https://www.zerofox.com RSS for Node Sat, 13 Jun 2026 10:34:54 GMT Sat, 13 Jun 2026 10:34:54 GMT TL;DR on Malicious Insiders What Are Malicious Insider Threats? Intentional, or malicious, insider threats represent a significant attack vector in which likely disgruntled employees compromise organizations by misusing access to sensitive networks and data or abusing advantageous positioning to enact harm against their employer. Unlike accidental insider threats, intentional insider threat actors take deliberate and […]

]]> https://www.zerofox.com/blog/malicious-insider-threats-how-trusted-employees-turn-into-attackers https://www.zerofox.com/blog/malicious-insider-threats-how-trusted-employees-turn-into-attackers Thu, 11 Jun 2026 10:31:03 GMT Most SOC shifts start the same way: a queue full of artifacts that might be malicious and not enough time to investigate every one deeply. A flagged attachment, a URL from a newly registered domain. Each one needs a verdict. Most are clean, but the one that isn’t could be the beginning of a breach, […]

]]> https://www.zerofox.com/blog/malware-sandboxing-detonate-files https://www.zerofox.com/blog/malware-sandboxing-detonate-files Wed, 10 Jun 2026 09:03:41 GMT Every parent knows the answer “fine” covers a lot of ground. It can mean things genuinely are fine. It can also mean a failed exam, a friendship falling apart, or a situation the child has already decided you don’t need to know about. The word is technically an answer, but it’s not information. A good […]

]]> https://www.zerofox.com/blog/trust-but-verif-ai https://www.zerofox.com/blog/trust-but-verif-ai Mon, 08 Jun 2026 11:31:18 GMT Tickets for the 2026 FIFA World Cup are being sold on Telegram and credentials tied to fifa.com accounts are circulating on dark web marketplaces. A threat actor is even advertising server access allegedly linked to New York FIFA infrastructure. And the tournament hasn’t even started yet. The 2026 FIFA World Cup will be the biggest […]

]]> https://www.zerofox.com/blog/security-threats-at-the-2026-fifa-world-cup-what-intelligence-reveals-before-kickoff https://www.zerofox.com/blog/security-threats-at-the-2026-fifa-world-cup-what-intelligence-reveals-before-kickoff Fri, 05 Jun 2026 11:19:16 GMT Ransomware is all the buzz, but it isn’t the only malware attack. Take a closer look at malware to better understand the risks and how they work together.

]]> https://www.zerofox.com/blog/malware-attacks-more-than-just-ransomware https://www.zerofox.com/blog/malware-attacks-more-than-just-ransomware Wed, 03 Jun 2026 10:08:05 GMT Every suspicious artifact that hits a SOC analyst’s queue forces the same decision: do I need to understand this before I act, or do I already know enough to act now? Get it wrong in one direction and you waste time analyzing something you should have blocked ten minutes ago. Get it wrong in the […]

]]> https://www.zerofox.com/blog/detonate-malware-safely https://www.zerofox.com/blog/detonate-malware-safely Wed, 27 May 2026 09:00:00 GMT A customer drops a frustrated comment under a post: “Can someone help me with my booking?” Within minutes, a “support” account replies with a friendly tone, a sense of urgency, and a link that definitely doesn’t belong there. It looks and sounds like customer service, but it’s not. In reality, it’s a scammer acting at […]

]]> https://www.zerofox.com/blog/airline-shut-down-social-impersonators-and-phishing-comments https://www.zerofox.com/blog/airline-shut-down-social-impersonators-and-phishing-comments Wed, 20 May 2026 11:16:38 GMT For years, the security industry drew a fairly clear line around what “sensitive data” meant. Personal information, financial records, health data: the structured, regulated categories that compliance frameworks were built to protect. Encrypt it, tokenize it, and restrict access to it. The threat model was straightforward: if you protect the database, you protect the business. […]

]]> https://www.zerofox.com/blog/ai-powered-adversaries https://www.zerofox.com/blog/ai-powered-adversaries Wed, 13 May 2026 10:10:04 GMT Netcraft has been in the internet security game since 1995, and they’ve earned a credible reputation for fast phishing detection and domain phishing takedowns. If your primary concern is malicious domains, they bring speed, automation, and deep relationships with internet infrastructure providers. But modern brand abuse doesn’t stop at phishing sites. Threat actors now impersonate […]

]]> https://www.zerofox.com/blog/zerofox-vs-netcraft-enterprise-brand-protection https://www.zerofox.com/blog/zerofox-vs-netcraft-enterprise-brand-protection Mon, 11 May 2026 08:56:33 GMT I’ve spent enough time in investigation queues to know what a bad workflow feels like. You get an alert. Something looks wrong. You already know it’s probably malicious, but “probably” doesn’t close a ticket or justify a takedown. You need confirmation. So you leave the platform, find the right tool, upload the file, wait, get […]

]]> https://www.zerofox.com/blog/malware-sandboxing-closes-gap-in-external-threat-intelligence https://www.zerofox.com/blog/malware-sandboxing-closes-gap-in-external-threat-intelligence Thu, 07 May 2026 10:44:04 GMT The cyber threat intelligence market is evolving from pieced together systems to unified platforms. What used to be a landscape of necessary but siloed tools, one for digital risk protection, another for threat feeds, another for takedowns, is converging into a single discipline where discovery, validation, and disruption all need to work together. We think […]

]]> https://www.zerofox.com/blog/gartner-magic-quadrant-leader https://www.zerofox.com/blog/gartner-magic-quadrant-leader Tue, 05 May 2026 09:21:38 GMT ZeroFox PSI Regional Forecasts give security teams a monthly forward look at the threats most likely to affect their operations. Delivered directly in the ZeroFox platform, before incidents happen. The Problem With Reactive Security Most physical security programs run in the same loop: an incident happens, the team mobilizes, and an after-action report gets filed. […]

]]> https://www.zerofox.com/blog/psi-regional-forecasts-because-your-security-team-shouldnt-be-the-last-to-know https://www.zerofox.com/blog/psi-regional-forecasts-because-your-security-team-shouldnt-be-the-last-to-know Tue, 21 Apr 2026 09:50:54 GMT When frontier AI scanning capability lands inside organizations with competitive incentives and Anthropic’s oversight telemetry remains unspecified, the threat model gets a lot wider than jailbreakers and dark web exploit sellers. Anthropic’s announcement of Claude Mythos Preview landed the way most frontier AI milestones do: as a security story dressed in a safety narrative. The […]

]]> https://www.zerofox.com/blog/the-claude-mythos-problem https://www.zerofox.com/blog/the-claude-mythos-problem Mon, 20 Apr 2026 11:27:45 GMT Your security team just got another report. Hundreds of exposed assets with dozens of flagged vulnerabilities. A dashboard full of findings, color-coded by severity, timestamped, and ready for review. None of them have been fixed yet. This is the reality for most SOC teams operating with an attack surface management tool today. Somewhere between “we […]

]]> https://www.zerofox.com/blog/seeing-risk-isnt-stopping-risk-what-to-consider-when-choosing-an-asm-solution https://www.zerofox.com/blog/seeing-risk-isnt-stopping-risk-what-to-consider-when-choosing-an-asm-solution Wed, 08 Apr 2026 10:48:54 GMT Let’s get the uncomfortable truth out of the way first: proving the value of threat intelligence is hard. Not because the value isn’t real, but because the best outcomes in security are the things that didn’t happen. There’s value in the avoided incidents. Takedowns that stopped a phishing campaign before it touched a single customer. […]

]]> https://www.zerofox.com/blog/quantify-the-business-value-of-zerofox-forrester-tei https://www.zerofox.com/blog/quantify-the-business-value-of-zerofox-forrester-tei Wed, 01 Apr 2026 12:27:09 GMT NIST’s updated guidance on secure DNS deployment has direct implications for how organizations protect their external digital presence. This is what you need to act on. The Domain Name System has long been treated as plumbing, like invisible infrastructure that just works. That perception is increasingly dangerous.  In March 2026, the National Institute of Standards […]

]]> https://www.zerofox.com/blog/new-nist-secure-dns-deployment-guidance https://www.zerofox.com/blog/new-nist-secure-dns-deployment-guidance Thu, 26 Mar 2026 09:30:35 GMT