel.&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[La psychologie de la confiance en cybersécurité (2e partie) : l’illusion du périmètre de confiance]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-psychology-of-trust-in-cybersecurity-part-2-the-illusion-of-the-trusted-perimeter</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-psychology-of-trust-in-cybersecurity-part-2-the-illusion-of-the-trusted-perimeter</guid>
            <pubDate>Thu, 11 Sep 2025 06:59:30 GMT</pubDate>
            <description><![CDATA[Les modèles de sécurité traditionnels s’articulaient autour de l’idée d’un périmètre de confiance : tout ce qui se trouvait à l’intérieur de celui-ci était considéré comme digne de confiance et l’objectif était d’empêcher les acteurs malveillants d’y pénétrer. Mais ce modèle n’est plus valable.Désormais, les utilisateurs se connectent de n’importe où, en utilisant un amalgame d’appareils professionnels et personnels, et en accédant à des données sur plusieurs plateformes. Le périmètre s’est dissous. Et, avec lui, l’illusion de la sécurité interne.Les architectes réseau en sont de plus en plus conscients. Ils doivent s’assurer que le nombre croissant d’utilisateurs et d’appareils puissent tous se connecter au réseau. Cela inclut la connexion d’appareils IoT non gérés, qui, en raison de leur invisibilité effective, créent un point critique de vulnérabilité lorsque le réseau est « protégé » par un outil traditionnel tel qu’un VPN.Et cette vulnérabilité critique ne fait que croître, au fil des progrès réalisés dans le domaine des véhicules interconnectés, des bâtiments intelligents, etc. Il se fait que le nombre mondial d’appareils IoT devraitplus que doubler, passant de 19,8 milliards cette année à plus de 40,6 milliards au cours de la prochaine décennie.Plus l’IoT sera omniprésent, plus les réseaux traditionnels seront vulnérables. L’IoT introduit des logiciels propriétaires dont l’intégration avec les réseaux existants et les outils de sécurité est souvent insuffisante, ce qui crée des vulnérabilités dans vos défenses. De plus, les appareils IoT augmentent plus rapidement que le nombre d’employés, ce qui élargit rapidement la surface d’attaque. Avec l’intégration de l’IA dans ces appareils, combinée à l’émergence de l’IA agentique, l’architecture cloisonnée traditionnelle est totalement inadaptée.Ces architectures obsolètes ne parviennent pas à adapter correctement les autorisations, ce qui constitue une faille critique dans un paysage où le déplacement latéral reste l’une des plus grandes menaces. Elles ne sont tout simplement pas suffisamment sophistiquées pour définir les autorisations de manière appropriée. Elles donnent un large accès au réseau aux utilisateurs et aux appareils dont les informations d’identification ont été vérifiées. Si ces informations d’identification sont compromises, un hacker peut s’en servir contourner votre « périmètre de confiance » et accéder à toutes les données sensibles hébergées en interne sans passer par d’autres vérifications.En conclusion ? Ne jamais faire confiance, toujours vérifier, car il n’existe plus de barrière de sécurité autour de votre réseau.L’urgence d’un changement de perspective psychologiqueLe principe peut sembler cynique : ne jamais faire confiance, toujours vérifier. Cependant, cette philosophie fondamentale du mouvement Zero Trust ne relève pas de la paranoïa , elle repose sur la préparation. Il s’agit de reconnaître que la confiance, bien qu’essentielle dans les relations humaines, doit être gagnée et continuellement vérifiée dans les systèmes numériques.En comprenant cela, nous pouvons affirmer sans risque que le Zero Trust n’est pas seulement un cadre technique. C’est un changement d’état d’esprit. Nous devons protéger notre environnement numérique de la menace de notre propre biais de familiarité ; nous devons transformer la décision de faire confiance en une action objective plutôt que subjective afin d’avoir l’assurance que les politiques de sécurité sont appliquées de manière cohérente. En imposant un accès sur la base du moindre privilège et en procédant à une authentification continue, Zero Trust transforme la sécurité d’une barrière statique en un système dynamique et adaptatif.Cette approche s’aligne sur la réalité des cyberattaques modernes : « quand vont-elles se produire, et non si ». Elle reconnaît que les violations sont inévitables et que les acteurs internes (qu’ils soient malveillants ou compromis) peuvent être tout aussi dangereux que les acteurs externes.Le phishing par courrier électronique n’est bien sûr pas le seul moyen par lequel un acteur interne compromis peut exposer des données. Les employés qui utilisent des outils d’IA publics pour accélérer leurs tâches peuvent involontairement partager des données privées. En outre, ils sont moins susceptibles, compte tenu du biais de familiarité sous-jacent, de repérer l’ingénierie sociale élaborée à l’aide de l’IA. Les hackers se tournent également vers l’IA pour automatiser leurs efforts, ce qui leur permet d’élargir leur champ d’action et de se perfectionner beaucoup plus rapidement et avec beaucoup moins d’efforts. Cela augmente la probabilité qu’ils piègent une victime.Il est clair que l’IA est une menace omniprésente et qu’elle finira sans doute par éroder la confiance au point que nous ne ferons plus confiance à rien. Mais tout n’est pas négatif. Nous devons reconsidérer notre vision de l’IA : elle peut être une alliée puissante, utilisée pour appliquer objectivement des politiques de sécurité d’une manière qui élimine la confiance de l’équation.De la paranoïa à la prudencePour les décideurs d’entreprise, la voie à suivre est claire. Les menaces évoluent. Le périmètre a disparu. Et la psychologie de la confiance doit évoluer avec cette réalité.Zero Trust offre un moyen d’y parvenir, non pas en rejetant la confiance, mais en la redéfinissant pour un monde où le contrôle par la vérification continue constitue le nouveau fondement de la sécurité.Pour plus d’informations, rendez-vous sur : https://explore.zscaler.com/emea-financial-services/VOUS OPÉREZ DANS UN SECTEUR HAUTEMENT RÉGLEMENTÉ ? Pour les entreprises qui évoluent dans des secteurs strictement réglementés, en particulier les services financiers, l’adoption d’une stratégie Zero Trust est désormais une nécessité critique. Si vous débutez votre transition, consultez la liste de contrôle des fonctionnalités proposées par Zscaler avant d’investir dans une architecture Zero Trust. Elle vous donnera une vue d’ensemble des capacités nécessaires pour intégrer les contrôles et la résilience indispensables dans un environnement particulièrement complexe. Plus de détails dans notre e-book dédié aux services financiers2Statista, Number of Internet of Things (IoT) connections worldwide from 2022 to 2023, with forecasts from 2024 to 2034. Juin 2025. Disponible sur : https://www.statista.com/statistics/1183457/iot-connected-devices-worldwide/]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[“AI-liens at the Workforce“ and how new trust frameworks provide risk management strategies in the wake of Agentic AI]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/ai-liens-at-the-workforce-and-how-new-trust-frameworks-provide-risk-management-strategies-in-the-wake-of-agentic-ai</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/ai-liens-at-the-workforce-and-how-new-trust-frameworks-provide-risk-management-strategies-in-the-wake-of-agentic-ai</guid>
            <pubDate>Tue, 09 Sep 2025 08:16:30 GMT</pubDate>
            <description><![CDATA[From Agentic AI to Geopolitics: Zscaler’s Agenda for the Gartner Risk &amp; Security Management SummitLater this month, I’ll be delivering a keynote at the Gartner Risk &amp; Security Management Summit EMEA, where Zscaler will be a Premier Plus Sponsor. Hosted in London between 22-24 September, the annual summit convenes the region’s top security minds to tackle the latest challenges in the evolving digital landscape – where a complex mix of cyber threats, AI, regulatory shifts, and sovereignty demands are all converging to put pressure on business operations.As a global leader in Zero Trust transformation, Zscaler has a wealth of insights on how organizations can adapt to a rapidly changing risk environment, while driving innovation and safeguarding operational resilience. And we’ll be delivering these insights in a variety of different forums across the three days of the Summit.&nbsp;On September 22nd, I’ll be taking to the mainstage for “AI-liens in the Workforce: A New Trust Model with the Introduction of Advanced NHI.” This session will explore how agentic AI is reshaping enterprise ecosystems – driving accelerated automation and enhancing decision-making, but also creating an urgent need for new trust frameworks and more comprehensive risk management strategies. Attendees will leave with actionable insights on how to evolve their trust models to navigate autonomous AI environments securely and adaptively.The following day in our theatre keynote, “Driving Business Leadership with AI, Cellular, and Zero Trust,” Zscaler’s innovations team will reveal how these three technologies are revolutionizing both enterprise security and operational agility. The audience will learn how cutting-edge AI-driven frameworks, secure cellular connectivity, and transformative Zero Trust architectures are enabling businesses to turn risk into strategic advantage. Armed with this knowledge, they will also discover practical strategies to protect distributed environments, future-proof their security architecture, and embrace innovation on the edge in a digital-first world.In addition to the two keynotes, Casper Klynge, our VP of Government Affairs EMEA, will host an exclusive roundtable on day one titled “Navigating the Geopolitics of Tech: Should the Private Sector Be the Custodians of the Transatlantic Relationship?” This invitation-only session will explore the evolving interplay between tech dependency and cybersecurity, set against the backdrop of Europe’s digital sovereignty debate. Focused on the private sector’s role in particular, the roundtable aims to spark meaningful dialogue on the intersections between geopolitics, technology, and private-sector leadership.The Gartner Risk &amp; Security Management Summit offers those of us in the industry an invaluable forum to engage with forward-thinking professionals and security innovators. Whether you are a CIO, CISO, governmental leader, or strategic decision-maker, I believe Zscaler has a compelling perspective to share on how to approach the most pressing challenges facing enterprises today, from managing risk in AI-driven ecosystems to navigating geopolitical complexities. We look forward to exploring groundbreaking ideas, fostering collaboration, and contributing to meaningful discussion.Join us at the Zscaler booth, attend our keynotes, and connect with our executive team at the cocktail reception on Monday, September 22nd. Reach out for your personal invitation&nbsp;here.Together, let’s shape the future of resilience, AI innovation, and security leadership.&nbsp;]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler Named a Leader in The Forrester Wave™ Secure Access Service Edge Solutions, Q3 2025: The Future is Zero Trust]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-named-leader-forrester-wave-tm-secure-access-service-edge-solutions-q3</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-named-leader-forrester-wave-tm-secure-access-service-edge-solutions-q3</guid>
            <pubDate>Mon, 08 Sep 2025 17:26:16 GMT</pubDate>
            <description><![CDATA[We are thrilled to announce that Zscaler has been named a Leader in The Forrester Wave™: Secure Access Service Edge Solutions, Q3 2025.We are especially proud to be positioned with the highest score in the Strategy category, which we see as a reflection of our unique zero trust approach.To us, this recognition from Forrester reinforces our long-held conviction: true SASE isn't about routing packets or bolting products together; it’s about securely connecting the right user to the right application, based on policy, without ever placing them on the corporate network. This principle is the driving force behind the world's largest security cloud: the&nbsp;Zscaler Zero Trust Exchange™. The Problem with First-Generation SASEMany early SASE offerings simply repackaged old problems. They focused on optimizing network paths by stitching together disparate SD-WAN products with a separate security stack (SSE). This "good enough" approach left enterprises still owning and operating a complex WAN, managing separate policies for network and security, and struggling with visibility gaps. It remained a fundamentally network-centric architecture, creating complexity, cost, and a larger attack surface—the very issues a true SASE platform should eliminate. A New Architectural Approach: The Zero Trust ExchangeOur answer is a completely different architectural model. The Zero Trust Exchange is a cloud-native platform that acts as an intelligent switchboard between users, devices, and applications.Instead of routing packets, it focuses on one thing: brokering secure, policy-based connections.All traffic—from user laptops, guest Wi-Fi, servers, and IoT/OT systems—is forwarded to the nearest Zscaler cloud point of presence.The Zero Trust Exchange delivers comprehensive security services inline. This includes a full SSE stack—from&nbsp;ZTNA and&nbsp;SWG to&nbsp;CASB,&nbsp;DLP, and&nbsp;Firewall-as-a-Service (FWaaS)—to inspect 100% of traffic and apply granular zero trust policies.Secure connections are brokered directly between the entity and the application, eliminating lateral threat movement and completely removing the need to expose your infrastructure to the internet. The Transformative Benefits of Zero Trust EverywhereBy leveraging the Zero Trust Exchange platform, organizations unlock immediate value:Radically Simplified IT: Liberate IT by moving away from owning and operating the WAN. The Zero Trust Exchange enables you to transform traditional offices into secure,&nbsp;cafe-like branch experiences. Provision new sites with full, cloud-delivered security in minutes, not months.Massively Reduced Costs: Stop paying for expensive, private MPLS circuits and move to cost-effective direct internet access. Move from a burdensome CapEx model to a predictable OpEx model, significantly lowering total cost of ownership.Superior Security: Reduce the attack surface to zero by making users and branches invisible to the internet. With full SSL/TLS inspection and consistent policy enforcement for every connection, you can prevent lateral threat movement and stop attacks before they start.A Phenomenal User Experience: Connect users directly and quickly to cloud apps without the latency of backhauling traffic. The result is a faster, more productive experience for every user, at every location. The Future is Zero TrustThe industry is at an inflection point. Owning and managing a network to secure your enterprise is no longer sustainable in a cloud-first world. The future is built on a true zero trust architecture.Being named a Leader in The Forrester Wave™ for SASE Solutions—and recognized with the top score in the strategy category—reinforces our conviction that zero trust simplicity is the proven path forward. We are proud to be named a leader among top solutions in the market and will continue to innovate to help our customers.To learn more, access a complimentary copy of The Forrester Wave™: Secure Access Service Edge Solutions, Q3 2025 report.Discover how the Zscaler Zero Trust Exchange can transform your network and security.&nbsp;Forrester does not endorse any company, product, brand, or service included in its research publications and does not advise any person to select the products or services of any company or brand based on the ratings included in such publications. Information is based on the best available resources. Opinions reflect judgment at the time and are subject to change. For more information, read about Forrester’s objectivity&nbsp;here .]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[La psychologie de la confiance en cybersécurité : ce n’est pas de la paranoïa, c’est de la prudence]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-psychology-of-trust-in-cybersecurity-it-is-not-paranoia-it-is-prudence</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-psychology-of-trust-in-cybersecurity-it-is-not-paranoia-it-is-prudence</guid>
            <pubDate>Thu, 04 Sep 2025 12:58:38 GMT</pubDate>
            <description><![CDATA[Une confiance innée dans ce qui est familier est une réaction profondément humaine. Sur le lieu de travail, il est pratiquement acquis que les collègues, les systèmes internes et les réseaux d’entreprise sont tous dignes de confiance.Mais dans le monde moderne où tout et tout le monde se connecte de partout, cet instinct peut s’avérer dangereusement trompeur. Le réseau d’entreprise est plus vulnérable que jamais, et pas seulement parce que les environnements hybrides cloud-first ont largement étendu la surface d’attaque.Trois autres raisons expliquent cette plus grande vulnérabilité. Tout d’abord, le risque de compromission est plus élevé, car les hackers se tournent vers l’IA pour lancer des campagnes d’ingénierie sociale de plus en plus sophistiquées. Deuxièmement, il est très facile pour un acteur malveillant de se déplacer latéralement sur le réseau, sans surveillance, en utilisant des informations d’identification vérifiées pour se connecter. Enfin, il y a le danger pour les données : l’augmentation alarmante des ransomwares ou de l’exfiltration de données (sans qu’aucune alarme ne soit déclenchée).C’est une mauvaise nouvelle pour tous les secteurs d’activité. Surtout pour ceux qui sont déjà classés parmi les secteurs les plus attaqués au monde. Compte tenu de la grande valeur des données du secteur et de son exposition réglementaire, il n’est pas surprenant de trouver les services financiers dans ce groupe.Le statut de patrimoine est une arme à double tranchant pour les enseignes financières établies. Elles ont accumulé une expérience incroyable que les challengers numériques ne peuvent pas concurrencer ; cependant, des années et des années de mises à jour de la sécurité et des performances de leur infrastructure technologique héritée ont généré des environnements complexes et difficiles à gérer. Cela signifie moins d’agilité et une plus grande exposition aux cyber-risques. La complexité s’étend au vaste écosystème de la chaîne d’approvisionnement du secteur et au fait que chaque mouvement au sein de celui-ci est hautement réglementé.Le secteur des services financiers est confronté à des défis évidents, en particulier les grandes banques traditionnelles établies qui doivent affronter des challengers agiles à la pointe du numérique. Les entreprises de ce secteur, et de tous les secteurs hautement réglementés d’ailleurs, doivent vraiment redoubler d’efforts en matière de sécurité, et rapidement.Il ne s’agit pas de semer la panique, mais de remettre en question le biais de confiance qui, trop souvent, devient un défaut risqué. Il s’agit de promouvoir la prudence en matière de sécurité pour garantir le maintien du contrôle et de la résilience.Le biais humain envers la confianceAvez-vous déjà entendu parler des heuristiques cognitives ? Ancré dans les sciences cognitives, le terme décrit les raccourcis mentaux que nous empruntons lorsque nous devons prendre des décisions rapidement ou sur base d’informations limitées. Il existe différents types de raccourcis, mais celui auquel nous devons particulièrement prêter attention dans l’espace de travail numérique est l’heuristique de familiarité. Elle consiste à rechercher ce qui nous est familier face à l’incertitude. Il s’agit d’un biais de jugement auquel beaucoup d’entre nous ont naturellement recours.Dans un contexte d’entreprise, l’heuristique de familiarité peut nous amener à accorder notre confiance sans réfléchir. Par exemple, nous croyons instinctivement que les e-mails internes sont « plus sûrs » que les e-mails externes, que les systèmes de notre société sont sécurisés par défaut ou que nos collègues sont moins susceptibles de constituer une menace pour notre cybersécurité.Cette présomption que ce qui est « à l’intérieur » est sûr est exactement ce sur quoi les cybercriminels s’appuient. Les violations du réseau peuvent résulter d’une menace externe. Le plus souvent, elles sont dues à la compromission involontaire des informations d’identification du personnel, en grande partie par courrier électronique. En 2024, notre équipe ThreatLabz a examiné 1,2 milliard de transactions de données sur des applications et des canaux commerciaux de base tels que la messagerie électronique. Les résultats, partagés dans notre rapport@Risk 2025 sur les données, soulignent l’ampleur du problème : des données sensibles de l’entreprise (notamment du code source et des informations financières) ont été divulguées dans le cadre de près de 104 millions de transactions par e-mail.Il est révélateur que le phishing par courrier électronique reste l’un des vecteurs d’attaque les plus efficaces, même en 2025 alors que nous connaissons tous les dangers d’une mauvaise hygiène de sécurité. Une fois de plus, c’est le biais humain qui pousse à faire confiance à ce qui est familier : un e-mail interne provenant d’un expéditeur apparemment légitime arrive dans la boîte de réception d’un employé qui clique sur un lien comme demandé, ouvrant ainsi la porte à un hacker. Celui-ci se déplace alors latéralement sur le réseau, sans être détecté dans un environnement de sécurité traditionnel où la confiance est supposée plutôt que vérifiée. La question est : peut-on jamais présumer de la fiabilité d’une entité ?Vous trouverez la deuxième partie de cette série sur la psychologie de la confiance dans la cybersécurité ici. Si vous souhaitez en savoir plus sur la cybersécurité dans l’espace FSI, téléchargez l’e-book ici.1Statista, Distribution of cyberattacks across worldwide industries in 2024. Mai 2025. Disponible sur :https://www.statista.com/statistics/1315805/cyber-attacks-top-industries-worldwide/]]></description>
            <dc:creator>Martyn Ditchburn (Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Salesloft Drift Supply Chain Incident: Key Details and Zscaler’s Response]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/salesloft-drift-supply-chain-incident-key-details-and-zscaler-s-response</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/salesloft-drift-supply-chain-incident-key-details-and-zscaler-s-response</guid>
            <pubDate>Sat, 30 Aug 2025 19:42:18 GMT</pubDate>
            <description><![CDATA[At Zscaler, protecting your data and maintaining transparency are core to our mission to secure, simplify and accelerate businesses transformation. We are committed to keeping you informed about key developments that may impact your organization. What Happened?Zscaler was made aware of a campaign targeted at Salesloft Drift (marketing software-as-a-service) and impacting a large number of Salesloft customers. This incident involved the theft of OAuth tokens connected to Salesloft Drift, a third-party application used for automating sales workflows that integrates with Salesforce to manage leads and contact information.The scope of the incident is confined to Salesloft’s Drift app and does not involve access to any of Zscaler's products, services or underlying systems and infrastructure.As part of this campaign, unauthorized actors gained access to Salesloft Drift credentials of its customers including Zscaler. Following a detailed review as part of our ongoing investigation, we have determined that these credentials have allowed limited access to some Zscaler Salesforce information. What Information May Be Affected?The information accessed was limited to commonly available business contact details for points of contact and specific CRM related content, including:NamesBusiness email addressesJob titlesPhone numbersRegional/location detailsZscaler product licensing and commercial informationPlain text support case header content from certain cases limited to the following fields: Case Number, Opened, Preferred Contact Number, Description, Priority, Case Owner, Preferred Time Zone, Case Status, Type, Customer Case Reference, Product, Last Activity, Subject, Resolution Notes, Reason for Hand Off, Current Status / Next Plan of Action, Data Collected, Issue Summary / Business Impact, and Requestor. No attachments, files, or images were included in the incident, as it solely involved structured text data from case headers.After extensive investigation, Zscaler has currently found no evidence to suggest misuse of this information. If anything changes, we will provide further communications and updates. What Did Zscaler Do?&nbsp;Zscaler acted swiftly to address the incident and mitigate risks. Steps taken include:Revoking Salesloft Drift’s access to Zscaler’s Salesforce dataOut of an abundance of caution, rotating other API access tokens.Launching a detailed investigation into the scope of the event, working closely with Salesloft to assess and understand impacts as they continue investigating.Implementing additional safeguards and strengthening protocols to defend against similar incidents in the future.Immediately launched a third party risk management investigation for third party vendors used by Zscaler.Zscaler Customer Support team has further strengthened customer authentication protocol when responding to customer calls to safeguard against potential phishing attacks. What You Can DoAlthough the incident’s scope remains limited (as stated above) and no evidence of misuse has been found, we recommend that customers maintain heightened vigilance. Please be wary of potential phishing attacks or social engineering attempts, which could leverage exposed contact details.Given that other organizations have suffered similar incidents stemming from Salesloft Drift, it’s crucial to exercise caution regarding unsolicited communications, including emails, phone calls, or requests for sensitive information. Always verify the source of communication and never disclose passwords or financial data via unofficial channels.Zscaler Support will never request authentication or authorization details through unsolicited outreach, including phone calls or SMS. All official Zscaler communications come from trusted Zscaler channels. Please exercise caution and report any suspicious phishing activity to security@zscaler.com. Need Assistance or Have Questions?If you have concerns or need additional support, Zscaler’s Customer Success and Support teams are available via&nbsp;help.zscaler.com or your existing Zscaler support channels.&nbsp;You can also reach out to our Security team at&nbsp;driftincident@zscaler.com.Your security is our top priority. Thank you for your continued partnership with Zscaler.Update: Blog updated on September 3rd, 2025 to include support case information impacted by the incident. Blog updated on September 7th, 2025 to include additional support case information impacted by the incident.]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler’s Commitment to Responsible AI]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscalers-commitment-to-responsible-ai</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscalers-commitment-to-responsible-ai</guid>
            <pubDate>Thu, 21 Aug 2025 02:00:00 GMT</pubDate>
            <description><![CDATA[There was a question recently posted about how Zscaler trains AI models. We wanted to provide accurate information on how we train our AI models. Zscaler does not use customer data to train its AI models. Each customer owns their proprietary information or personal data (user names, email addresses, device IDs, etc.) in the Zscaler logs. We only use data or metadata that does not contain customer or personal data for AI model training.Organizations want to safely unlock the value of artificial intelligence and machine learning, but they also need to ensure that this does not come at the expense of privacy, security and compliance controls. This becomes particularly charged when we consider the potential of training AI using proprietary data or personal data.&nbsp;The foundation of our architectural approach is data containment. Every customer’s tenant is self-contained: their data lives within their tenancy, under their control. Sensitive information never leaves that boundary. This is not just a principle: it’s a design choice by Zscaler that governs how we build, scale, and deliver value. This is how Zscaler can ensure that customer data is never used to train an AI model beyond a given tenant.Within that contained environment, customers can harness the power of their own data. Logs, transactions, and telemetry generated by their use of our platform are used to improve outcomes for their organization alone. This means customers benefit directly from their own signals, whether it’s for risk modeling, AI copilots, or policy enforcement, without having to trade away autonomy or privacy or security.Leveraging Data ResponsiblyA common concern is whether preserving privacy limits the ability to benefit from large-scale insights. Here’s where an important distinction comes in: personal data remains private, secured, and not included as model training data while metadata that does not contain proprietary information or personal data is used to enrich each tenant’s environment.Think of it like water flowing through pipes: while the content of the water belongs entirely to each customer, the knowledge of how the water moves (its pressure, velocity, and patterns) can inform the system without ever extracting the water itself. Similarly, Zscaler’s platform can use traffic patterns and telemetry that does not contain personal data, and aggregated signals to strengthen AI models and improve the overall environment while still enforcing the guarantee that sensitive data never leaves a customer’s tenancy.Zscaler’s ability to learn from over half a trillion transactions per day leverages a network effect without sacrificing customers’ privacy (specifically and technically a logarithmic utility). Customers benefit from the sheer breadth of signals Zscaler processes because it allows us to recognize global threat trends and provide resilient, real-time defenses. At the same time, customer-specific data is never exposed outside of respective tenancy.Instead, Zscaler leverages the aggregate knowledge of signals across the platform, never tied to an individual customer’s data, to strengthen detection and modeling. Each tenant gains from this global intelligence while maintaining strict boundaries for its own data.To re-emphasize: customers’ proprietary information or personal data in the Zscaler logs is never shared outside of the customer boundary.&nbsp;A Core Security Principle Rooted in Shannon’s Information TheoryThere is deep alignment of our approach with Shannon’s Information Theory, a topic I will delve into more in a future blog. Zscaler views data along a continuum that stretches from low entropy, high-information states such as clear text, through progressively higher entropy forms like ciphertext, and ultimately to encryption and the extreme of pure randomness. At Zscaler, our architectural principle begins with data control. Sensitive classes of data never leave a tenant boundary in any form including customer data. Beyond that, we apply a disciplined progression toward maximum entropy wherever possible, ensuring that only the minimum necessary information is exposed. Techniques such as anonymization, tokenization, de-identification, and other data strategies are not applied as afterthoughts but as deliberate mechanisms to elevate entropy while still preserving just enough structure for essential operations, such as AI modeling and training at the platform level. This approach ensures that the system operates at the highest entropy state consistent with utility, minimizing information exposure while maximizing privacy, trust, and compliance. This is how Zscaler unlocks the value of artificial intelligence but still ensures privacy and compliance for all customers.]]></description>
            <dc:creator>Sam Curry (SVP, Global CISO)</dc:creator>
        </item>
        <item>
            <title><![CDATA[La résilience est indispensable pour les entreprises et les collaborateurs - agissez maintenant]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/it-is-time-to-take-resilience-personally</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/it-is-time-to-take-resilience-personally</guid>
            <pubDate>Thu, 24 Jul 2025 15:23:42 GMT</pubDate>
            <description><![CDATA[Dans un récent article de blog, j’ai exploré la résilience en tant que thème central pour Zscaler. À cette époque, nous avions déjà publié notre étude sur le pouvoir de la résilience, qui mettait en lumière l’état des stratégies de cyber-résilience au sein des entreprises mondiales et proposait une approche plus proactive, baptisée « Résilient by Design », comme prochain impératif de cybersécurité. J’ai également présenté un aperçu d’autres travaux que nous avons entrepris sur la résilience personnelle.Pourquoi une entreprise technologique s’intéresse-t-elle à la résilience personnelle, me demanderez-vous.Connecter les équipes résilientes à la continuité d’activitéChez Zscaler, nous pensons que les meilleures stratégies de cyber-résilience comportent trois éléments essentiels : les processus, la technologie et les personnes. Cependant, si les entreprises comprennent parfaitement l’impact de la technologie et des processus opérationnels sur les stratégies de continuité, ce dernier élément est souvent négligé.Et c’est une grave erreur. La résilience est une force intérieure qui prépare les individus et les équipes à surmonter les difficultés et à rebondir rapidement. Dans le contexte actuel de cyberattaques, au sujet duquel nos précédentes études ont révélé que 60 % des responsables informatiques s’attendent à subir une faille de sécurité dans les six prochains mois, la résilience personnelle est devenue incontournable pour les employés en première ligne de la défense numérique. Il existe un lien avéré entre cette qualité et la performance de l’entreprise. Des études ont même démontré que les employés résilients sont généralement deux fois plus enclins à se montrer motivés et productifs que leurs homologues moins résilients.En termes simples, les dirigeants d’entreprise qui investissent dans le développement de la résilience de leurs collaborateurs et de leurs équipes, tout en s’efforçant d’en traiter les causes sous l’angle des technologies et des processus, bénéficieront d’un avantage concurrentiel. Chez Zscaler, nous souhaitons offrir cet avantage à nos clients et les aider à progresser en toute confiance, quelles que soient les menaces ou les perturbations auxquelles ils sont confrontés.Favoriser la résilience au sein de votre équipeAlors, comment concevoir votre environnement pour favoriser la résilience, à la fois pour vous-même et pour votre équipe ; et contre quoi vos collaborateurs doivent-ils être résilients ? Pour vous aider à démarrer, nous avons créé deux ressources essentielles :Le chaînon manquant : pourquoi investir dans la résilience de vos collaborateurs est impératif pour assurer la continuité d’activité : nous avons collaboré avec les experts en coaching professionnel de Positive Intelligence pour créer une feuille de route pratique visant à renforcer la résilience en tant que compétence clé du leadership. Complétée par de précieuses informations issues de notre enquête auprès de plus de 200 professionnels de l’informatique et de la sécurité dans la région EMEA, la feuille de route se concentre sur l’intégration de la résilience dans les habitudes personnelles, la dynamique d’équipe et la culture de la société.Quiz « Le superpouvoir de la résilience personnelle » : pour vous aider à identifier les « types de personnalité » résilients au sein de votre équipe, nous avons développé le Quiz sur les super-pouvoirs de la résilience personnelle. En 12 questions rapides, vous découvrirez votre superpouvoir, vos points faibles et des stratégies pour améliorer la collaboration. Au-delà des conseils individuels, vous découvrirez également comment les quatre types de résilience peuvent fonctionner ensemble pour créer une équipe parée à toute éventualité.En tant que commandant cool, la description de la façon d’affronter les problèmes de front et de relever les défis avec confiance et contrôle me correspond tout à fait. Il était donc intéressant de lire comment d’autres personnages tels que le résolveur de problèmes pratiques peuvent s’avérer essentiels pour vérifier mon approche.Faire face à l’avenirDepuis plus de 18 ans, Zscaler propose des services basés sur le cloud pour protéger les réseaux d’entreprise et leurs données. Forts de cette riche expérience, nous connaissons de première main les risques auxquels sont confrontées les entreprises qui n’investissent pas dans la résilience de leurs employés de première ligne et ne protègent leur activité de manière adéquate.Notre mission cette année est d’aider les entreprises à déverrouiller le pouvoir de la résilience, ce que nous définissons comme la capacité unique d’une entreprise (ou d’un employé) à faire face à l’adversité, à adapter ses opérations et à être prêt à relever tous les défis. Sachant que 47 % des professionnels de l’informatique nous disent qu’ils ne se sentent que peu résilients et que 51 % pensent que leur entreprise ne se soucie pas de la résilience personnelle, nous pensons qu’il y a urgence.&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Unlock Ransomware Resilience and AI Defense with Zscaler at Black Hat 2025]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/unlock-ransomware-resilience-and-ai-defense-zscaler-black-hat-2025</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/unlock-ransomware-resilience-and-ai-defense-zscaler-black-hat-2025</guid>
            <pubDate>Mon, 21 Jul 2025 21:33:29 GMT</pubDate>
            <description><![CDATA[Black Hat 2025 is right around the corner, and this year’s agenda hits at the core of what cybersecurity professionals care about the most: stopping AI-driven ransomware by leveraging AI to stay ahead of evolving threats.Whether you are on the front lines of incident response, working to secure hybrid environments or researching the next wave of cyberthreats, Zscaler product and industry leaders will be available to provide insights and showcase new solutions and strategies designed for real-world defense.Here is what you can expect from Zscaler at Black Hat 2025:&nbsp; Experience Zero Trust Everywhere at Booth #3551Cybersecurity isn't a spectator sport - so get hands on with Zscaler at booth #3551. Our in-booth sessions and live demos are designed to help you understand how AI and automation are being used to stop ransomware in real time, reduce attack surfaces and protect sensitive data.Meet face-to-face with our product experts and technology partners to explore new capabilities in inline data protection, threat containment and exposure management. If you are tackling challenges around endpoint visibility or identity-driven policy, the Zscaler booth is the place to ask questions, test solutions and get the technical depth you are looking for.&nbsp; From Risk to Readiness: Combat the Latest Ransomware Extortion Surge with the Zero Trust Defense PlaybookThe intersection of AI and ransomware is reshaping the cybersecurity battlefield – and Deepen Desai, Zscaler CSO, and Dr. Brett Stone-Gross, Zscaler’s Distinguished Security Researcher, are diving into the heart of it. Join their session on Wednesday, August 6 at 2:35 PM to uncover the latest ransomware surge and how organizations can respond with resilient frameworks and smarter defenses. This powerhouse duo will go beyond theory, showcasing the latest research and delivering practical guidance on how to combat AI-driven ransomware.&nbsp; Your Path to AI-Powered Security Starts Here: Schedule a Meeting with Zscaler at Black Hat 2025Transform how you approach cybersecurity by scheduling an on-site meeting with the Zscaler team at Black Hat 2025. Learn how Zscaler addresses emerging threats, boosts operational efficiency, and reshapes security architecture to align with today’s fast-evolving landscape. Tailor the conversation to your unique goals for deploying modern, scalable defenses.Don’t just keep up with cybercriminals—take the lead and visit Zscaler at Black Hat 2025 to discover cutting-edge solutions designed to keep you ahead of the curve.]]></description>
            <dc:creator>Diana Shtil (Sr. Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[A New Chapter for Zscaler in the Heart of London]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/a-new-chapter-for-zscaler-in-the-heart-of-london</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/a-new-chapter-for-zscaler-in-the-heart-of-london</guid>
            <pubDate>Wed, 16 Jul 2025 10:04:45 GMT</pubDate>
            <description><![CDATA[Zscaler has proudly opened the doors to its new EMEA headquarters in London, marking an exciting milestone for the company. Our new home is located on the third floor of the iconic Royal Exchange, a historic building overlooking the Bank of England in the heart of the City district.Originally opened by Queen Victoria in 1844, the Royal Exchange has long been a cornerstone of historic trade and governance. It was the location of the first stock exchange, cementing its role as a global hub for commerce. Over the years, it has witnessed monumental moments, including the proclamation of King Edward VII in 1901 and the announcement of the new Sovereign in 2022. Now in its third iteration, rebuilt after catastrophic fires including the Great Fire of London in 1666, The Royal Exchange stands as a symbol of resilience and reinvention, qualities that closely mirror Zscaler’s mission of empowering customers to overcome challenges and thrive securely in the digital economy.The relocation underscores Zscaler’s dedication to the thriving UK market, which is among the company’s top five regions globally. London’s role as a leading tech hub makes it an ideal base, providing unmatched opportunities to engage with diverse talent, enterprise customers, policymakers, and strategic partners. Being in close proximity to many of our key partners further enhances our ability to collaborate effectively and innovate solutions. This strategic move enables Zscaler to accelerate advancements in cybersecurity, support transformative security initiatives, and strengthen collaboration with customers across EMEA.Beyond serving as Zscaler’s EMEA headquarters, this new space will also act as the primary hub for our Executive Design Center (EDC). EDCs are pivotal in hosting discussions that inspire innovation, foster collaboration, and advance strategic agendas for cyber transformation. Here in the UK, we will leverage the center to deepen relationships with customers and partners, explore new ideas to solve the most pressing cybersecurity and operational challenges, and foster the kind of thought leadership that drives impactful business results.While this move is a celebration of new beginnings, it is also about the hardworking team that drives Zscaler’s success every day. We are proud of our 300+ UK employees and are planning to&nbsp;grow our headcount over the next year, with roles focused on Sales, Marketing, Solution Engineering, Cybersecurity Analysis &amp; Research, Customer Success, and Partner Enablement. At Zscaler, we believe diversity of thought and experience is essential to building exceptional teams. This culture of growth, learning, and impact has earned us distinctions such as the UK’s Best Workplace™ for Employee Development award.The energy within the new space has been palpable as we officially welcomed our teams this week. We look forward to continuing to push boundaries in cybersecurity innovation for our customers across the region. This new office marks a brilliant step forward for Zscaler in EMEA. We’re here to stay, to grow, and shape the future of cybersecurity right from the heart of London.]]></description>
            <dc:creator>Justin Brooks (Area Vice President, Sales - UK&amp;amp;I)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Why Our New London Office Marks a Milestone for Zscaler in EMEA]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/why-our-new-london-office-marks-a-milestone-for-zscaler-in-emea</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/why-our-new-london-office-marks-a-milestone-for-zscaler-in-emea</guid>
            <pubDate>Tue, 15 Jul 2025 11:44:23 GMT</pubDate>
            <description><![CDATA[This week’s London office opening in the amazing Royal Exchange building is big news for not just the UK, but all of EMEA. More than just another address to add to our global footprint, the office represents our long-term commitment to the region as a strategic hub for security innovation, cloud transformation, talent, and customer collaboration. This new and expanded office reflects our ethos as a world-class international company.Previously, Zscaler’s EMEA operations have been distributed across several regional hubs. Now we’re proud to announce that London is the official headquarters for Zscaler in EMEA. This centralization brings together leadership, strategy, sales, and marketing under one roof – creating a vibrant environment for ideation, collaboration, and the delivery of cybersecurity strategies that protect critical data, enable agility, and drive business outcomes at scale.The centerpiece of the new space is something truly special: our first purpose-built European Executive Design Center (EDC) for the region.Until now, our only Executive Briefing Center was located in San Jose, which meant a long flight for EMEA customers looking to make use of it! With the launch of the London EDC, we’re bringing customers that same immersive, hands-on experience – right on their doorstep. This is truly a game-changer. It will allow prospects and customers to see firsthand how Zscaler technology protects and modernizes some of the world’s largest and most complex organizations. More importantly, it will enable them to co-create strategies with our top-tier consultants to solve the most pressing cybersecurity and IT infrastructure challenges facing enterprises and the public sector across EMEA.Some of the key features the EDC offers include:Access to Zscaler’s global innovation roadmapWorkshops on threat intelligence, AI in security, and Zero Trust Everywhere strategyPeer-to-peer customer sessions and best practice sharingEvery detail of the center has been carefully considered – from a dedicated customer entrance and terrace to flexible meeting rooms to accommodate larger gatherings and a private kitchen – ensuring a tailored, high-impact experience for every visitor.For our customers, the EDC ultimately means earlier access to innovations, more localized support, and direct engagement with EMEA leadership.But it is just one milestone in a far broader regional story.EMEA has always been Zscaler’s second-largest market by geography, contributing approximately 30% of our global revenue – with the UK accounting for a significant portion of that. And our presence here continues to expand. Over the past two years, we’ve established offices and customer hubs in key markets such as Germany, France, the Netherlands, and the UAE. We’ve seen significant team growth, supporting everything from go-to-market roles to technical and partner-focused functions. And we’ve built out our partner ecosystem and joint go-to-market programs with regional system integrators and MSSPs.This growth is being driven by a surge in demand from organizations in the region that are accelerating their move to zero trust security. As concerns around threat protection, data sovereignty, operational resilience and more continue to rise, we are&nbsp;scaling our people and infrastructure to meet that demand – locally and effectively.The opening of our London HQ and EDC is a reflection of EMEA’s growing significance in Zscaler’s global operations. It’s a signal of expanded investment in the region’s cybersecurity ecosystem – and a promise to our customers that we’re thinking long-term about how we support them on the journey ahead.We look forward to welcoming our staff and customers to our new home in London.]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[A Transformational Zenith Live EMEA]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/a-transformational-zenith-live-emea</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/a-transformational-zenith-live-emea</guid>
            <pubDate>Thu, 10 Jul 2025 09:39:03 GMT</pubDate>
            <description><![CDATA[As the digital landscape continues to evolve at breakneck speed, Zscaler’s Zenith Live EMEA 2025 proved to be more than just a conference—it was a bold statement about the future of secure digital transformation.&nbsp;From demonstrating our latest AI-powered innovations around segmentation, data security classification, prompt visibility and more, to providing deep dives into securing private LLM deployments and on-prem data environments, the event showcased how Zero Trust Everywhere is no longer a concept—it's a necessity.&nbsp;As was evidenced in the brilliant turnout in Prague, this is something more and more organizations – of every size and industry – are coming to realize. I had the pleasure of spending four days at the show and during that time I witnessed firsthand many lightbulb moments for our attendees – where one of our speakers or even a peer introduced an idea or solution that they hadn’t thought of previously.&nbsp;The key topics of discussion were largely what I had expected them to be. As predicated in my&nbsp;previous blog, data resiliency was a huge talking point for customers, partners and media attendees alike, and especially front of mind given the current macroeconomic climate. But we also saw a great deal of interest in data sovereignty and the different approaches organizations could take to achieving this. Whether the use case is public sector or private, country-level or regional, as sovereign demand only grows more nuanced, so too will the need for security companies like Zscaler to respond.And of course, no conference in 2025 would be complete without a heavy focus on AI. With our recent acquisition of Red Canary to expand our AI-powered security operations, and a whole batch of advanced AI security capabilities announced during Zenith Live AMS, we had a lot to say. And a lot to be proud of. As organizations continue to adapt to the AI era, Zscaler is enabling our customers to adopt cutting-edge AI technologies securely and at scale. Our platform leverages the world’s largest inline security cloud—analyzing over 500 trillion security signals daily. This unmatched volume of real-world telemetry fuels Zscaler’s AI engines, enabling precise threat detection and robust automated security.&nbsp;For newer customers attending the show for the first time from markets such as the Middle East, Africa and Eastern Europe, I hope their time in Prague will have solidified something they were already starting to see – that Zscaler isn’t just a security tool, but a platform for unlocking true transformation outcomes.&nbsp;We’re now in a race to the end of our financial year – but the show has yet again proved to us that our direction is the right one. So why not join us on the journey – we’re here to help you deliver security, resilience and operational agility wherever you need it most.&nbsp;&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[The End of Network Guesswork: Cellular Control Made Simple]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/the-end-of-network-guesswork-cellular-control-made-simple</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/the-end-of-network-guesswork-cellular-control-made-simple</guid>
            <pubDate>Fri, 20 Jun 2025 06:14:08 GMT</pubDate>
            <description><![CDATA[Most organizations assume that once a device connects to a cellular network, it’s automatically under control. In reality, that assumption is rarely true. When a SIM card is active and connected, its traffic flows freely across networks and borders with little visibility or control. The result is an illusion of security that leaves organizations exposed to risks and policy violations, especially when they need to enforce compliance based on geography or behaviour.As I outlined in my previous&nbsp;blog, telcos provide a certain layer of control at the network-level, but granular control related to an organization’s specific security policies is often missing from their offering. As a result, most organizations still tend to rely on legacy architectures such as firewalls, VPNs, and backhaul networks to try and fill the gap. Not only do these add complexity and cost, but they often fail to deliver the proactive, zero trust control that today’s cellular environments demand. Once connected, devices are allowed to communicate too freely, violating zero trust principles that require strict verification of every interaction.Zscaler Cellular changes this dynamic entirely by giving organizations granular control of every packet leaving the device. Instead of having to wait for traffic to reach a network hub or firewall, every connection attempt is evaluated and decided upon instantly at the edge. This early decision determines whether the traffic is routed to the internet or a private application, and allows organizations to apply related policy enforcement before the data ever leaves the device. Because the control is integrated at this base level, organizations no longer need to deploy complex infrastructure or configure multiple layers of security. The SIM or eSIM simply activates, and control is live.This approach enables highly granular, context-aware policies to be implemented based on identity, location, behaviour, or risk factors. For example, a SIM can be restricted to operate only within specific countries or regions, preventing unwanted roaming, data transfers or misuse. Anomaly detection capabilities further enhance security by flagging or blocking unusual behaviour, such as attempts to access disallowed resources or connect from unexpected locations. These controls are delivered globally and consistently, ensuring seamless security anywhere in the world without added operational overhead.And I’d underline seamlessly here. What makes Zscaler Cellular truly revolutionary is its simplicity by design. There is no need to manage firewalls, tunnels, or backhaul networks. There is no complex setup or manual intervention required beyond inserting or activating the SIM. The traditional guesswork and delays associated with network security are eliminated. Instead, organizations gain immediate visibility and policy enforcement aligned with zero trust principles, transforming reactive security measures into proactive, intelligent control.This seamless integration of connectivity and zero trust security is made possible by uniting two previously separate domains; connectivity from mobile operators and zero trust frameworks from security providers. Zscaler is the first to bring these together in a unified service, delivering secure, ubiquitous communication with intelligent control.In a world where cellular devices increasingly power critical business functions, Zscaler Cellular offers a decisive step forward in protection. This is zero trust application without complexity - and it’s just the beginning. Because once control is simplified, the next frontier is zero trust everywhere.&nbsp;Learn more about the power of ubiquitous protection in my third and final blog of this series next week.]]></description>
            <dc:creator>Nathan Howe (SVP of Innovation)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Out of Sight, Out of Control: Bridging the Cellular Visibility Gap]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/out-of-sight-out-of-control-bridging-the-cellular-visibility-gap</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/out-of-sight-out-of-control-bridging-the-cellular-visibility-gap</guid>
            <pubDate>Thu, 12 Jun 2025 04:22:05 GMT</pubDate>
            <description><![CDATA[Do You Know What Your Organization’s Cellular Devices Are Doing Right Now?Every day, countless cellular-connected devices quietly communicate across the internet and private networks, without the knowledge or oversight of the organizations that own them. These devices - which could range from lighting sensors to critical industrial equipment - operate outside traditional security controls, creating a blind spot in many enterprises’ security strategies. Indeed while it’s commonly assumed that mobile networks provide a secure path for all cellular devices even if you have trouble seeing them, the reality is far more complex and risk-prone than most realize. And so it begs the question, do you know what your organization’s cellular devices are doing right now?Mobile carriers do offer network-level protections, but these aren’t necessarily designed with applications or the sensitive data flowing across them as the priority focus. Cellular devices frequently run multiple software components, making a variety of outbound requests that go unseen by traditional security tools. The implicit trust placed in these mobile connections leaves organizations vulnerable to threats that can easily slip through the cracks.Without full visibility into what these devices are doing, security teams cannot detect unusual activity, enforce granular policies, or respond effectively to emerging risks. The legacy approach of relying on firewalls, VPNs, and costly backhaul infrastructure simply doesn’t scale or adapt well to the sprawling, dynamic world of cellular-connected devices. This results in increased attack surfaces and operational headaches.That’s where Zscaler Cellular changes the game. By ensuring every single data packet from cellular devices go through Zscaler’s zero trust platform, organizations gain complete visibility into device behavior - even for those that were previously out of reach. This transparency means businesses can see exactly where each device connects, what it’s communicating with, and how policies are being applied to it in real-time. Most importantly, it enables a shift from blind trust in mobile networks to informed control over every connection. This is visibility by design.&nbsp;Visibility is more than a technical advantage; it’s the foundation for extending modern security to mobile and IoT environments. But the real opportunity goes further: with Zscaler Cellular, organizations can move from passive insight to active, ubiquitous protection.By bringing zero trust to devices that were previously out of reach, security teams can enforce consistent policy across every connection, everywhere - no matter the network or location. In my next blog, we’ll dive deeper into how this newfound visibility empowers organizations to enforce powerful controls - moving beyond passive monitoring to actively securing every session at the very first packet.If you want to find out more about Zscaler Cellular, join us at Zenith Live EMEA in Prague from 16th - 18th of June 2025.]]></description>
            <dc:creator>Nathan Howe (SVP of Innovation)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zero Trust is Reshaping Cyber Insurance by Reducing Risk]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zero-trust-is-reshaping-cyber-insurance-by-reducing-risk</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zero-trust-is-reshaping-cyber-insurance-by-reducing-risk</guid>
            <pubDate>Wed, 11 Jun 2025 06:52:49 GMT</pubDate>
            <description><![CDATA[In an era where ransomware attacks continue to show the shortcomings of perimeter-based defenses, Zero Trust has proven itself as a game-changer for cyber insurance outcomes.A&nbsp;landmark report from&nbsp;Zscaler, leveraging Marsh McLennan’s Cyber Risk Intelligence Center, found that&nbsp;up to 31% of cyber losses could have been prevented with Zero Trust architecture properly deployed alongside solid cyber hygiene. That translates into&nbsp;$465 billion in avoided global economic damage annually–a staggering figure with major implications for both security leaders and insurers.Where Traditional Security FailsTraditional security models rely on perimeter security appliances like firewalls and virtual private networks (VPNs), but recent data paints a troubling picture: these very devices are often the&nbsp;initial access vector in ransomware attacks.&nbsp;According to Coalition insurance claims data, organizations using perimeter security products like firewalls and VPN’s are&nbsp;up to 12 times more likely to report a claim.Why? Because perimeter defenses foster a&nbsp;false sense of security, encouraging risky behavior like enabling firewalls, VPN’s, remote desktop protocol (RDP) or skipping multi-factor authentications (MFA) under the illusion of “protected borders.” In contrast,&nbsp;Zero Trust assumes breach,&nbsp;verifying every user, device, and application continuously, thereby&nbsp;limiting an attacker’s ability to access and move within a network, even after an initial compromise.Real-World Impact: The Zscaler Zero Trust Exchange and Cyber InsuranceOrganizations that deploy the&nbsp;Zscaler Zero Trust Exchange are not only reducing the risk of breaches and business interruption stemming from ransomware or other attacks, they're also seeing&nbsp;measurable improvements in cyber insurance outcomes.Take&nbsp;Risk360, Zscaler’s cyber risk quantification engine, which helps customers&nbsp;translate Zero Trust posture into dollar-value risk assessments. With telemetry from 50+ million devices and deep visibility across IT estates, Zscaler equips underwriters with the data needed to streamline cyber insurance applications and renewals.That’s already happening. Through relationships like Zscaler and Resilience Insurance, organizations can now feed Zero Trust telemetry into insurance renewals. The result?Simplified Zero Trust inclusion, during policy submissionsBetter assessment of overall riskUnderstanding of Zero Trust controls that address exposure&nbsp;Beyond the Boardroom: Proving ROI on Security InvestmentsCyber insurance isn’t just a financial backstop; it’s becoming a&nbsp;real-time barometer of cybersecurity maturity. And Zero Trust is proving its worth.Darin Hurd, CISO of US-based mortgage company Guaranteed Rates, puts it plainly: “We now have independent validation that Zero Trust offers significant benefits... Companies that prioritize Zero Trust investments gain a significant edge as cyber defenders.”IBM’s 2024&nbsp;Cost of a Breach Report provides further confirmation: organizations with Zero Trust experience&nbsp;20.5% lower breach costs than those without. The report puts the average cost of a breach in the US at $9.48 million.Zero Trust: Best Practice and Business-CriticalAs the threat landscape evolves, organizations can no longer afford to rely on outdated perimeter defenses. Apply proper cyber hygiene in addition to Zero Trust is a better approach. It’s a risk management imperative for cyber resilience. When properly deployed, Zero Trust reduces the external attack surface, prevents lateral spread, protects against comprise and data loss, resulting in:&nbsp;&nbsp;Enhanced cyber insurability, often resulting in more favorable policiesPrevents one third of cyber eventsCuts breach costs by over 20%Reduces insured loss by up to 31%Zscaler’s industry leading Zero Trust Exchange solution enables clients to identify, mitigate and report on their security posture, while streamlining the cyber insurance submission and renewal process with an automated Zero Trust addendum.&nbsp;We knew it. Insurers knew it. Attackers knew it. And now, thanks to&nbsp;Zscaler and Marsh McLennan, we have the data to prove it.&nbsp;]]></description>
            <dc:creator>Stephen Singh (VP, M&amp;amp;A/Divestiture and ITO integration at Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Having Resilient Conversations at Zenith Live 2025]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/having-resilient-conversations-at-zenith-live-2025</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/having-resilient-conversations-at-zenith-live-2025</guid>
            <pubDate>Tue, 03 Jun 2025 09:30:53 GMT</pubDate>
            <description><![CDATA[Since the start of this year, I have been all over the EMEA region – from Spain to Scandinavia, the UK to the Middle East. It’s been inspiring to understand the different priorities of each market, and where individual companies and broader industries are on their Zero Trust journeys.&nbsp;No matter the location or vertical, however, one topic that is coming up time and time again in my conversations with customers is resilience. Or more specifically, how companies can back-up and protect their existing data estate, and why this action should be acted upon immediately vs. being something that can wait.&nbsp;Exploring today’s resilient landscapeResilience is a topic we’ve been discussing a lot at Zscaler - and not just in terms of our own cloud infrastructure. Earlier this year, we launched&nbsp;research exploring the state of cyber resilience within global businesses. While the results showed an increasing recognition of resilience’s critical business value within a volatile operating environment and escalating threat landscape, they also highlighted worrying inconsistencies, gaps and inefficiencies in current strategies that IT leaders cannot afford to ignore any longer.&nbsp;In particular, we’ve seen that many organizations still rely on outdated or reactive security models. They feel confident in their resilience posture because nothing’s gone wrong yet. But without getting far more proactive with their approaches, set-ups and risk hunting, that confidence may well be misplaced in the wake of emerging developments like AI powered threats. Real resilience comes from visibility, awareness and preparation – not just hope and assumption.The key is building what we call “Resilience by Design.” That means designing systems that can absorb shocks, adapt quickly and keep the business running, even when things go wrong. It applies across every layer of the tech stack, from infrastructure and networks to applications and data. But so too does it apply to the people behind these stacks. As Gartner&nbsp;puts it in ‘Succeed as an SRM Leader by Infusing Resilience Into Your Program’: “Resilient people embody many of the same characteristics as resilient systems and are a key component of a resilient program.”&nbsp;At Zscaler we fully agree with the need for a more holistic approach to resilience – that’s why we’ve also commissioned research into personal resilience, and are due to launch those results in the coming month.&nbsp;Continuing the conversationMy next destination will be Prague for Zenith Live EMEA – Zscaler’s annual user conference. And I’m sure resilience will be a central topic of discussion there as well, as we plan to demonstrate how organizations can thrive in AI with the help of Zero Trust.&nbsp;My attendance of Zenith Live will mark almost a year to the day since I joined Zscaler, so it’s an important milestone for me to reflect upon. In the past 12 months I’ve seen our relationships with partners and customers grow and mature. As companies look to the convergence of AI and Zero Trust to fuel their next level of digital transformation and establish resilient, mission-critical infrastructures, Zscaler’s platform message is&nbsp;resonating more than ever.We’ve also expanded into markets like the Middle East, Africa and Eastern Europe – and I’m really looking forward to meeting some of our newest customers in Prague, as well as our growing partner ecosystem and my team members who are flying in from across the region.&nbsp;We’ve a packed schedule of keynotes, transformation theatre presentations featuring Zero Trust Everywhere and over 60 breakout sessions co-presented by customers, so it promises to be a great event.&nbsp;I’ll be onsite for the full&nbsp;conference so do come and find me on the show floor. We can chat resilience, AI, zero trust and much more.&nbsp;]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[How Zscaler’s CMMC Level 2 Certification Empowers U.S. Department of War Contractors]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/how-zscaler-s-cmmc-level-2-certification-empowers-u-s-department-war-contractors</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/how-zscaler-s-cmmc-level-2-certification-empowers-u-s-department-war-contractors</guid>
            <pubDate>Tue, 27 May 2025 14:37:12 GMT</pubDate>
            <description><![CDATA[Cyber threats are escalating at an unprecedented rate, and as contractors supporting the U.S. Department of War (DoW), the stakes couldn’t be higher. Protecting sensitive data, such as Controlled Unclassified Information (CUI), is a mission-critical responsibility for every contractor within the Defense Industrial Base (DIB). With the establishment of the Cybersecurity Maturity Model Certification (CMMC) framework, the DoW has provided clear guidelines to strengthen the security posture of its contractors and safeguard the digital supply chain that underpins U.S. national defense.At Zscaler, we understand the immense responsibility that comes with operating in this high-stakes environment. It is with great pride that I share the news that Zscaler takes a prominent role as a Security SaaS provider in&nbsp;achieving CMMC Level 2 certification. This accomplishment is not just a certification milestone—it’s a testament to Zscaler’s commitment to empowering DoW contractors with the tools and technologies they need to achieve compliance, modernize security, and execute their mission-critical projects with confidence. Why CMMC Compliance Is a Game Changer for DoW ContractorsThe CMMC framework is DoW’s self-induced catalyst toward strengthening the cybersecurity posture of the DIB. Developed by the DoW, CMMC establishes a governance framework that defines a set of cybersecurity, compliance, and contractual standards that contractors must meet to be eligible for defense contracts. The framework emphasizes the protection of sensitive government data—including CUI—and ensures that cybersecurity is not an afterthought, but a foundational aspect of every contract.Achieving CMMC compliance is about much more than meeting contract requirements. Compliance demonstrates a contractor’s ability to protect critical assets, ensuring mission continuity and safeguarding the integrity of the overall national defense strategy. As threats continue to evolve, the financial, operational, and reputational risks of failing to secure sensitive information mean that compliance has become a strategic imperative for every DoW contractor.At Zscaler, we view compliance not as an endpoint but as a springboard for comprehensive cybersecurity excellence. With our achievement of CMMC Level 2 certification, we are positioned to help DoW contractors strengthen their cyber defenses, streamline compliance, and adopt solutions that meet today’s needs while anticipating tomorrow’s risks. The Zscaler Approach: Zero Trust and Cloud-First SecurityOur journey to earning CMMC Level 2 certification was rooted in our implementation of a Zero Trust Architecture. This approach is powered by Zscaler Internet Access™ (ZIA™) and Zscaler Private Access™ (ZPA™), two of our core solutions that are&nbsp;FedRAMP-authorized and purpose-built to meet the security demands of federal and defense environments.Zero Trust flips the traditional perimeter-based security model on its head. Instead of assuming that entities within a network can inherently be trusted, Zero Trust applies the principle of “never trust, always verify.” It ensures that no user, device, or application can access sensitive resources without first being authenticated and authorized. For the DoW contracting community, this model is a game changer. It eliminates unnecessary risk, minimizes the attack surface, and ensures sensitive data remains secure—no matter where users or applications are located.Our cloud-native approach is designed to simplify the complex. Many contractors today struggle with the operational burden of fragmented legacy systems and disjointed compliance workflows. By centralizing cybersecurity and compliance under the Zscaler platform, we enable contractors to reduce complexity, eliminate inefficiencies, and focus on their core missions. How CMMC Level 2 Certification Benefits DoW ContractorsEarning CMMC Level 2 certification is more than an achievement for Zscaler—it’s a call to action to help DoW contractors embrace industry-leading security solutions. Here’s what this milestone means for your operations:Streamlined Compliance Process: Managing compliance across the DoW contracting landscape can often feel like navigating through a maze of fragmented tools and requirements. Zscaler consolidates and simplifies compliance efforts, helping contractors achieve regulatory requirements faster and with minimal disruption to operations.Enhanced Cybersecurity Posture: With our Zero Trust approach, DoW contractors benefit from robust, cloud-native protections that evolve alongside emerging threats. This proactive security architecture reduces the risk of data breaches and other cyber exploits.Accelerated Digital Transformation: Our cloud-first solutions were built to empower contractors to innovate without sacrificing security. Whether transitioning workloads to the cloud or modernizing IT operations, Zscaler ensures that contractors can embrace digital transformation with confidence.Future-Ready Protections: In the constantly shifting cybersecurity landscape, future-proofing your operations is essential. As Zscaler actively works toward alignment with CMMC Level 3 requirements, contractors can rest assured that their cybersecurity framework will remain adaptable and aligned with DoW mandates.Compliance represents much more than a checkbox exercise; compliance is the foundation for achieving higher levels of organizational resilience and operational agility. As I often say, “Compliance is the foundation and the floor, not the ceiling.” That philosophy drives Zscaler’s approach to CMMC compliance. Looking AheadOur CMMC Level 2 certification is not the endpoint of our journey but a stepping stone to even greater achievements as we continue to support the DIB. We are actively assessing our alignment with CMMC Level 3 requirements and remain dedicated to helping contractors prepare for what’s next.To all U.S. Department of War contractors: Zscaler is here to help you protect sensitive data, drive innovation, and sustain mission success in an era of increasingly complex challenges. We’re proud to stand alongside you as a partner in security excellence and a catalyst for meaningful digital transformation.If you’re ready to accelerate compliance and adopt modern security built for the demands of the DoW ecosystem, I invite you to explore Zscaler and see how we can work together to defend the critical missions that keep our nation safe.]]></description>
            <dc:creator>Kumar Selvaraj (Sr. Director, Technology Risk &amp;amp; Compliance)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler a été désigné parmi les leaders du Gartner® Magic Quadrant™ pour le Security Service Edge (SSE) 2025]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-named-leader-2025-gartner-r-magic-quadrant-tm-security-service-edge-sse</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-named-leader-2025-gartner-r-magic-quadrant-tm-security-service-edge-sse</guid>
            <pubDate>Fri, 23 May 2025 15:31:03 GMT</pubDate>
            <description><![CDATA[IntroductionChez Zscaler, notre mission est de sécuriser, de simplifier et d’accélérer la transformation des entreprises afin de leur permettre d’être plus compétitives. Depuis plus de 15 ans, nous sommes à la pointe de la technologie qui sécurise les communications Zero Trust « Any-to-Any » à l’aide de politiques d’entreprise, et non de réseaux d’entreprise. Nous avons assisté à l’adoption généralisée des solutions SSE qui offrent une voie pratique aux entreprises.Gartner Magic Quadrant pour le SSELe rapport Gartner® Magic Quadrant™ 2025 pour le Security Service Edge (SSE) a été publié et Zscaler a de nouveau été désigné parmi les leaders, se classant en tête pour sa capacité d’exécution. C’est la quatrième année consécutive que Zscaler est classé parmi les leaders du Magic Quadrant pour le SSE.Nous pensons que notre position parmi les leaders du rapport Magic Quadrant, ainsi que les quelque 1 000 avis concernant Zscaler SSE sur Gartner Peer Insights™, avec une note moyenne de 4,65 sur 5 (à ce jour), illustrent notre position de force sur le marché des solutions SSE.À notre avis, les services qui composent le SSE sont des éléments fondamentaux de Zscaler Zero Trust Exchange™, la première architecture de sécurité cloud native, multi-entité et basée sur un proxy qui traite désormais plus de 500 milliards de transactions par jour.Zero Trust EverywhereLe SSE, tel que défini par Gartner, garantit aux utilisateurs autorisés un accès sécurisé, basé sur l’identité et les politiques, à Internet, aux applications SaaS et aux applications privées approuvées. S’appuyant sur plus de 15 ans d’innovation en matière de cybersécurité et sur les retours d’expérience de milliers de DSI et de RSSI, Zscaler va encore plus loin avec Zero Trust Everywhere qui permet aux clients d’étendre les avantages du SSE et d’unifier la sécurité sur trois vastes domaines :Utilisateurs : un accès sécurisé aux applications est fourni aux employés, sous-traitants, partenaires, fournisseurs et autres tiers B2B.Sites distants : chaque site distant, usine, entrepôt et dispositif IoT/OT est sécurisé et traité comme une entité isolée.Clouds : les communications des workloads sont sécurisées dans les environnements multicloud.&nbsp;&nbsp;En étendant la plateforme SSE au-delà des utilisateurs, Zscaler permet à ses clients de simplifier leurs opérations informatiques avec une architecture cloud native complète qui peut protéger l’ensemble de leur entreprise.Approbation du clientNous pensons que la valeur que nous apportons à nos clients et la confiance qu’ils nous accordent pour leur fournir un service résilient, évolutif et sécurisé tout au long de leur transformation numérique sont des indicateurs clés du succès de Zscaler. Nous sommes fiers de la reconnaissance dont bénéficie Zscaler, confirmée par les arguments suivants :  47 millions d’utilisateurs répartis sur environ 8 500 clients dans le monde~45 % des entreprises du classement Fortune 500, tous secteurs confondus, faisant confiance à Zscaler pour protéger leurs opérationsPrésence mondiale, avec environ 50 % de notre chiffre d’affaires en Amérique du Nord et 50 % à l’internationalScore NPS systématiquement supérieur à 75 par rapport à une moyenne de 30 pour les entreprises SaaSConclusionChez Zscaler, stimuler l’innovation pour donner aux entreprises les moyens d’agir grâce à une plateforme Zero Trust robuste basée sur le SSE constitue l’essence même de notre activité. Notre objectif est d’anticiper l’évolution des besoins en matière de sécurité, en améliorant Zero Trust Exchange avec des fonctionnalités avancées qui sécurisent les effectifs, les communications des workloads dans le cloud, l’accès IoT/OT et les connexions B2B. Grâce à notre engagement sans faille, nous veillons à ce que nos clients soient toujours prêts à relever les défis de demain.Pour recevoir un exemplaire gratuit du rapport Gartner Magic Quadrant 2025 pour le SSE et découvrir pourquoi Zscaler a été récompensé, cliquez ici.Nous organiserons un webinaire spécial consacré au marché du SSE en 2025. Cliquez ici pour vous inscrire.&nbsp;&nbsp;&nbsp;Avertissement de GartnerGartner, Magic Quadrant pour le Security Service Edge, Charlie Winckless, Thomas Lintemuth, Dale Koeppen, Charanpal Bhogal, 20 mai 2025Gartner ne recommande aucun fournisseur, produit ou service décrit dans ses publications de recherche, et ne conseille pas aux utilisateurs de technologie de sélectionner uniquement les fournisseurs ayant les cotes les plus élevées ou toute autre désignation. Les publications de recherche de Gartner se composent des opinions de l’organisation de recherche de Gartner et ne doivent pas être interprétées comme des déclarations de fait. Gartner décline toutes les garanties, exprimées ou implicites, à l’égard de cette recherche, y compris toute garantie de valeur marchande ou d’aptitude à un but particulier.Le contenu de Gartner Peer Insights consiste en des opinions d’utilisateurs individuels fondées sur leurs propres expériences avec les fournisseurs répertoriés sur la plateforme, et ne doit pas être interprété comme des déclarations de faits, et ne représente pas les opinions de Gartner ou de ses affiliés. Gartner ne cautionne aucun fournisseur, produit ou service décrit dans ce contenu et n’offre aucune garantie, expresse ou implicite, concernant l’exactitude ou l’exhaustivité de ce contenu, y compris toute garantie de qualité marchande ou d’adéquation à un usage particulier.GARTNER est une marque déposée et une marque de service de Gartner, Inc. et/ou de ses filiales aux États-Unis et dans le monde, MAGIC QUADRANT et PEER INSIGHTS sont des marques déposées de Gartner, Inc. et/ou de ses filiales et sont utilisées ici avec l’autorisation de leurs détenteurs. Tous droits réservés.]]></description>
            <dc:creator>Adam Geller (Chief Product Officer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[IDC MarketScape Recognizes Zscaler as a Leader in Data Loss Prevention (DLP)]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/idc-marketscape-recognizes-zscaler-leader-data-loss-prevention-dlp</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/idc-marketscape-recognizes-zscaler-leader-data-loss-prevention-dlp</guid>
            <pubDate>Tue, 29 Apr 2025 15:00:01 GMT</pubDate>
            <description><![CDATA[Data Loss Prevention (DLP) has undergone significant transformations over the years. Initially rooted in reactive measures to prevent data misuse, DLP has evolved to incorporate predictive and automated capabilities powered by AI and machine learning. This evolution enables enterprises to discover and classify sensitive data, identify abnormal patterns, maintain compliance with global regulations, and enhance overall security posture.As organizations adapt to the escalating risk of data breaches, the demand for robust data loss prevention (DLP) solutions has never been higher. IDC defines DLP as the set of technologies and processes designed to discover, monitor, and protect sensitive data from unauthorized access, misuse, or loss.&nbsp; IDC MarketScape for DLP Assessment&nbsp;IDC MarketScape: Worldwide Data Loss Prevention 2025 Vendor Assessment offers a comprehensive evaluation of nine companies in the DLP space. Its research includes vendor capabilities mapping, case studies, customer interviews, and evaluations of innovation at both strategic and tactical levels. By combining vendor performance insights with market trajectories, the excerpt serves as a benchmark for enterprises looking to enhance their data protection strategies with advanced DLP solutions. This rigorous research methodology provides a detailed analysis of vendor capabilities, offering invaluable insights into the competitive DLP landscape. Recently, the IDC MarketScape released its 2025 Worldwide Data Loss Prevention (DLP) Vendor Assessment, positioning&nbsp;Zscaler as a Leader.&nbsp;IDC MarketScape vendor analysis model is designed to provide an overview of the competitive fitness of technology and suppliers in a given market. The research methodology utilizes a rigorous scoring methodology based on both qualitative and quantitative criteria that results in a single graphical illustration of each supplier’s position within a given market. The Capabilities score measures supplier product, go-to-market and business execution in the short-term. The Strategy score measures alignment of supplier strategies with customer requirements in a 3-5-year timeframe. Supplier market share is represented by the size of the icons. Key takeaways from&nbsp;IDC MarketScape: Worldwide DLP 2025 Vendor AssessmentFor technology buyers, the IDC MarketScape assessment offers crucial takeaways. Enterprises are advised to prioritize vendors who concurrently support advanced data discovery, real-time threat prevention, and scalable integration across multi-cloud environments. Seamless deployment, integrations with existing IT ecosystem tools, and advanced reporting and analytics are must-have features for future-proofing data protection strategies. In addition to the excerpt, buyers are especially urged to align DLP investments with zero-trust security principles to ensure that solutions adapt readily to the shifting threat and data loss landscape.&nbsp; Why IDC MarketScape named Zscaler as a DLP LeaderThe IDC MarketScape for DLP 2025 Vendor Assessment named Zscaler as a Leader in the DLP market, citing the following strengths:&nbsp;“Zscaler has a sizeable customer base for its Zero Trust Network products. This gives Zscaler a solid foundation for expanding and growing its data security footprint while offering customers a consolidated experience.”“Customer feedback cited the speed and depth of Zscaler's customer service and support, as well as the interoperability with other products in the portfolio.”What we believe are Zscaler’s Highlights and StrengthsComprehensive Data Protection Platform:&nbsp;Zscaler’s standout strength lies in its&nbsp;Zscaler Data Protection offering and its leverage of the&nbsp;Zscaler Zero Trust Exchange™ architecture. This integrated platform delivers functionalities essential for any contemporary DLP solution: robust data discovery, classification, data security posture management, and proactive mapping of regulatory requirements. Zscaler's platform ensures complete data channel coverage, identifying sensitive data across various workloads, applications, and endpoints, while deploying real-time security capabilities to prevent unauthorized data exposure.Zero Trust Architecture:&nbsp;Zscaler’s Zero Trust Exchange aligns with one of the most effective security philosophies, enabling enterprises to eliminate implicit trust and secure interactions over all digital channels.Discovery and Classification:&nbsp; With powerful AI-driven classification complemented by traditional techniques like Regex, IDM, OCR, and EDM, the excerpt highlights the Zscaler platform’s comprehensive discovery capabilities. As a critical foundation for any data protection strategy, robust classification delivers deep visibility across all devices, applications, and locations, enabling organizations to safeguard sensitive data effectivelyIntegrated DSPM:&nbsp;Beyond simple data visibility, Zscaler’s platform extends into&nbsp;Data Security Posture Management (DSPM). This empowers organizations to uphold compliance, automate least-privilege access, and mitigate risks associated with misconfigurations or insider threats with prioritized risk remediation. Zscaler's DSPM capabilities are currently available as an add-on to its Zscaler AI Data Protection Platform.Email DLP:&nbsp;The newest addition to Zscaler's Platform, this data loss channel enables integrated control over email and attachments. Easily added to existing email infrastructure as an extra hop to M365 or Google services, Zscaler helps further consolidate DLP control across this key channel.Reporting:&nbsp;Zscaler offers comprehensive reporting features in its core product that include historical data, trends, patterns of activity, user behavior and executive summaries with customizable metrics and insights.&nbsp;Rapid innovation comes with unique challenges. Chief among these is the complexity involved in transitioning legacy systems to its advanced cloud-focused model. For some organizations, the gap between on-premise familiarity and sophisticated cloud-native tools may initially find the learning curve steep without adequate resources or organizational buy-in and require extensive change management efforts.&nbsp;Moreover, as DLP policies grow stricter, successful implementation requires strong collaboration between security, compliance, and end-user teams within client organizations.&nbsp; Building awareness at the grassroots level for stakeholders preconditioned to work with legacy solutions is another challenge. To this end, Zscaler offers robust onboarding services to help ease these transitions.&nbsp; Conclusion: Zscaler’s Vision for Future-Proof DLPWe believe that Zscaler continues redefining data protection in a world where sensitive information travels beyond traditional perimeters. Its Zero Trust Exchange, backed by policy-based automation and AI-powered insights, is setting a new standard for protecting enterprise data. As the data risk landscape evolves and regulatory scrutiny intensifies, organizations seeking a proactive approach to data security can trust Zscaler’s innovative solutions to stay ahead.For enterprises navigating the complexities of DLP, we believe Zscaler’s position as a Leader in the IDC MarketScape is more than recognition; it’s a call to action for investing in a future-proof strategy. With the right guidance and technology, businesses can maintain compliance while fostering innovation in a cloud-first, AI-driven world.&nbsp;To learn more, download an excerpt of&nbsp;the IDC MarketScape: Worldwide DLP 2025 Vendor Assessment.&nbsp;Source: “IDC MarketScape: Worldwide DLP 2025 Vendor Assessment” By: Jennifer Glenn, IDC doc #US53234325, March 2025]]></description>
            <dc:creator>Mahesh Nawale (Product Marketing Manager)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Start Spreading the News: Zscaler Rocks Exposure Management]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/start-spreading-news-zscaler-rocks-exposure-management</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/start-spreading-news-zscaler-rocks-exposure-management</guid>
            <pubDate>Mon, 28 Apr 2025 20:14:32 GMT</pubDate>
            <description><![CDATA[It’s not just our customers who love our Exposure Management offerings – now Cyber Defense Magazine has chimed in to recognize the excellence of our solutions with not one but two Global InfoSec Awards!We took the top prize in two categories:Visionary Continuous Threat Exposure Management (CTEM)Cutting Edge Exposure ManagementThe CDM Global InfoSec Awards honor information security innovators who provide unique and compelling products and services. What perfect timing, to earn this recognition just as we kick off the RSA Conference this week! Come see these award-winning solutions in action, at Booth N-5361. Our best-in-class Exposure Management solutionsPowered by our Data Fabric for Security, our solutions provides our customers with a complete and contextual understanding of their risk posture.Our Asset Exposure Management solution for CAASM:Creates a complete and accurate asset inventory by integrating data across hundreds of sources and normalizing the asset metadata for increased accuracy.Identifies coverage gaps to pinpoint missing controls, misconfigurations, and ensure compliance.Automates workflows to adjust access policies and update CMDBs to maintain asset hygiene.Our Unified Vulnerability Management solution:Consolidates data ingested from multiple vulnerability scanners, plus dozens of other security and business tools providing other findings and business context.Correlates the aggregated information to identify a company’s most critical exposures, taking into account their mitigating controls.Prioritizes vulnerabilities based on business impact and exposure severity and identifies key mitigation requirements for high-risk areas.&nbsp;Our Risk360 solution:Assesses risk across Zscaler systems and third-party data sources, surfacing configuration change recommendations within Zscaler offerings to reduce customer risk.Quantifies the financial loss estimates associated with industry standard and custom risk factors.&nbsp;&nbsp; Come see us at RSAAll these solutions, along with Zscaler’s full Zero Trust Exchange solution and Data Protection offerings, will be featured at our RSA Booth, and we’ll have live presentations nearly every hour. We’d love to see you there!If you’re not lucky enough to be at RSA this year, don’t fret – you can always schedule a personalized demo.]]></description>
            <dc:creator>Michelle McLean (Sr. Director, Product Marketing)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Zscaler UK User Group provides Insight, Collaboration and Networking opportunities]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/zscaler-uk-user-group-provides-insight-collaboration-and-networking-opportunities</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/zscaler-uk-user-group-provides-insight-collaboration-and-networking-opportunities</guid>
            <pubDate>Thu, 17 Apr 2025 16:53:57 GMT</pubDate>
            <description><![CDATA[Our recent Zscaler User Group Event at Hijingo in London was once more a testament to the power of collaboration, bringing together over 55 customers for a day of networking, information sharing, and open discussions on how to navigate the evolving landscape of Zero Trust security. As a customer-only event, a user group meeting is designed to foster meaningful dialogue, with an agenda that encourages peer learning, exchange of experiences, and exploring best practices together. In addition to the customer-led sessions that focussed on individual organizations' Zero Trust transformation journeys, and a session from our Customer Success team on 'Zero Trust Beyond Remote Work,' these events truly thrived on the personal exchanges between participants.Key take aways from real-world Zero Trust experiencesThe day’s standout moments are usually the fireside chats amongst customers. These conversations offer candid, real-world insights into both the challenges and successes of implementing Zero Trust across organizations. Interestingly, the key takeaway this year wasn’t technical at all. Customers consistently emphasised that aligning stakeholders, securing executive buy-in, and shifting organizational mindsets are the true foundations of a successful Zero Trust journey. To drive this transformation, it is essential to clearly demonstrate the ROI of a Zero Trust approach by focussing on leadership priorities such as cost reduction and security simplification.As multi-cloud environments grow increasingly complex, organizations are finding it difficult to maintain visibility and control - unless they can unify their data streams through a centralized dashboard. Once they transition to a cloud-based Zero Trust platform, the next challenge often lies in managing Zero Trust across distributed, virtual teams. This shift highlights the need to upskill teams to effectively handle the new security paradigm. This opening session brought a key theme into focus: Zero Trust is as much about operational and cultural transformation as it is about technology.&nbsp;AI, Risk, and the Zero Trust Journey&nbsp;Inspiration provided the session on AI governance in a Zero Trust world. It served as a timely wake-up call for organizations to take a proactive stance on defining AI security policies before security gaps have a chance to emerge. As AI adoption accelerates, so do the challenges around governance, security, and risk management. The session explored how businesses must strike a careful balance between innovation and security, ensuring AI-driven progress boosts productivity without introducing unnecessary risk.&nbsp;As employees will always try to find a way to boost their productivity with the help of AI, organizations have to understand usage patterns of the tools. Only by identifying how employees interact with AI, will they be able to counterfeit the associated risks of the modern ways of working. The recently launched&nbsp;ThreatLabZ 2025 AI security report showed an explosion of AI/ML transactions in the Zscaler cloud with a 3,464.6% year-over-year increase, highlighting the massive growth of enterprise AI adoption. However, AI can be a double edged sword that enables not only a productivity boost, accelerated decision-making, and automated workflows, but cybercriminals are using the same technology to automate and scale more sophisticated attacks. From hyper-realistic deepfakes to advanced vishing scams, AI-generated threats have quickly raised the stakes for enterprise security.According to the report, blocking is the immediate reaction to the emerging threat landscape. With 59% of AI/ML transactions prohibited by enterprises, this signals concerns over data security and the uncontrolled use of AI applications. However, blocking AI-related transactions is only a reaction and not a strategy. Organizations must work to establish AI governance frameworks to ensure AI use is controlled without stifling innovation or user productivity. A risk-based approach that centers around protecting critical assets must begin with a clear classification of the AI tools in use. This foundational step enables IT teams to define precise policies for sanctioned, tolerated, and unsanctioned AI applications. Building on this session, much of the discussion within the user group centered around governance strategies for effectively managing AI-related risks.&nbsp;Fireside Chat: From Strategy to SuccessParticipants also gained valuable insights from peers who shared real-world lessons on implementing Zero Trust in complex environments. The fireside chat highlighted the critical role of cross-functional collaboration in successfully adopting and scaling Zero Trust strategies. One customer shared how they streamlined their security architecture by consolidating firewalls and proxies through the Zscaler cloud – simplifying their toolset while maintaining robust protection. At the same time, they focused on strengthening business continuity by enhancing resilience and improving incident response as part of their disaster recovery planning – a topic that resonated strongly throughout the day’s discussions.&nbsp;While the customer conversations were front and center, Zscaler closed the event with a session on Zero Trust beyond Remote Work. It showcased how the Zscaler cloud platform continues to evolve, enabling organizations to extend Zero Trust principles to all networks and devices, regardless of location. Emphasis was placed on securing all traffic through the Zscaler platform using tools like Client Connector, App Connector, and Private Service Edge. Together, these components help build a resilient Zero Trust architecture that supports granular access controls based on user identity, device posture, and business context. The key message was clear: Zero Trust isn’t just for remote work – it must be embedded across the entire enterprise to effectively replace broad network access with precise, application specific segmentation.&nbsp;&nbsp;In conclusion, our customers’ experiences highlight that Zero Trust is not a one-time project, but an ongoing journey that hinges on stakeholder alignment and strong cross-functional collaboration. As organizations adopt AI, security teams must take a proactive stance, implementing governance frameworks while maintaining visibility and control across increasingly complex multi-cloud environments. Close partnership with product teams also plays a vital role in unlocking the full value of new capabilities. By actively listening to and building alongside our customers, we can guide them through every step of their Zscaler journey and help ensure lasting, successful transformations. Because in the end Zero Trust isn’t a destination - it’s a continuous journey.&nbsp;&nbsp;]]></description>
            <dc:creator>James Tucker (Head of CISO, International)</dc:creator>
        </item>
        <item>
            <title><![CDATA[How organisations can weather future storms by becoming ‘Resilient by Design‘]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/how-organisations-can-weather-future-storms-by-becoming-resilient-by-design</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/how-organisations-can-weather-future-storms-by-becoming-resilient-by-design</guid>
            <pubDate>Thu, 03 Apr 2025 08:33:11 GMT</pubDate>
            <description><![CDATA[In today's world of escalating cyber threats, organisations face unprecedented challenges trying to maintain IT and business operations without disruption. As the pressure to digitally transform continues, cyber resilience is fast emerging as the driving force behind survival and success. But with bad actors currently controlling the pace of change, organisations are having to find more and more ways to improve their security posture, which is why cyber resilience has gained popularity.As an approach, cyber resilience recognises the fact that an appropriate security posture is not just having the best defensive controls, but includes how to stay in business - no matter how significant the attack. The process is never complete, and instead must be constantly evolved to keep up with adversaries. That means that within their cyber security strategies, organisations must respond to the challenge of not only putting controls in place to prevent incidents from occurring, but also having the mechanisms set-up to be able to respond to and recover when they inevitably do. We call this being ‘Resilient by Design.’This is where a mindset shift is needed. According to our recent research report&nbsp;‘Unlock the Resilience Factor: Why Resilient by Design is the Next Cyber Security Imperative’ 60% of IT leaders globally believe their organisation overly prioritizes prevention in its cyber security strategy, and more than half of the respondents (57%) say their leadership continues to define cyber security failure as initial access by a threat actor.&nbsp;This needs to change. Effective cyber resilience approaches that are ‘Resilient by Design,’ must go beyond the technical challenge of cyber prevention, and instead look at the situation far more holistically. They must answer the question: Do we have the ability across our business, infrastructure and people to prevent, withstand and recover from a successful attack?Preparing for the cyber stormThe analogy that comes to mind is that organisations should think of their cyber resilience as if they are preparing for a storm. If they only have an umbrella to hand, that will offer little protection against a hurricane. That is why humans rely so heavily on the weather forecast to warn us of coming storms – so we can take action to not only protect ourselves by seeking shelter, but also deploy additional security and recovery measures in advance. Continuing the analogy, there is more to overcoming the effects of a hurricane than just taking shelter. You also need to be able to prevent and withstand as much damage or impact as possible. Are building construction codes set up in such a way to endure the gale-force winds?&nbsp; Are there clean up plans after the storm clears - and are they prioritised to ensure essential services keep running?Of course, taking effective recovery measures means that you have to declare what those essential services are going to be beforehand. You might, for example, need ambulances to be able to go down roads to tend to the injured – meaning those roads have to be cleared first, and those ambulances are ready to go with medical staff available to equip them. Similar “cyber preparedness” steps have to be taken into consideration to become ‘Resilient by Design.’How to become ‘Resilient by Design’?Organisations need to ensure that they can respond quickly to cyber incidents. At Zscaler we are already helping our customers to shift to an architecture that can weather the cyber storm – not only putting appropriate security controls in place, but also replacing aging architectures that were built on what was effectively a house of cards.&nbsp;Per my introduction, we are also tackling the challenge from a more holistic point of view, looking beyond technology aspects and considering the full breadth of an organisation to deliver the capabilities for a robust response and recovery strategy. Forecasting cyber incidents, based on AI delivered insights should become part of the strategy as well. Additionally, as part of this, ‘Resilient by Design’ must encompass business capability requirements as well. The change to a zero trust based architecture, for example, not only solves the security challenges of digitized organisations, it also supports business agility and delivers a competitive advantage at the same time.&nbsp;With business capability an increasing part of the protection equation, security has already become a board level topic – and so too must resilience. Organisations need a business vision and an investment plan to switch gears to become truly cyber resilient. To continue to innovate with confidence, they also need to know they are as protected as possible, and able to recover from any incident without major interruption to business operations.&nbsp;The changing role of security&nbsp;Security’s role as a business enabler is a new paradigm that has become a reality in the past few years of transformation. In recognition of this, the CISO must also transform their role to reflect the more modern function of a BISO (Business Information Security Officer) and ensure that today’s security processes take business operations into account as well. As the security function matures, a ‘Resilient by Design’ approach is yet further evidence of the increasingly central role it is taking on.&nbsp;Looking ahead, organisations must leave the old school thinking of isolated security controls behind to achieve holistic resilience across their operations. In doing so, they will be able to weather whatever cyber security storms come their way. In today's volatile world, being ‘Resilient by Design’ isn't just a nice to have. It's your ticket to get a competitive advantage and unlock The Resilience Factor.This blog summarizes the first episode of The Resilience Factor podcast series. You can listen to the full conversation of the podcast&nbsp;here.]]></description>
            <dc:creator>Marc Lueck (CISO Northern Europe, Zscaler)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Lessons from Gartner on Infusing Resilience Into Your Security and Risk Program]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/lessons-from-gartner-on-infusing-resilience-into-your-security-and-risk-program</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/lessons-from-gartner-on-infusing-resilience-into-your-security-and-risk-program</guid>
            <pubDate>Tue, 25 Feb 2025 18:43:25 GMT</pubDate>
            <description><![CDATA[2025 demands a new approach to cybersecurity resilience. As network complexity collides with ever-more volatile threat and operating landscapes, traditional security measures have become untenable.While a security framework with perfectly synchronised people, processes, and partners might sound aspirational, it's no longer something you can choose to reach for—it's essential for business survival.&nbsp;Yet too often, proactive, sustained cyber resilience takes a back seat to reactive responses when cyber-attacks and operational failure scenarios strike.A timely research report from Gartner,&nbsp;Succeed as an SRM Leader by Infusing Resilience Into Your Program 1), offers a practical blueprint for organisations caught in these reactive cycles. It reveals how to build cyber resilience into your operations and create an adaptable system that can tackle constant interruptions, remove complexity, and stay prepared for threats both big and small.At Zscaler, we believe cyber resilience will define business success in 2025. And that a new approach is desperately needed. This isn't about better controls or technology alone – it's about making those controls and technologies work more effectively while supporting the teams that use them. Our mission this year is to help our customers unlock&nbsp;The Resilience Factor—something we define as the unique ability of a business (or indeed individual employee) to&nbsp;withstand adversity,&nbsp;adapt operations, and move forward with confidence, ready to thrive in the face of any challenge.Ready to strengthen your organisation's cyber resilience strategy?&nbsp;Download the Gartner report now to discover practical steps for building a more resilient security programme. And stay tuned—this is just the beginning of our exploration into The Resilience Factor.1) Gartner, Succeed as an SRM Leader by Infusing Resilience Into Your Program, Authors: Michael Aldridge, Belinda Wilson, Arthur Sivanathan, 18th June 2024]]></description>
            <dc:creator>Brian Marvin (SVP, Sales)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Legacy Architecture is Preventing a Modern Digitised NHS]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/legacy-architecture-is-preventing-a-modern-digitised-nhs</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/legacy-architecture-is-preventing-a-modern-digitised-nhs</guid>
            <pubDate>Tue, 25 Feb 2025 12:53:45 GMT</pubDate>
            <description><![CDATA[May 12th, 2017 is a day burned into the memories of IT and security teams nationwide. For those lucky enough to not be impacted, it was the first large-scale ransomware attack - titled WannaCry - which encrypted the data on Windows devices that hadn’t updated to a recent Microsoft patch. That data was held for ransom by bad actors who exploited the unpatched software, which had a major impact on more than a third of NHS Trusts and subsequently thousands of patients across the country.Now you might be thinking it’s 2025 – how is WannaCry still relevant eight years later? Well, although the Windows patching has improved beyond what it was in 2017, the fundamental flaws that were culpable in 2017 are still seen today. Traditional connectivity practices are still being used in hospitals and continue to leave our health system open to vulnerabilities due to implicitly trusted network access. Third parties and other organizations continue to connect to internal networks via VPNs or firewalls that have consistently proved to be plagued with basic vulnerabilities and zero-day threat software gaps.&nbsp;All of this subpar infrastructure time from already over stretched IT teams within the public sector and more specifically, our health system. We can’t keep trying to mitigate the flaws in legacy architecture by patching up the holes – there has to be a better way!Four steps to robbing a bankBefore we can identify the solution, we need to identify the root of the problem by understanding how a breach can happen. To put it into non-technical terms, an IT security breach is much like robbing a bank.&nbsp;The first step is to identify all the possible bank branches to hit. Perhaps there are 50 or 500 bank branches out there, so the next step is to narrow this down to a branch that can be broken in without getting caught. Perhaps it is in a secluded area, or the surveillance cameras are not working. The third step, once you're in, is to move laterally - find a cash safe, and make your escape. Four simple steps.&nbsp;This is the same four-step approach to conducting a cyber attack. First, they find your attack surface. What's your attack surface in the cyber world? Well, it's every public IP which may be firewall, a VPN, or application portal. And today, AI is helping bad guys to identify the attack surface very, very quickly. Secondly, they want to compromise you. They do this by essentially finding a vulnerable user or vulnerable applications. And today, you can actually generate phishing campaigns using AI or Machine Learning, or you can even create a webpage to really bring them in. So, either users fall for it through social engineering, or they exploit a vulnerable application. Once infected, the malware moves laterally through the wider network. It finds high-value assets, then encrypts it and asks for ransom. Number four, they don't stop there, they steal your data. And stolen data is often sent to the Internet.Build a zero trust strategyNow you understand the principle of a cyber breach, you need to learn how to mitigate these four steps. This is where a zero trust architecture is the ideal counter-measure. Zero trust isn’t about plugging the gap by creating a new form of firewall or VPN. Its key focus is to make sure the bad guys can be stopped at each of the four steps. For instance, Zscaler’s platform is far more effective than traditional firewall-based architecture. Generally, when new technologies like cloud come, IT vendors try to take existing technologies of networking security and try to adapt it to the cloud. Zscaler Zero Trust is fundamentally different. It never put users or third parties on the network and it only uses inside-out connections, always verify identity, policy and risk before allowing access.&nbsp;Meet us at NHS Cyber Security ConferenceReliance on outdated legacy systems is increasingly untenable in today’s digital age. To avoid another WannaCry incident, NHS Trusts must update their security architecture to a Zero Trust approach to prevent lateral movement and decrease the attack surface of traditional technology stacks. To learn more about how NHS networks are being continuously exposed to threats, please join us on&nbsp;5th of March 2025 at 12:55 for Zscaler’s session on “Why Legacy Architecture is No Longer Fit for Purpose in a Modern Digital NHS”. Using lessons from real world examples of ransomware attacks, we will highlight the limits of patching, and why VPNs and their daily CVEs continue to expose NHS networks to threats. Additionally, we’ll examine the dangers of lateral movement between interconnected NHS trusts and why this sharing of data might increase vulnerability. Attendees will leave with actionable insights on modernizing IT infrastructure to reduce these risks and better secure the future of digital healthcare using zero trust principles.&nbsp;We look forward to seeing you there.&nbsp;]]></description>
            <dc:creator>Mike Culshaw (Sales Engineer)</dc:creator>
        </item>
        <item>
            <title><![CDATA[Mobile World Congress: The Demand for Uniformity in Zero Trust]]></title>
            <link>https://www.zscaler.com/fr/blogs/company-news/mobile-world-congress-the-demand-for-uniformity-in-zero-trust</link>
            <guid>https://www.zscaler.com/fr/blogs/company-news/mobile-world-congress-the-demand-for-uniformity-in-zero-trust</guid>
            <pubDate>Tue, 18 Feb 2025 12:43:22 GMT</pubDate>
            <description><![CDATA[My key take away from last year’s Mobile World Congress was that&nbsp;now almost everything is SIM-enabled, the industry focus moving forward will be on how telcos can make use of connectivity being delivered everywhere. Related to this, the open question coming away from the conference was how mobile connectivity can be orchestrated in one environment with effective controls?&nbsp;I have long seen security as the great unifier in this regard - as every user, device, and service demands uniform security on any network. This year I will return to Barcelona to deliver on that vision with an orchestration approach based on the uniformity of Zero Trust delivered via the Zscaler security cloud.For uniformity, the challenge has always been to extend an enterprise’s control, visibility and protection to all its assets, wherever they may be. To do so requires going beyond where physical infrastructure is located, where we have a forwarding router on the edge, or where clients are. To date, our Zero Trust based security cloud has been covering client side software and the edge of a network, and forwarding the edge of the cloud to all things in the IoT or OT-space.&nbsp;But we have not yet addressed the last unexplored territory of cellular connectivity with Zero Trust - meaning that this has still been a blind spot contributing to unsecured data streams from mobile services or things. And I deliberately say “things” here to signify that this goes beyond the scope of devices. The last mile for true uniformity of Zero Trust services has been unrealized – until now. With the extension of our Zscaler Cellular portfolio, we just added the last piece of the puzzle to deliver unified Zero Trust everywhere, at any time, and on anything in the various form factors that we need to deliver.Closing the security gap of mobile thingsZscaler Cellular brings secure Zero Trust-based connectivity into a cellular format; it is designed to enable the secure connectivity of IoT and OT devices or things that move outside the boundaries of a traditional network infrastructure.&nbsp;Typically, the traffic of such mobile devices outside the traditional enterprise perimeter would fall outside the control of IT security teams. Now, by providing organizations with an innovative way to send such traffic of these mobile devices or things through the Zscaler Zero Trust Exchange security platform, Zscaler Cellular helps the devices to achieve secure bi-directional connectivity from enterprises or their customers, and therefore close any potential security gaps.Zscaler Cellular can be deployed with existing cellular providers or through an end-to-end service from Zscaler. To deliver this Zero Trust functionality, Zscaler has built the Zscaler Cellular Edge, which can be deployed via three different routes:1. As a bolt-on for existing telco services&nbsp;2. Through a direct service from Zscaler&nbsp;3. By moving the cellular edge into private cellular environments. Customers that are looking into replacing their Wi-Fi ecosystem with a high speed, low latency solution based on 5G can use this path to gain secure gateway functionality to enable those devices and services to be protected.Zscaler Cellular makes routable or public IPs obsoleteTraditionally, SIMs would connect via a private APN to the customer’s network, which would require an IP address that makes it fully routable. Once the mobile traffic is inside the private network it is secured via the firewall. Such a set-up repeats the old story of tromboning and backhauling data (i.e. per traditional MPLS traffic flows) which a modern Zero Trust approach already made obsolete. The problem with continuing to use these routable networks is that their security models add latency, vulnerabilities, cost and backhauling to the data center, and also make devices visible to attackers.To simplify such a complex set-up, Zscaler Cellular has a direct relationship with any mobile network - turning the cell edges into the gateway to access private or Internet workloads without having to backhaul data. Similar to the early days when the Zscaler service removed backhauling by providing secure direct access to the Internet for users accessing their applications in the cloud, the cloud platform now also considerably simplifies the infrastructure for mobile connectivity and makes SIMs invisible to the outside world. Rather than the heavy lift of previous network configurations, one unified Zero Trust policy secures all cellular data streams via the Zero Trust Exchange platform. As well as simplifying the set-up, this enables Zscaler to give secure connectivity, protection and visibility via one unified approach that serves a multitude of customer use cases.Simplified security for the mobile world at MWCThe benefit of a unified Zero Trust approach is the universal applicability for various use cases of basically everything that is mobile. Whether it is handheld devices, vehicles, machinery, or other use cases in the logistics or mobility space the concept of simplified combined connectivity and security resonates broadly across a variety of industries.&nbsp;If you want to experience the power of the Zscaler Cell Edge and private cellular networks at Mobile World Congress, visit Zscaler at our Deloitte and NTT partner stands or drop by our booth on the executive meeting room level. We are looking forward to showcase how Zscaler Cellular extends the reach of Zero Trust to shape the future of secure connectivity.]]></description>
            <dc:creator>Nathan Howe (SVP of Innovation)</dc:creator>
        </item>
    </channel>
</rss>