[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:zero-trust-access":3},{"control":4,"products":25,"stories":58,"lessons":102,"related":127,"compare":148},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":24},"zero-trust-access","Zero trust network access (ZTNA)","Remote access no longer means exposing VPN appliances to the internet.","Users reach specific applications through a broker that checks identity and device health for every connection, instead of joining the whole network through a VPN.","VPN and remote access appliances are among the most exploited systems in the news, often hit within days of a flaw being published. ZTNA takes them off the internet and limits each user to the applications they need, so one stolen login no longer opens the whole network.",[11,12,13,14],"Can it fully replace our VPN, including for admins and third parties?","What happens to access if your cloud service has an outage?","Does it check device health, not only user identity?","How is the connector inside our network kept patched and monitored?","Risk: exploitation of internet-facing VPN appliances, or broad network access from one stolen login. Control: ZTNA with per-application access, VPN retired. Owner: network lead. Measure: internet-exposed remote access appliances remaining.",[17,18,19,20],"NIS2 Art. 21(2)(i): access control policies","DORA Art. 9: network and infrastructure management","CIS Controls 12 and 13: network infrastructure and monitoring","ISO\u002FIEC 27001:2022 A.8.20: networks security",{"name":22,"slug":23},"Access Control","access-control","2026-10-16T12:48:05.124642+00:00",[26,34,42,50],{"vendor_slug":27,"vendor_name":28,"vendor_logo":29,"product_slug":30,"product_name":31,"url":32,"description":33},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-access","Cloudflare Access","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Faccess\u002F","Zero trust access to internal applications without a VPN.",{"vendor_slug":35,"vendor_name":36,"vendor_logo":37,"product_slug":38,"product_name":39,"url":40,"description":41},"netskope","Netskope","\u002Fvendor-logos\u002Fnetskope.png","netskope-private-access","Netskope Private Access","https:\u002F\u002Fwww.netskope.com\u002Fproducts\u002Fprivate-access","Zero trust access to private applications.",{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","prisma-access","Prisma Access","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fsase\u002Faccess","Cloud-delivered SASE: zero trust access to private apps and secure web gateway.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"zscaler","Zscaler","\u002Fvendor-logos\u002Fzscaler.png","zscaler-private-access","Zscaler Private Access","https:\u002F\u002Fwww.zscaler.com\u002Fproducts-and-solutions\u002Fzscaler-private-access","Zero trust access to private applications, replacing VPN.",{"total":59,"last_days":60,"recent":61},54,36,[62,67,72,77,82,87,92,97],{"slug":63,"title":64,"published_at":65,"brief":66},"supermarket-refrigeration-attack-widens-to-copeland-dixell-controllers-9ada3d","Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers","2026-10-15T12:50:42+00:00","Cyberattack targets supermarket refrigeration controllers in France, impacting hundreds of stores.",{"slug":68,"title":69,"published_at":70,"brief":71},"thermo-fisher-torrent-suite-software-86b829","Thermo Fisher Torrent Suite Software","2026-10-15T12:00:00+00:00","Thermo Fisher Torrent Suite Software vulnerable to path traversal.",{"slug":73,"title":74,"published_at":75,"brief":76},"zero-trust-in-practice-moving-beyond-the-buzzword-acb149","Zero Trust in Practice: Moving Beyond the Buzzword","2026-10-14T10:31:09+00:00","Article clarifies Zero Trust principles and practical implementation, emphasizing identity as the foundational element.",{"slug":78,"title":79,"published_at":80,"brief":81},"ivanti-zero-day-chain-gave-attackers-root-access-to-fully-patched-vpn-a59a9a","Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN","2026-10-13T18:43:43+00:00","Ivanti VPN zero-day chain exploited for root access; credential theft and data exfiltration observed.",{"slug":83,"title":84,"published_at":85,"brief":86},"ivanti-warns-of-connect-secure-zero-day-exploited-in-attacks-0dfe31","Ivanti warns of Connect Secure zero-day exploited in attacks","2026-10-13T15:45:50+00:00","Ivanti warns of actively exploited zero-day in Connect Secure gateway.",{"slug":88,"title":89,"published_at":90,"brief":91},"ai-turns-familiar-cyberattacks-into-a-race-against-time-d423e8","AI Turns Familiar Cyberattacks Into a Race Against Time","2026-10-13T11:00:00+00:00","AI accelerates familiar cyberattacks, increasing the urgency for proactive defenses and zero trust strategies.",{"slug":93,"title":94,"published_at":95,"brief":96},"max-severity-sonicwall-sma1000-flaw-now-exploited-in-attacks-6dabc0","Max severity SonicWall SMA1000 flaw now exploited in attacks","2026-10-09T12:32:16+00:00","SonicWall SMA1000 vulnerability (CVE-2026-102255) is being exploited in attacks.",{"slug":98,"title":99,"published_at":100,"brief":101},"cisa-warns-of-critical-pre-auth-rce-flaw-in-mikrotik-routeros-37d3b9","CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS","2026-09-30T15:49:29+00:00","CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS, CVE-2026-84411.",[103,107,111,115,119,123],{"slug":104,"title":105,"published_at":106},"path-traversal-flaw-in-thermo-fisher-torrent-suite-exposes-sensitive-files","Path Traversal Flaw in Thermo Fisher Torrent Suite Exposes Sensitive Files","2026-10-15T18:21:22.798+00:00",{"slug":108,"title":109,"published_at":110},"end-of-life-ot-devices-enable-supermarket-refrigeration-cyberattack","End-of-Life OT Devices Enable Supermarket Refrigeration Cyberattack","2026-10-15T14:20:22.449+00:00",{"slug":112,"title":113,"published_at":114},"zero-trust-is-more-than-a-buzzword-identity-first-always","Zero Trust Is More Than a Buzzword — Identity First, Always","2026-10-14T18:22:29.051+00:00",{"slug":116,"title":117,"published_at":118},"ivanti-zero-day-grants-root-access-to-fully-patched-vpn-appliances","Ivanti Zero-Day Grants Root Access to Fully Patched VPN Appliances","2026-10-13T20:21:02.111+00:00",{"slug":120,"title":121,"published_at":122},"ivanti-connect-secure-zero-day-exploited-in-the-wild","Ivanti Connect Secure Zero-Day Exploited in the Wild","2026-10-13T16:20:32.077+00:00",{"slug":124,"title":125,"published_at":126},"ai-accelerated-attacks-outpace-traditional-defenses","AI-Accelerated Attacks Outpace Traditional Defenses","2026-10-13T12:21:32.737+00:00",[128,132,136,140,144],{"slug":129,"name":130,"problem":131},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",{"slug":133,"name":134,"problem":135},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",{"slug":137,"name":138,"problem":139},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",{"slug":141,"name":142,"problem":143},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":145,"name":146,"problem":147},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",{"palo-alto-networks\u002Fprisma-access":149,"zscaler\u002Fzscaler-private-access":170,"cloudflare\u002Fcloudflare-access":187,"netskope\u002Fnetskope-private-access":201},{"hq_country":150,"also_provides":151,"reviews":155,"affected":168,"reported":169},"US",[152],{"slug":153,"name":154},"dns-web-filtering","DNS filtering and secure web gateway",[156,159,162,165],{"label":157,"url":158},"AV-Comparatives EPR test 2026: Palo Alto Networks","https:\u002F\u002Fwww.av-comparatives.org\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FEPR_PaloAlto_2026.pdf",{"label":160,"url":161},"CyberRatings 2025 Q4 Enterprise Firewall Report: Palo Alto Networks follow-on","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q4-enterprise-firewall-report-palo-alto-networks-follow-on\u002F",{"label":163,"url":164},"PeerSpot: Palo Alto Networks NG Firewalls user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fpalo-alto-networks-ng-firewalls-reviews",{"label":166,"url":167},"Gartner Peer Insights: PA-Series user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fpa-series",9,32,{"hq_country":150,"also_provides":171,"reviews":172,"affected":185,"reported":186},[],[173,176,179,182],{"label":174,"url":175},"CyberRatings 2025 Q2 SSE Report: Zscaler","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q2-sse-report-zscaler\u002F",{"label":177,"url":178},"TechRadar: Zscaler Private Access review (2023)","https:\u002F\u002Fwww.techradar.com\u002Freviews\u002Fzscaler-private-access",{"label":180,"url":181},"PeerSpot: Zscaler Internet Access user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fzscaler-internet-access-reviews",{"label":183,"url":184},"Gartner Peer Insights: Zscaler Zero Trust Exchange user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fzscaler-zero-trust-exchange",0,3,{"hq_country":150,"also_provides":188,"reviews":189,"affected":199,"reported":200},[],[190,193,196],{"label":191,"url":192},"CyberRatings 2025 Q3 SSE Report: Cloudflare","https:\u002F\u002Fcyberratings.org\u002Fresources\u002F2025-q3-sse-report-cloudflare\u002F",{"label":194,"url":195},"PeerSpot: Cloudflare user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fcloudflare-reviews",{"label":197,"url":198},"Gartner Peer Insights: Cloudflare One user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fcloudflare-one",6,2,{"hq_country":150,"also_provides":202,"reviews":203,"affected":185,"reported":210},[],[204,207],{"label":205,"url":206},"PeerSpot: Netskope user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fnetskope-reviews",{"label":208,"url":209},"Gartner Peer Insights: Netskope One SSE user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fnetskope-one-sse",4]