Netskope(NTSK)

Picture a coding agent your engineering team quietly stood up three months ago. It has read access to your internal code repositories, it pulls in documentation from public sources to answer developer questions, and when it finds something relevant, it can commit changes and open tickets in your project management system. Nobody in security approved […]

How does a statistical error from the Second World War apply to the billion-dollar problem of protecting data in a Large Language Model? Let me tell you a story. In the height of the war, the British Royal Air Force faced a terrifying problem. Their planes were getting shot down in startling numbers. So they […]

I was in a customer meeting a few months ago and shared what I saw as an exciting technological advance. It had just been revealed that Anthropic’s Project Glasswing had surfaced 10,000 high- or critical-severity vulnerabilities across critical enterprise software in a single month. Using the tool, it was reported, a single partner organization had […]

Actors perform work on systems. This has been so since the arrival of the transistor and even long before. Until recently, actors have been mostly humans who possess identities stored in identity providers (IdP) and who operate within bounds set by access controls that reference said identities. While other bounds exist, the starting point for […]

Zero trust is often cited as the gold standard for reducing cyber risk and minimizing breach impact. Yet despite widespread endorsement, many organizations stall, partially implement, or ultimately abandon their zero trust initiatives. Why? At its core, zero trust is not a product. It is an architectural and operational model, and its meaning varies significantly […]

Native AI guardrails (the types of guardrails provided by Amazon Bedrock, Anthropic, OpenAI, etc.) are typically one-size-fits all guardrails designed to protect the provider, specifically their liability and intellectual property. For that reason, they typically fail organizations from a SecOps perspective because they simultaneously create unwanted friction and provide insufficient protection. For example, cybersecurity professionals […]

Native AI guardrails (the types of guardrails provided by Amazon Bedrock, Anthropic, OpenAI, etc.) are typically one-size-fits all guardrails designed to protect the provider, specifically their liability and intellectual property. For that reason, they typically fail organizations from a SecOps perspective because they simultaneously create unwanted friction and provide insufficient protection. For example, cybersecurity professionals […]

In April 2026, Netskope Threat Labs reported a ClickFix campaign delivering an AppleScript-based infostealer to macOS users, pilfering sensitive data through a persistent fake system dialog. Through our continuous monitoring of this ClickFix activity, we intercepted a new, upgraded campaign on May 31, 2026, coming from a Russian-speaking attacker. This latest campaign differs from the […]

After any new enterprise customer acquisition, the initial celebrations precede the real work: provisioning environments, configuring services, onboarding users. This is a process that has historically taken weeks before a single security or networking service goes live. Meanwhile, the customer is asking when they can expect results. The MSP market is growing fast, and so […]

A curious theme emerged at the RSA Conference this year (2026). The theme three and four years ago was zero trust and most vendors, including Netskope, advocated for the value of building zero trust principles into a security strategy. They do work: When the right people have the right access to the right resources at […]

At Infosecurity Europe 2026, Netskope Threat Labs presented research on how OAuth authorization abuse has evolved from third-party supply chain breaches into a structural crisis for the agentic era. This post summarizes the key findings: How the authorization model already fails at scale, why AI agents make it exponentially worse, and what enterprises can do […]