PHP2Shell (CVE-2026-109618, CVE-2026-109619) is now exploited in the wild: code execution on unpatched PHP web servers, no login needed.
Patch first. Then check what your web servers can reach outbound. Most need DNS, updates, and a couple of APIs, not the whole internet.
#ZTNA
🚨 PHP2Shell exploited in real-world attacks.
An attacker chained PHP2Shell with a Linux kernel flaw to gain root access to 25 servers across four countries, including three in a U.S. government-affiliated environment.
The intrusion extended into the internal network, where the attacker targeted Active Directory.
Suspected China nexus. Signs of AI-assisted tooling.
Read the full report: thehackernews.com/2026/10/ph…
Some mesh Wi-Fi systems have an "IoT network" toggle that only adds a second Wi-Fi name. The devices still land on the main LAN next to the laptops and NAS, and traffic between them never touches the firewall. Put #IoT on its own VLAN first, then set firewall rules by device type.
#CybersecurityAwarenessMonth #cybersecuritytips
GLBA and the NAIC Model Law expect defensible evidence. Fragmented logs and authenticate-once VPNs don't deliver it.
Our CEO in @ITLupdates on why endpoint-first SASE fits how insurance actually works:
zenarmor.com/announcements
#GLBA #CyberSecurity #InsurTech #Zenarmor #SASE
Zenarmor is a Top InfoSec Innovators 2026 winner!
Cyber Defense Magazine has recognized Zenarmor with the Pioneering Secure Access Service Edge award, following our finalist recognition announced during Black Hat USA 2026.
We built Zenarmor around a clear belief: enterprise-grade security should be simple to deploy and operate, wherever users work.
Zenarmor SASE Anywhere Architecture™ delivers unified security, with inspection and enforcement running locally across endpoints, gateways, cloud workloads, and containers. Zenconsole™ brings policy management and visibility together in one place.
Zenarmor SASE: Single App. Single Stack. Single Pass.
Thank you to our customers and partners for your trust and feedback, and to the entire Zenarmor team for the work behind this win. Thank you Cyber Defense Magazine, for the recognition, and congratulations to our fellow winners!
Read the full announcement on our blog: lnkd.in/gNigpRdS
See the architecture behind our approach: lnkd.in/gD7njCaa
#Zenarmor #SASE #CyberDefenseMagazine
#Cybersecurity #ZeroTrust #ZTNA
Attackers got into the refrigeration controllers of about 700 European supermarkets: spoiled stock, several fires. The controllers had web logins open to the internet and predictable default passwords.
With Zero Trust Network Access (ZTNA) in front, those logins wouldn't have been reachable at all.
#Zenarmor #ZTNA #CyberSecurity #CybersecurityAwarenessMonth
Missed the last OPNsense update? 26.7.6 is worth taking a look at.
It patches several FreeBSD security issues, including jail escapes and a kernel TLS DoS, fixes the lockout handler, and moves interface settings to the new MVC/API.
Zenarmor adds enterprise-grade NGFW capabilities to OPNsense, including deep packet inspection and full TLS inspection to find threats inside encrypted traffic.
Release notes: forum.opnsense.org/index.php…
#OPNsense #Zenarmor #NetworkSecurity #NGFW #CyberSecurity
Just over a day left until our latest webinar to go over what's new (it's a lot!) in Zenarmor 2.7! Our #SASE stack gives you #ZTNA , TLS inspection and more in a native multi-tenant platform.
Sign up here 👇, and we'll see you there!
riverside.com/webinar/regist…
zenarmor retweeted
A continuation of the @OPNsense transparent filtering bridge (for 26.1-26.7) showing how to set up 4 different security services on the bridge. youtu.be/MFb6wOnluoc
zenarmor retweeted
🚨 Congratulations to @zenarmor on being named a Top Infosec Innovator Awards 2026 Finalist during #BlackHat!
Featured in the BlackHat Spotlight by Cyber Defense Magazine. Watch for this cybersecurity innovator at the #CyberDefenseCon CISO Conference this October in Orlando. 🌟
#CISOConference
zenarmor retweeted
People are using AI just about everywhere now, which means the traffic you need to inspect is everywhere too. So security has to be able to run wherever that traffic actually is.
I wrote a piece for SDxCentral on why enforcement has to happen where the traffic is created, at the branch, the edge, the device, rather than routing it somewhere far away first.
Link here: sdxcentral.com/opinions/new-…
Most SASE platforms treat channel partners as a way to move product. I’ve never really seen it that way.
I sat down with @ChannelInsider to talk about why our model lets partners host and run the infrastructure themselves, in their own environments, so they keep control of enforcement and the customer relationship.
Here’s the link: channelinsider.com/channel-b…
Cybersecurity Architect's handbook has a section which illustrates how you can use Zenarmor to introduce #ZTNA into greenfield deployments.
There's an offer to giveaway 2 copies of the book.
Might be your lucky day today 👊
zenarmor retweeted
Security breaks when systems are stitched together instead of designed to work together.
Murat Balaban, CEO & Founder of @zenarmor:
"Most security stacks today are built as integrations rather than architectures."
The same traffic gets inspected multiple times, policies behave differently across environments, and decisions become fragmented.
#NetworkSecurity #ZeroTrust #SecOps #ThreatDetection #EnterpriseSecurity #NetworkArchitecture
zenarmor retweeted
Found in the Wild!
secdoc.tech/found-in-the-wil…
I'm thrilled to share that the second edition of the Cybersecurity Architect's Handbook is officially out in the world.
#book @zenarmor #cybersecurity @PacktPub #architecture #SASE #newrelease
zenarmor retweeted
@zenarmor Thank you and Zenarmor is a great resource to have in the security toolset, not only for business but for those at home... My book was written to help those new to security and those with years of experience and Zenarmor works with both readers...