[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:dns-web-filtering":3},{"control":4,"products":25,"stories":80,"lessons":124,"related":149,"compare":165},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.","Blocking of malicious and unwanted domains at the DNS layer, and inspection of web traffic for threats and data uploads, on and off the company network.","Phishing links, drive-by downloads and malware command servers all depend on domains. Blocking them is cheap, quick to roll out and stops many attacks at the first step, including on laptops outside the office.",[11,12,13,14],"How quickly are new malicious domains added to the block lists?","Does it protect devices when they are off the company network?","What logs do we get for investigations, and where is that data stored?","Can users report a wrongly blocked site easily?","Risk: users reach phishing and malware sites, and infected devices contact attackers. Control: DNS filtering on all devices, on and off the network. Owner: IT operations lead. Measure: share of devices covered.",[17,18,19,20],"NIS2 Art. 21(2)(g): basic cyber hygiene","DORA Art. 9: protection and prevention","CIS Control 9: email and web browser protections","ISO\u002FIEC 27001:2022 A.8.23: web filtering",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:17.69627+00:00",[26,34,42,48,56,64,72],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","umbrella","Cisco Umbrella","https:\u002F\u002Fumbrella.cisco.com\u002F","DNS-layer security and secure web gateway delivered from the cloud.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":43,"product_name":44,"url":46,"description":47},"dnsfilter","DNSFilter","\u002Fvendor-logos\u002Fdnsfilter.png","https:\u002F\u002Fwww.dnsfilter.com\u002F","DNS filtering for offices and roaming devices.",{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-swg","Netskope Secure Web Gateway","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fnext-gen-swg","Cloud secure web gateway with inspection of web and cloud app traffic.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"quad9","Quad9","\u002Fvendor-logos\u002Fquad9.png","quad9-dns","Quad9 DNS","https:\u002F\u002Fwww.quad9.net\u002F","Free, privacy-focused DNS resolver that blocks malicious domains using threat intelligence feeds.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-internet-access","Zscaler Internet Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-internet-access","Cloud secure web gateway with DNS security, inspection and data protection.",{"total":81,"last_days":82,"recent":83},379,96,[84,89,94,99,104,109,114,119],{"slug":85,"title":86,"published_at":87,"brief":88},"doj-gootloader-used-in-at-least-44-ransomware-attacks-costing-29-million-since-2-762fea","DOJ: Gootloader used in at least 44 ransomware attacks costing $29 million since 2018","2026-11-13T15:59:00+00:00","DOJ details Gootloader's role in 44 ransomware attacks causing $29M in losses.",{"slug":90,"title":91,"published_at":92,"brief":93},"new-typoprompting-attacks-turn-mistyped-ai-website-addresses-into-malware-instal-28e90d","New TypoPrompting Attacks Turn Mistyped AI Website Addresses Into Malware Installation Traps","2026-11-13T15:24:38+00:00","TypoPrompting attacks exploit mistyped AI website addresses to deliver malware and hijackers.",{"slug":95,"title":96,"published_at":97,"brief":98},"fake-gta-6-download-goes-after-steam-logins-and-crypto-wallet-data-8eb8c9","Fake GTA 6 download goes after Steam logins and crypto wallet data","2026-11-13T15:00:59+00:00","Fake GTA 6 download link on Google Colab leads to WARDEN Stealer malware.",{"slug":100,"title":101,"published_at":102,"brief":103},"gootloader-malware-disrupted-after-infecting-25-000-computers-93f9e8","Gootloader Malware Disrupted After Infecting 25,000 Computers","2026-11-13T14:35:44+00:00","Gootloader malware operation disrupted, 100+ servers seized, 25,000 computers affected.",{"slug":105,"title":106,"published_at":107,"brief":108},"european-authorities-take-down-steaic-malware-servers-for-second-time-this-year-8d3ba0","European authorities take down SteaIC malware servers for second time this year","2026-11-12T16:21:00+00:00","European authorities dismantle over 100 servers used by StealC malware for the second time this year.",{"slug":110,"title":111,"published_at":112,"brief":113},"186-fake-ai-domains-redirect-users-to-clickfix-lures-browser-malware-and-search-9d9670","186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers","2026-11-12T15:15:40+00:00","186 fake AI domains redirect users to malware, search hijackers, and click-lures.",{"slug":115,"title":116,"published_at":117,"brief":118},"the-global-socket-how-threat-actors-are-weaponizing-gsocket-for-stealthy-c2-f3f53e","The global socket: how threat actors are weaponizing GSocket for stealthy C2","2026-11-11T19:49:57+00:00","Threat actors are using GSocket on Linux servers to maintain access after vulnerabilities are patched.",{"slug":120,"title":121,"published_at":122,"brief":123},"the-xg-files-falcon-c2-flying-under-the-browser-radar-9ad4b0","The XG Files: Falcon C2 Flying Under The (Browser) Radar","2026-11-11T15:00:23+00:00","Falcon C2 framework targets governments with malicious browser scripts and extensions.",[125,129,133,137,141,145],{"slug":126,"title":127,"published_at":128},"gootloader-malware-enabled-44-ransomware-attacks-via-seo-poisoning-and-weak-endpoint-defenses","Gootloader Malware Enabled 44 Ransomware Attacks via SEO Poisoning and Weak Endpoint Defenses","2026-11-13T17:21:02.612+00:00",{"slug":130,"title":131,"published_at":132},"gootloader-takedown-exposes-risks-of-compromised-websites-and-access-as-a-service-malware","Gootloader Takedown Exposes Risks of Compromised Websites and Access-as-a-Service Malware","2026-11-13T16:22:57.628+00:00",{"slug":134,"title":135,"published_at":136},"fake-gta-6-download-delivers-credential-stealing-malware","Fake GTA 6 Download Delivers Credential-Stealing Malware","2026-11-13T16:22:38.997+00:00",{"slug":138,"title":139,"published_at":140},"typosquatting-ai-domains-deliver-malware-via-fake-verification-pages","Typosquatting AI Domains Deliver Malware via Fake Verification Pages","2026-11-13T16:20:24.722+00:00",{"slug":142,"title":143,"published_at":144},"186-fake-ai-domains-lure-users-into-installing-browser-malware","186 Fake AI Domains Lure Users Into Installing Browser Malware","2026-11-12T17:23:03.655+00:00",{"slug":146,"title":147,"published_at":148},"stealc-takedown-exposes-millions-of-stolen-credentials-from-everyday-users","StealC Takedown Exposes Millions of Stolen Credentials From Everyday Users","2026-11-12T17:21:32.836+00:00",[150,153,157,161],{"slug":23,"name":151,"problem":152},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":154,"name":155,"problem":156},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":158,"name":159,"problem":160},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":162,"name":163,"problem":164},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"palo-alto-networks\u002Fprisma-access":166,"zscaler\u002Fzscaler-internet-access":187,"cloudflare\u002Fcloudflare-gateway":204,"quad9\u002Fquad9-dns":218,"dnsfilter\u002Fdnsfilter":222,"cisco\u002Fumbrella":229,"netskope\u002Fnetskope-swg":246},{"hq_country":167,"also_provides":168,"reviews":172,"affected":185,"reported":186},"US",[169],{"slug":170,"name":171},"zero-trust-access","Zero trust network access (ZTNA)",[173,176,179,182],{"label":174,"url":175},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":177,"url":178},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":180,"url":181},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":183,"url":184},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",22,43,{"hq_country":167,"also_provides":188,"reviews":189,"affected":202,"reported":203},[],[190,193,196,199],{"label":191,"url":192},"CyberRatings 2025 Q2 SSE Report: Zscaler","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q2-sse-report-zscaler\u002F",{"label":194,"url":195},"TechRadar: Zscaler Private Access review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fzscaler-private-access",{"label":197,"url":198},"Gartner Peer Insights: Zscaler Zero Trust Exchange user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzscaler-zero-trust-exchange",{"label":200,"url":201},"PeerSpot: Zscaler Internet Access user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fzscaler-internet-access-reviews",0,4,{"hq_country":167,"also_provides":205,"reviews":206,"affected":216,"reported":217},[],[207,210,213],{"label":208,"url":209},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":211,"url":212},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"label":214,"url":215},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",6,16,{"hq_country":219,"also_provides":220,"reviews":221,"affected":202,"reported":202},"CH",[],[],{"hq_country":167,"also_provides":223,"reviews":224,"affected":202,"reported":228},[],[225],{"label":226,"url":227},"Gartner Peer Insights: DNSFilter user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdnsfilter",1,{"hq_country":167,"also_provides":230,"reviews":231,"affected":244,"reported":245},[],[232,235,238,241],{"label":233,"url":234},"CyberRatings 2025 Q3 SSE Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cisco\u002F",{"label":236,"url":237},"Gartner Peer Insights: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcisco-secure-firewall",{"label":239,"url":240},"PeerSpot: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcisco-secure-firewall-reviews",{"label":242,"url":243},"CyberRatings 2025 Q4 Enterprise Firewall Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-cisco\u002F",65,41,{"hq_country":167,"also_provides":247,"reviews":248,"affected":202,"reported":255},[],[249,252],{"label":250,"url":251},"PeerSpot: Netskope user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fnetskope-reviews",{"label":253,"url":254},"Gartner Peer Insights: Netskope One SSE user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fnetskope-one-sse",3]