Zscaler Cloud Security Logo
Unternehmen > Blog

Neuheiten und Empfehlungen von Zscaler rund um die sichere digitale Transformation

Einblicke und Forschung
A business handshake
Einblicke und Forschung
3 Lesedauer: Min

How to Enforce Least-Privileged Cloud Permissions and Stay Friends with Your DevOps Team

Modern organizations are keen on agility. This leads to fast adoption of public cloud, DevOps best practices like infrastructure as code, and a significant increase in the number of software releases and deployments. With the speed at which cloud applications are deployed, security teams often find it difficult to keep pace with DevOps teams. In...
Four people in a business meeting
Einblicke und Forschung
11 Lesedauer: Min

Do You Understand Your SLAs? A Guide to Demystifying Cloud Security SLAs

Why SLAs? Service level agreements (SLAs)—in the context of this blog—are a cloud security vendor’s expression of confidence in its ability to deliver a resilient, scalable, and high-performing service. SLAs became more common as SaaS solutions expanded in popularity, providing organizations assurances about their service levels, such as perfo...
Return of Emotet malware
Einblicke und Forschung
1 Lesedauer: Min

Return of Emotet malware

Key Points Emotet is one of the most dangerous, prolific, and long-lasting malware Trojans that has ever existed. In January 2021, a law enforcement action disrupted the Emotet malware and its infrastructure. It also led to the arrest of some of the threat actors involved with the malware. After almost a year-long hiatus, Emotet has retur...
A digital lock
Einblicke und Forschung
3 Lesedauer: Min

[email protected] Report: Remote Work Challenges Putting Data at Risk

From intellectual property to customer details, sensitive information is the lifeblood of any organization. Where data breaches occur, revenue, brand reputation, and stakeholder wellbeing suffer. As a result, enterprise data protection is a critical requirement for organizations to succeed. Naturally, this gives rise to a question: How well are org...
A hand approaching a digital lock
Einblicke und Forschung
8 Lesedauer: Min

Overcoming Sensitive Data Protection Challenges in AWS S3 Storage

AWS S3 buckets are the destination for much of the data moving to the cloud. This service, and similar services in other cloud providers such as Azure Storage Blobs, enable organizations of any size or industry to store large troves of data for websites, mobile applications, and whatever else the business requires. Many recent news articles hig...
Karte, auf der die Ausfälle dargestellt sind
Einblicke und Forschung
4 Lesedauer: Min

Montagsblues mit Comcast: Wie ein Unternehmen während eines ISP-Ausfalls produktiv bleiben konnte

„Benutze deinen Smartphone-Hotspot, wenn du Comcast hast“, hieß es in der Slack-Nachricht. Es war 21:45 Uhr am Montag, den 8. November. Zunächst sah es nach einem kindischen Scherz aus, aber die Nachricht stammte aus einer vertrauenswürdigen Quelle: Sie kam von unserem IT-Team. Wir befanden uns in einem wichtigen Zoom-Meeting, in dem wir in letzte...
Deception Engineering
Einblicke und Forschung
7 Lesedauer: Min

Deception Engineering

Introduction One skill that the Zscaler Deception team has become really good at is analyzing adversary tactics, techniques, and toolsets and hypothesizing how we could disrupt the adversary playbook with deception. What we want to talk about today is a concept we like to internally call “Deception Engineering”. It’s a wordplay on Detect...
Cyber honeycomb containing locks.
Einblicke und Forschung
5 Lesedauer: Min

Spike in DanaBot Malware Activity

Key Points Two large software supply chain attacks distributed the DanaBot malware. DanaBot is a malware-as-a-service platform discovered in 2018 that focuses on credential theft and banking fraud. DanaBot’s popularity has waned in recent years, but these campaigns may signal a return of the malware and its affiliates to the threat landsc...
Server cords
Einblicke und Forschung
2 Lesedauer: Min

Cloud Connector and Cryptojacking

Cryptocurrency has been in the news quite a bit lately, and Bitcoin is currently the most popular cryptocurrency. Proponents of Bitcoin cite the distributed nature of the currency as one of its main advantages with no single entity exerting control over Bitcoin. To accomplish this, Bitcoin relies on a process called mining. Mining involves solving ...
Phishing
Einblicke und Forschung
5 Lesedauer: Min

How a Phishing Campaign Targeting Indian Banking Users is Distributing an SMS Stealer

Scammers are always coming up with new, more sophisticated social engineering techniques to collect user credentials for financial benefit. However, when it comes to banking websites, capturing login credentials via a phishing campaign often isn’t enough for cybercriminals. Due to the implementation of two-factor authentication by most banking s...

Weitere Themen entdecken