ThreatLabz analyzes CVE-2026-88771 exploitation attempts targeting NetScaler, including log poisoning, web shell deployment, and payload delivery.
Artificial Intelligence technologies have made a huge impact on the security industry. But as with any public technology, adversaries have access to AI as well. They’re wasting no time incorporating ...
Introduction Zscaler ThreatLabz analyzed a recently active exploitation campaign in which a threat actor abused ARTEX to target South Korean financial institutions. ARTEX is an open source agentic ...
Threat Attribution Public reporting indicates that this campaign targets cryptocurrency and Web3 developers through trojanized developer tools that deliver cross-platform malware—tactics consistent ...
Ransomware data theft jumped 275% in 2026. ThreatLabz research shows government, healthcare, education, and utilities faced some of the largest data theft claims.
The clock is already running. Here's what compliance with EO 14412 actually demands and where agencies can't afford to miss a step. If you work in security or networking for a U.S. federal agency or a ...
Introduction In August 2026, Zscaler ThreatLabz observed new activity by the Pakistan-nexus threat actor APT36 in a campaign we’re tracking as Operation RapidRust. Since our last publication about the ...
Key Takeaways In June 2026, ThreatLabz identified SloppyRAT, a new malware family likely used in ransomware attacks to establish a foothold for lateral movement. SloppyRAT uses several techniques to ...
Zscaler (NASDAQ: ZS) accelerates digital transformation so customers can be more agile, efficient, resilient, and secure. The Zscaler Zero Trust Exchange™️ platform protects thousands of customers ...
Microsoft's August 2026 Patch Tuesday included a fix for CVE-2026-62911, a high-severity authentication bypass vulnerability affecting Exchange Server 2016, 2019, and Subscription Edition. The ...
ClearFake takes the top spot in this month’s top 10 most prevalent threat list, remaining in 1st for the third month in a row. It’s an activity cluster that uses JavaScript injected into compromised ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results