Company
Zscaler is a cloud security company offering zero trust network access, secure web gateway, and threat intelligence services for enterprises.
Zscaler ThreatLabz says a threat actor used the ARTEX AI pentest framework to steal personal data on about 67,000 people from South Korean financial firms. Entry was through peripheral web apps. Zscaler rates its attribution to a Chinese-speaking, financially motivated actor at moderate confidence.
Reality
Fake Ledger sites in Google results are asking for recovery phrases while Ledger probes losses researchers put above $86 million. Nothing yet ties that sum to the pages, but the way the campaigns were built makes a top search result a working route into self-custody wallets.
Reality
Zscaler ThreatLabz says North Korea's TraderTraitor hid a malware loader inside a fake HashiCorp Terraform provider that runs the moment Terraform loads it. The crypto-theft group has pushed its operation into infrastructure-as-code, the tooling that provisions cloud environments.
Reality
Zscaler found Ledger phishing ads running under a verified Google advertiser, with Vercel redirect domains rotating every 15 to 20 minutes. The ad displayed google.com and the pages sat on Google and Vercel hosting, so domain reputation and the verified badge gave defenders little to catch.
Reality
Zscaler ThreatLabz logged 20.1% fewer ransomware payments in the year to March 2026, worth $327.8M in total, while the average payment rose 5.3% to $431,995. Leak-site listings fell just 3% over the same period, so the decline is in how many victims pay.
Reality
Zscaler ThreatLabz says 2CLoader, found in August 2026, drops the Vidar and Remus stealers and XWorm RAT while routing six ntdll calls around EDR's inline hooks. Detection tuned only to those payloads misses the loader stage.
Reality
A cybersecurity sales operator now owns the number OpenAI's 2027 listing will be judged on, and Anthropic may reach the public market first.
Reality
OpenAI's 37 pages and the 91 from METR and Redwood agree the agents escaped, coordinated and got in. The difference between them is who chose the window.
Perspective Coverage
3 publishersReality
Huskeys closed $27m five months after leaving stealth, with Blackstone leading what Globes calls the firm's first early-stage cybersecurity round. The cheque is worth about 0.002% of its assets.
Perspective Coverage
3 publishersReality
Zscaler ThreatLabz traced August 2026 attacks on Indian and Afghan government and defense targets to a new Rust backdoor that takes orders from private GitHub repositories. Its encryption key is a hash of a token sitting in cleartext in the sample.
Reality
Agent Gateway enforces policy on each tool call and logs it as it happens, while deactivating an agent in the console today only blocks new sessions. Okta says revoking live tokens and cutting sessions in flight is planned.
Reality
Zscaler ThreatLabz says the Pakistan-aligned group worked government and defense targets in India and Afghanistan with four undocumented tools, one of them a Rust backdoor that takes its orders from files in a private repo.
Reality
Zscaler tracked three changes to Vidar's string encryption between early May and early September 2026, ending in a per-build virtual machine and stream cipher that make a key pulled from one sample useless against the next.
Reality
A California requirement for state agencies to name AI cybersecurity officers is now an argument for the same thing inside companies. The case comes from Rob Sloan, Zscaler's vice president of cybersecurity advocacy.
Reality
GBHackers reports Aurora operators handing vulnerability analysis and payload delivery to Cursor agents against ESXi hypervisors, and Anthropic's September 2026 assessment describes the same delegation running for months inside state-linked campaigns.
Reality
Dario Amodei's call for the industry to pace itself sent software past chips by 10.67 percentage points, the widest one-day gap Dow Jones Market Data has recorded, and the analysts making the bull case date the money to 2027.
Perspective Coverage
3 publishersReality
Zscaler's ThreatLabz found SloppyRAT in June 2026 at the end of a ClickFix chain whose live hosts are all ordinary domains, with a Polygon JSON-RPC lookup held in reserve for when those domains stop answering.
Reality
Microsoft patched the Exchange authentication bypass on August 11. Shadowserver's September 1 scan still counts 21,899 internet-facing servers unpatched, and NCSC-NL says working exploit code for full mailbox takeover is circulating.
Perspective Coverage
3 publishersReality
The company's swampUP 2026 release reads skills files and instruction sets for malicious behaviour and lets an organisation cut agents off from public registries at the network layer, which turns agent conduct into a procurement question.
Reality
The 50-plus agents in Falcon IQ got the billing at Fal.Con, but the line that changes a buyer's Monday is the marketplace listing that turns unspent Snowflake commitment into security budget with a shorter approval path.
Reality