Zscaler

Volume 341, Issue 3 · 12 articles from 2 issues

In This Issue

• Project Glasswing and the Coming Inversion of Vulnerability Management
• Tracking Shai-Hulud: Inside the ChainDrop NPM Worm
• Introducing Zscaler Zero Trust Gateway for Google Cloud
• The Hidden Threat in Your Software Development Lifecycle: Why Self-Hosted Runners Need Zero Trust
• Zero Trust Connectivity for Private AI Apps/Models: Who Can Actually Reach Them?
• CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 Credentials
• Abyssos: Technical Analysis of a New Modular RAT
• C2Looper: A New Backdoor Likely Tied to Ransomware With GitHub C2
• The Fix Has Been Out for a Year. The Controller Is Still Exposed.
• Aligning ITAR Compliance to Zscaler's Zero Trust Exchanges
• Zero Trust Can't Stop at a Claim. You Need to Prove It.
• Securing the Unsecurable: OT, IoT, and the Factory Floor

Project Glasswing and the Coming Inversion of Vulnerability Management (Zscaler, Thursday, August 13th, 2026)

Zscaler argues Project Glasswing signals a shift where vulnerability discovery becomes abundant and remediation the constraint. Read more

Tracking Shai-Hulud: Inside the ChainDrop NPM Worm (Zscaler, Tuesday, August 11th, 2026)

Zscaler analyses ChainDrop, an npm worm anchoring its C2 in an Ethereum smart contract and forging SLSA provenance. Read more

Introducing Zscaler Zero Trust Gateway for Google Cloud (Zscaler, Wednesday, August 12th, 2026)

Zscaler launches a Zero Trust Gateway integrating with Google Cloud's Network Security Integration. Read more

The Hidden Threat in Your Software Development Lifecycle: Why Self-Hosted Runners Need Zero Trust (Zscaler, Tuesday, August 11th, 2026)

Zscaler argues self-hosted GitHub Actions runners create a privileged outbound risk that firewalls do not address. Read more

Zero Trust Connectivity for Private AI Apps/Models: Who Can Actually Reach Them? (Zscaler, Monday, August 10th, 2026)

Zscaler warns that VPN access to self-hosted AI models grants reachability to entire network segments. Read more

CaptiveCrunch: Midnight Blizzard Weaponizes Hotel Wi-Fi Captive Portals to Steal Microsoft 365 Credentials (Zscaler, Tuesday, August 11th, 2026)

Zscaler covers a Midnight Blizzard sub-cluster hijacking hotel captive portals for Microsoft 365 credential theft. Read more

Abyssos: Technical Analysis of a New Modular RAT (Zscaler, Monday, August 10th, 2026)

Zscaler ThreatLabz analyses Abyssos, a modular C++ RAT using LLVM-based obfuscation and a custom TCP protocol. Read more

C2Looper: A New Backdoor Likely Tied to Ransomware With GitHub C2 (Zscaler, Monday, August 17th, 2026)

Zscaler ThreatLabz details C2Looper, a Rust-based backdoor using GitHub for command and control and delivered via ClickFix. Read more

The Fix Has Been Out for a Year. The Controller Is Still Exposed. (Zscaler, Thursday, August 20th, 2026)

Zscaler finds thousands of refrigeration controllers still unpatched months after fixes shipped, because outages spoil product. Read more

Aligning ITAR Compliance to Zscaler's Zero Trust Exchanges (Zscaler, Wednesday, August 19th, 2026)

Zscaler maps ITAR compliance requirements across its Commercial, FedRAMP Moderate and FedRAMP High platform tiers. Read more

Zero Trust Can't Stop at a Claim. You Need to Prove It. (Zscaler, Thursday, August 20th, 2026)

Zscaler argues policies describing intent tell you nothing about behavior, using a bank executive's AI ban as the example. Read more

Securing the Unsecurable: OT, IoT, and the Factory Floor (Zscaler, Monday, August 17th, 2026)

Zscaler examines securing connected manufacturing where uptime and availability are the only metrics operators accept. Read more

More from Zscaler · All section posts · This week