[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:dns-web-filtering":3},{"control":4,"products":25,"stories":80,"lessons":123,"related":148,"compare":164},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"dns-web-filtering","DNS filtering and secure web gateway","Users cannot reach known-malicious sites, and malware cannot phone home.","Blocking of malicious and unwanted domains at the DNS layer, and inspection of web traffic for threats and data uploads, on and off the company network.","Phishing links, drive-by downloads and malware command servers all depend on domains. Blocking them is cheap, quick to roll out and stops many attacks at the first step, including on laptops outside the office.",[11,12,13,14],"How quickly are new malicious domains added to the block lists?","Does it protect devices when they are off the company network?","What logs do we get for investigations, and where is that data stored?","Can users report a wrongly blocked site easily?","Risk: users reach phishing and malware sites, and infected devices contact attackers. Control: DNS filtering on all devices, on and off the network. Owner: IT operations lead. Measure: share of devices covered.",[17,18,19,20],"NIS2 Art. 21(2)(g): basic cyber hygiene","DORA Art. 9: protection and prevention","CIS Control 9: email and web browser protections","ISO\u002FIEC 27001:2022 A.8.23: web filtering",{"name":22,"slug":23},"Network Segmentation","network-segmentation","2026-10-16T12:48:17.69627+00:00",[26,34,42,48,56,64,72],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","umbrella","Cisco Umbrella","https:\u002F\u002Fumbrella.cisco.com\u002F","DNS-layer security and secure web gateway delivered from the cloud.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-gateway","Cloudflare Gateway","https:\u002F\u002Fwww.cloudflare.com\u002Fproducts\u002Fgateway\u002F","DNS filtering and secure web gateway.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":43,"product_name":44,"url":46,"description":47},"dnsfilter","DNSFilter","\u002Fvendor-logos\u002Fdnsfilter.png","https:\u002F\u002Fwww.dnsfilter.com\u002F","DNS filtering for offices and roaming devices.",{"vendor_slug":49,"vendor_name":50,"vendor_logo":51,"product_slug":52,"product_name":53,"url":54,"description":55},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-swg","Netskope Secure Web Gateway","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fnext-gen-swg","Cloud secure web gateway with inspection of web and cloud app traffic.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"quad9","Quad9","\u002Fvendor-logos\u002Fquad9.png","quad9-dns","Quad9 DNS","https:\u002F\u002Fwww.quad9.net\u002F","Free, privacy-focused DNS resolver that blocks malicious domains using threat intelligence feeds.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-internet-access","Zscaler Internet Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-internet-access","Cloud secure web gateway with DNS security, inspection and data protection.",{"total":81,"last_days":82,"recent":83},334,82,[84,89,94,99,104,108,113,118],{"slug":85,"title":86,"published_at":87,"brief":88},"israeli-ad-firm-doubled-as-candiru-s-zero-click-spyware-delivery-channel-dc7947","Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel","2026-10-17T11:00:00+00:00","Israeli ad firm Discover-Tech used for Candiru spyware zero-click attacks against Al Jazeera.",{"slug":90,"title":91,"published_at":92,"brief":93},"targeted-ads-used-to-infect-al-jazeera-devices-with-candiru-spyware-fdc6a3","Targeted Ads Used to Infect Al Jazeera Devices with Candiru Spyware","2026-10-15T20:29:48+00:00","Candiru spyware delivered via zero-click targeted ads to Al Jazeera devices.",{"slug":95,"title":96,"published_at":97,"brief":98},"help-tds-linked-to-hotejka-as-20-000-cloudflare-pages-domains-host-tech-support--3d53c1","Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams","2026-10-15T14:11:36+00:00","Help TDS linked to Hotejka, hosting tech support scams on 20,000+ Cloudflare Pages domains.",{"slug":100,"title":101,"published_at":102,"brief":103},"nightmare-scenario-zero-click-spyware-is-infecting-phones-via-targeted-ads-621735","‘Nightmare Scenario’: Zero-Click Spyware Is Infecting Phones via Targeted Ads","2026-10-15T10:00:00+00:00","Mercenary spyware is being distributed via targeted ads, infecting phones with zero-click attacks.",{"slug":105,"title":106,"published_at":102,"brief":107},"adfection-how-mercenary-spyware-invades-victims-devices-through-targeted-adverti-2d33d1","AdFection: How mercenary spyware invades victims’ devices through targeted advertising","Mercenary spyware is being delivered via targeted ads, infecting devices without user interaction.",{"slug":109,"title":110,"published_at":111,"brief":112},"fake-watchguard-vpn-site-steals-credentials-then-serves-the-genuine-signed-clien-791bd1","Fake WatchGuard VPN site steals credentials, then serves the genuine signed client","2026-10-14T10:50:35+00:00","Fake WatchGuard VPN site steals credentials, then serves genuine client.",{"slug":114,"title":115,"published_at":116,"brief":117},"hackers-abuse-google-ads-bing-redirects-to-push-claude-clickfix-attacks-944cba","Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks","2026-10-09T20:31:37+00:00","Hackers use Google Ads and Bing redirects to deliver fake Claude installers with ClickFix attacks.",{"slug":119,"title":120,"published_at":121,"brief":122},"google-domains-impacted-by-recent-cctld-hijacks-9fbb49","Google Domains Impacted by Recent ccTLD Hijacks","2026-10-09T11:43:14+00:00","Hackers hijacked ccTLDs .gh, .sl, and .as, obtaining unauthorized HTTPS certificates for Google domains.",[124,128,132,136,140,144],{"slug":125,"title":126,"published_at":127},"ad-network-used-as-zero-click-spyware-delivery-channel-via-real-time-bidding","Ad Network Used as Zero-Click Spyware Delivery Channel via Real-Time Bidding","2026-10-17T12:20:32.316+00:00",{"slug":129,"title":130,"published_at":131},"zero-click-ad-spyware-bypasses-user-interaction-to-compromise-devices","Zero-Click Ad Spyware Bypasses User Interaction to Compromise Devices","2026-10-16T18:20:36.559+00:00",{"slug":133,"title":134,"published_at":135},"malicious-ad-networks-weaponized-to-silently-deploy-candiru-spyware","Malicious Ad Networks Weaponized to Silently Deploy Candiru Spyware","2026-10-15T22:20:22.695+00:00",{"slug":137,"title":138,"published_at":139},"zero-click-candiru-spyware-delivered-via-malicious-ads-hits-al-jazeera","Zero-Click Candiru Spyware Delivered via Malicious Ads Hits Al Jazeera","2026-10-15T18:20:37.304+00:00",{"slug":141,"title":142,"published_at":143},"help-tds-hotejka-exploit-20000-cloudflare-pages-domains-for-tech-support-scams","Help TDS & Hotejka Exploit 20,000+ Cloudflare Pages Domains for Tech Support Scams","2026-10-15T16:20:52.987+00:00",{"slug":145,"title":146,"published_at":147},"mercenary-spyware-hijacks-ad-networks-to-silently-infect-devices","Mercenary Spyware Hijacks Ad Networks to Silently Infect Devices","2026-10-15T12:21:42.608+00:00",[149,152,156,160],{"slug":23,"name":150,"problem":151},"Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",{"slug":153,"name":154,"problem":155},"firewall","Next-generation firewall and intrusion prevention","Malicious traffic is blocked at the network edge and between zones.",{"slug":157,"name":158,"problem":159},"waf-ddos","Web application firewall and DDoS protection","Websites and APIs stay up, and common web attacks are filtered before they reach them.",{"slug":161,"name":162,"problem":163},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",{"palo-alto-networks\u002Fprisma-access":165,"zscaler\u002Fzscaler-internet-access":186,"cloudflare\u002Fcloudflare-gateway":203,"quad9\u002Fquad9-dns":217,"dnsfilter\u002Fdnsfilter":221,"cisco\u002Fumbrella":227,"netskope\u002Fnetskope-swg":244},{"hq_country":166,"also_provides":167,"reviews":171,"affected":184,"reported":185},"US",[168],{"slug":169,"name":170},"zero-trust-access","Zero trust network access (ZTNA)",[172,175,178,181],{"label":173,"url":174},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":176,"url":177},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":179,"url":180},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",{"label":182,"url":183},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",9,32,{"hq_country":166,"also_provides":187,"reviews":188,"affected":201,"reported":202},[],[189,192,195,198],{"label":190,"url":191},"CyberRatings 2025 Q2 SSE Report: Zscaler","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q2-sse-report-zscaler\u002F",{"label":193,"url":194},"TechRadar: Zscaler Private Access review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fzscaler-private-access",{"label":196,"url":197},"Gartner Peer Insights: Zscaler Zero Trust Exchange user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzscaler-zero-trust-exchange",{"label":199,"url":200},"PeerSpot: Zscaler Internet Access user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fzscaler-internet-access-reviews",0,3,{"hq_country":166,"also_provides":204,"reviews":205,"affected":215,"reported":216},[],[206,209,212],{"label":207,"url":208},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":210,"url":211},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"label":213,"url":214},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",6,2,{"hq_country":218,"also_provides":219,"reviews":220,"affected":201,"reported":201},"CH",[],[],{"hq_country":166,"also_provides":222,"reviews":223,"affected":201,"reported":201},[],[224],{"label":225,"url":226},"Gartner Peer Insights: DNSFilter user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fdnsfilter",{"hq_country":166,"also_provides":228,"reviews":229,"affected":242,"reported":243},[],[230,233,236,239],{"label":231,"url":232},"CyberRatings 2025 Q3 SSE Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cisco\u002F",{"label":234,"url":235},"Gartner Peer Insights: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcisco-secure-firewall",{"label":237,"url":238},"PeerSpot: Cisco Secure Firewall user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcisco-secure-firewall-reviews",{"label":240,"url":241},"CyberRatings 2025 Q4 Enterprise Firewall Report: Cisco","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-cisco\u002F",50,31,{"hq_country":166,"also_provides":245,"reviews":246,"affected":201,"reported":253},[],[247,250],{"label":248,"url":249},"PeerSpot: Netskope user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fnetskope-reviews",{"label":251,"url":252},"Gartner Peer Insights: Netskope One SSE user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fnetskope-one-sse",4]