[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:zero-trust-access":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.","Users reach specific applications through a broker that checks identity and device health for every connection, instead of joining the whole network through a VPN.","VPN and remote access appliances are among the most exploited systems in the news, often hit within days of a flaw being published. ZTNA takes them off the internet and limits each user to the applications they need, so one stolen login no longer opens the whole network.",[11,12,13,14],"Can it fully replace our VPN, including for admins and third parties?","What happens to access if your cloud service has an outage?","Does it check device health, not only user identity?","How is the connector inside our network kept patched and monitored?","Risk: exploitation of internet-facing VPN appliances, or broad network access from one stolen login. Control: ZTNA with per-application access, VPN retired. Owner: network lead. Measure: internet-exposed remote access appliances remaining.",[17,18,19,20],"NIS2 Art. 21(2)(i): access control policies","DORA Art. 9: network and infrastructure management","CIS Controls 12 and 13: network infrastructure and monitoring","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:48:05.124642+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"total":59,"last_days":60,"recent":61},66,33,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"new-n-able-n-central-zero-day-exploits-target-patched-servers-claiming-unauthent-9455c1","New N-able N-central Zero-Day Exploits Target Patched Servers, Claiming Unauthenticated Root Access","2026-11-12T16:53:00+00:00","New N-able N-central zero-day exploits target patched servers, granting unauthenticated root access.",{"slug":68,"title":69,"published_at":70,"brief":71},"plex2shell-exploited-against-qnap-nas-users-cd9d06","Plex2Shell Exploited Against QNAP NAS Users","2026-11-09T13:13:28+00:00","Threat actors exploit Plex2Shell vulnerabilities to hack QNAP NAS devices.",{"slug":73,"title":74,"published_at":75,"brief":76},"harden-cooling-systems-now-feds-warn-critical-infrastructure-operators-amid-atta-2daf0a","Harden cooling systems now, feds warn critical infrastructure operators amid attacks","2026-11-05T19:15:00+00:00","US feds warn critical infrastructure operators to harden cooling systems amid European supermarket hacks.",{"slug":78,"title":79,"published_at":80,"brief":81},"us-government-partners-urge-hardening-industrial-refrigeration-and-cold-chain-mo-cddef5","US Government Partners Urge Hardening Industrial Refrigeration and Cold Chain Monitoring Systems","2026-11-05T12:00:00+00:00","US agencies warn of cyber threats to industrial refrigeration and cold chain systems.",{"slug":83,"title":84,"published_at":85,"brief":86},"anspdcp-romania-auchan-romania-s-a-41da85","ANSPDCP (Romania) - Auchan Romania S.A","2026-11-03T17:21:59+00:00","Auchan Romania fined €8,000 for data breach due to inadequate security measures.",{"slug":88,"title":89,"published_at":90,"brief":91},"cisa-s-new-strategy-runs-into-america-s-blind-trust-problem-3fda35","CISA’s new strategy runs into America’s blind trust problem","2026-11-03T11:00:00+00:00","CISA's new strategy faces challenges with persistent credentials and forgotten software approvals in operational",{"slug":93,"title":94,"published_at":95,"brief":96},"hackers-hijack-swedish-supermarket-fridges-and-raise-freezer-temperatures-to-55-2fb663","Hackers Hijack Swedish Supermarket Fridges and Raise Freezer Temperatures to 55°C","2026-11-02T10:25:14+00:00","Hackers exploit refrigeration systems in Swedish supermarkets, causing food spoilage.",{"slug":98,"title":99,"published_at":100,"brief":101},"ivanti-patches-two-more-connect-secure-zero-days-chained-in-attacks-5ff3e4","Ivanti patches two more Connect Secure zero-days chained in attacks","2026-11-02T09:33:26+00:00","Ivanti patches two zero-day vulnerabilities in Connect Secure exploited since October.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"zero-day-bypasses-n-central-patch-exposing-root-access-on-managed-servers","Zero-Day Bypasses N-central Patch, Exposing Root Access on Managed Servers","2026-11-12T17:20:56.853+00:00",{"slug":108,"title":109,"published_at":110},"plex2shell-chained-vulnerabilities-exploited-on-qnap-nas-devices","Plex2Shell: Chained Vulnerabilities Exploited on QNAP NAS Devices","2026-11-09T14:22:28.375+00:00",{"slug":112,"title":113,"published_at":114},"unpatched-internet-exposed-cooling-controllers-targeted-in-critical-infrastructure-attacks","Unpatched, Internet-Exposed Cooling Controllers Targeted in Critical Infrastructure Attacks","2026-11-05T20:20:51.009+00:00",{"slug":116,"title":117,"published_at":118},"auchan-romania-fined-8000-after-cyberattack-exposes-personal-data-due-to-weak-security-controls","Auchan Romania Fined €8,000 After Cyberattack Exposes Personal Data Due to Weak Security Controls","2026-11-03T18:20:38.449+00:00",{"slug":120,"title":121,"published_at":122},"blind-trust-in-old-credentials-and-approved-software-leaves-ot-systems-exposed","Blind Trust in Old Credentials and Approved Software Leaves OT Systems Exposed","2026-11-03T12:21:25.468+00:00",{"slug":124,"title":125,"published_at":126},"ivanti-zero-days-chained-in-active-attacks-before-patch-availability","Ivanti Zero-Days Chained in Active Attacks Before Patch Availability","2026-11-02T10:20:31.779+00:00",[128,132,136,140,144],{"slug":129,"name":130,"problem":131},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":133,"name":134,"problem":135},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":137,"name":138,"problem":139},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":141,"name":142,"problem":143},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":145,"name":146,"problem":147},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"palo-alto-networks\u002Fprisma-access":149,"zscaler\u002Fzscaler-private-access":170,"cloudflare\u002Fcloudflare-access":187,"netskope\u002Fnetskope-private-access":201},{"hq_country":150,"also_provides":151,"reviews":155,"affected":168,"reported":169},"US",[152],{"slug":153,"name":154},"dns-web-filtering","DNS filtering and secure web gateway",[156,159,162,165],{"label":157,"url":158},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":160,"url":161},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":163,"url":164},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":166,"url":167},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",22,43,{"hq_country":150,"also_provides":171,"reviews":172,"affected":185,"reported":186},[],[173,176,179,182],{"label":174,"url":175},"CyberRatings 2025 Q2 SSE Report: Zscaler","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q2-sse-report-zscaler\u002F",{"label":177,"url":178},"TechRadar: Zscaler Private Access review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fzscaler-private-access",{"label":180,"url":181},"PeerSpot: Zscaler Internet Access user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fzscaler-internet-access-reviews",{"label":183,"url":184},"Gartner Peer Insights: Zscaler Zero Trust Exchange user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzscaler-zero-trust-exchange",0,4,{"hq_country":150,"also_provides":188,"reviews":189,"affected":199,"reported":200},[],[190,193,196],{"label":191,"url":192},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":194,"url":195},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"label":197,"url":198},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",6,16,{"hq_country":150,"also_provides":202,"reviews":203,"affected":185,"reported":210},[],[204,207],{"label":205,"url":206},"PeerSpot: Netskope user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fnetskope-reviews",{"label":208,"url":209},"Gartner Peer Insights: Netskope One SSE user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fnetskope-one-sse",3]