As they add more API integrations, they’re also increasingly exposed to risks from shadow APIs. As they experiment with generative AI and large language models (LLMs), they must be more vigilant against data loss while also navigating complex privacy and compliance regulations.

Source

Understand the Adversary to Stop the Breach

To stop sophisticated attacks, you need to know what you’re up against. Turn adversary insight into informed threat defense.

This video series deconstructs high-impact threats discovered by Unit 42, breaking down each attack chain and how to disrupt it.

• What are the latest tactics, techniques and procedures that cybercrime groups are using that I should be aware of?
• Can I catch an exploit before it’s known to the public?
• How do I detect a silent persistent threat with no malicious activity?
• Can I stop a software supply chain attack hidden in a business tool?

Source

The average employee spends over 85% of their day working in a browser. But the lack of visibility and control over users’ actions within corporate applications is leaving sensitive data vulnerable to threats. That’s where secure browsers come in — with the unique ability to secure work on any device, managed or unmanaged. And as the market for modern browsers continues to expand, it’ll be absolutely crucial to stay informed in order to stay ahead of attackers.

The latest research from Gartner®, Innovation Insight: Secure Enterprise Browsers, in our view, highlights the use cases and benefits of deploying secure enterprise browsers, including:

• Strengthening current endpoint and network security measures.
• Enhancing application performance and reducing latency.
• Streamlining security policy management.
• Delivering secure, segmented access to web and SaaS applications.
• Enabling lightweight endpoint posture checks.
• Expanding DLP capabilities to managed and unmanaged devices.

Explore this complimentary report to learn more about secure browsers and talk with us to see how Prisma® Browser is helping organizations like yours navigate today’s challenges as safely as possible.

Gartner, Innovation Insight: Secure Enterprise Browsers, 1 April 2025, Evgeny Mirolyubov, Max Taggett, Dave Messett

GARTNER is a registered trademark and service mark of Gartner, Inc. and/or its affiliates in the U.S. and internationally and is used herein with permission. All rights reserved.

Gartner does not endorse any vendor, product or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner’s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose

Source

Download this research to assess the state of your cyber-risk program:

• Why 70% of organizations use security assessments but only 18% use integrated risk scenarios to quantitatively measure risk in the context of business impact.
• The critical disconnect in asset discovery, where 83% conduct inventories but 47% still rely on manual methods, hindering real-time visibility.
• Which prioritization methods influence long-term investment (like Potential Business Impact at 47%) versus day-to-day mitigation (where Vulnerability Severity still leads at 55%).
• Why security leaders need to shift from reactive incident response to a proactive Risk Operations Center (ROC) approach to predict and reduce the likelihood of high-impact events.

Source

Your VPN is Helping Attackers Move as Fast as AI

The Zscaler ThreatLabz 2026 VPN Risk Report reveals a dangerous disconnect: while attackers use AI to move at machine speed, legacy VPNs are leaving defenders blind and exposed. When you can’t see what’s happening, response time collapses and the odds of containment drop with it.

The reality of VPN risk in 2026:

• #1 Fear is Attacker Speed: 79% of survey respondents say AI lets attackers exploit vulnerabilities faster than patches can be deployed.
• They Can’t See AI-Driven Attack Signals: 70% of survey respondents admit to limited or no visibility into AI threats moving over their VPN.
• Attackers are Outpacing Patch Cycles: 61% of organizations believe adversaries move faster than their patching process.
• VPNs are Acting like Blind “Encrypted Pipes”: 1 in 3 organizations inspect 0% of encrypted VPN traffic.
• Slow Access Leads to Workarounds: 63% of users bypass VPN controls to reach apps faster, creating unmanaged risk.

Together, these gaps create the exact conditions attackers rely on: time, access, and limited detection.

Read the full report to benchmark your organization and learn how Zscaler Private Access (ZPA) delivers user-to-app, least-privileged access designed to reduce exposure and limit blast radius.

Source

F5 is honored to receive a Platinum Overall Ranking from Enterprise Management Associates (EMA), as profiled in their recent PRISM Report for API Security.

EMA reviewed API security offerings from 22 vendors and awarded F5 Distributed Cloud API Security its highest distinction for product and functionality excellence.

The report states, “F5 Distributed Cloud API Security stands out as a mature product with a comprehensive set of features,” and adds that it “excels in its integrations and operability, allowing organizations to easily incorporate it into existing technology stacks without disruption.”

Source

AI is adding to this complexity, amplifying both the risks and opportunities in application security. AI assisted coding is reshaping how applications are built, deployed, and maintained. In parallel, the capabilities of platforms themselves are evolving with AI: features from autofix workflows, to false positive analysis, to scanning itself, are all radically changing product expectations.

This report is designed to help practitioners and buyers navigate the current application security landscape. It covers the transitions in application security over time, from waterfall development to DevOps to emerging AI code generation workflows. The report then breaks down every subcategory of scanner, the development of modern features, as well as how AI capabilities are changing functionalities we use today. We conclude with actionable buyer guidance that spans across SMB, mid-market, and enterprise environments.

Source

In 2025, enterprises generated nearly one trillion AI/ML transactions across the Zscaler cloud—expanding the enterprise attack surface and making scalable AI security a practical necessity.

AI saw 91% rise in adoption in 2025. Is your enterprise ready for 2026?

Zscaler ThreatLabz unpacks how enterprises are navigating the rapid expansion of AI and the security tradeoffs that come with it, drawing on telemetry from the world’s largest security cloud.

In this report, you’ll learn the latest about:

• How and where enterprises are adopting AI, from top LLM platforms and application store the teams and regions driving usage
• Where AI introduces risk and threats, from inherent vulnerabilities to AI-enabled attacks
• What to expect in 2026, with predictions on AI’s trajectory and related security implications
• How to secure AI in practice, with proven approaches for enabling GenAI adoption at enterprise scale

Source

Download the testing report to see these key results:

• Top performer in security efficacy: Akamai outperformed Cloudflare by 40% and AWS by 109%.
• 100% OWASP coverage: Only Akamai protects against attacks from every OWASP Web and API Top 10 category.
• Bot and Layer 7 DDoS defense: Only Akamai delivered perfect scores across all advanced threat vectors.
• Zero false positives: Akamai passed 100% of legitimate user traffic with no customer friction.
• Protocol coverage: Akamai provided full protection for SOAP, REST, gRPC, and GraphQL; others missed or failed key protocols.
• Resilient by design: Akamai maintained 100% efficacy during failovers, DDoS spikes, and outages.

Source

The way we work has changed. With 85% of work happening in the browser and 42% of employees working remotely, securing work— on every device — is more critical than ever. Yet, 95% of organizations have faced a browser-based attack in the past year.

The problem? Legacy security tools weren’t designed for today’s AI-driven, cloud-powered workplace. As SaaS adoption skyrockets and unmanaged devices become the norm, organizations face growing security gaps, visibility challenges and increased risk of data leakage.

Download the Omdia report, “The State of Workforce Security: Key Insights for IT and Security Leaders,” to discover:

• How SaaS adoption and BYOD are reshaping workforce security.
• Why traditional security measures fall short in protecting browser-based work.
• How SASE and secure browsers work together to prevent breaches and protect data — without disrupting productivity.

This independent research commissioned by Palo Alto Networks, and conducted by Omdia, provides key insights and actionable strategies to help IT and security leaders navigate today’s workforce security challenges.

Your organization needs security that’s built in, not bolted on. Learn how to browse bravely in a world where the browser is your most critical business tool.

Source