Netskope

Our Threat Labs team analyzed a crypto-stealing operation built with a malware builder we call Underground. We estimate it has taken in roughly $100,000 on-chain (a conservative figure). It rides the victim's signed-in Chrome or Edge session, drains exchange accounts behind a fake security-verification overlay, and swaps copied wallet addresses for its own. For defenders, a web block stops the traffic but doesn't remove the implant. The blog covers what to hunt for on endpoints and why behavioral detection is designed to hold up when domains rotate. Read the blog: https://lnkd.in/eC9yNM9u

Western Canada Lottery Corporation (WCLC) had to secure 5,000 retail sites, cut multi-million dollar circuit costs, and govern AI adoption while keeping every draw on schedule. It used Netskope One SD-WAN, Netskope One Private Access, and Netskope Skylight AI Security to do it. The result is a more streamlined operation across its retail network. WCLC went from waiting on retailers to call in problems to seeing link health across all 5,000 sites in real time, and it replaced VPN guesswork with always-on zero trust access. It can now see and govern how AI tools and data are used across the organization. Adam Janssens, Director of Infrastructure and Operations at WCLC, puts it this way: "I will sleep better at night knowing that our environment is secured through all of the various security technologies built within Netskope: zero trust network access, CASB, DLP, and additional AI security services from the entire platform." Learn how WCLC modernized its retail network with Netskope: https://lnkd.in/eVk7pWqJ

What if every AI decision came with the visibility and control needed to assess it with confidence? That is what security leaders around the world are building. Drawing on insights from more than 60 of them, this report presents six conditions for defensible AI acceleration. Explore a practical blueprint created with security teams in mind: https://lnkd.in/eAKsa6ZU

Roughly 30% of enterprise cloud spend goes to waste, and it's mostly over-provisioning, not unused services. That's one of the numbers Sebastian Leal-Bennett, who leads architecture and cloud for a major European investment bank, shares on the latest Security Visionaries. He tells host Emily Wearmouth how regulation shapes cloud architecture from day one, how zero trust holds up across a hybrid estate, and what changes when you stop letting an AI assistant simply agree with you. Listen to the full episode on: 🎧 YouTube: https://lnkd.in/eMiaRUUe 🎧 Apple Podcasts: https://lnkd.in/ef-9Am2K 🎧 Spotify: https://lnkd.in/eAgieWQW 🎧 The Lens: https://lnkd.in/ebfWwun8

Q&A with Emilio Sánchez de Rojas, Principal Product Manager at Netskope. Get to know Emilio S. as he shares what drew him to Netskope, how he'd describe Netskopers, and more! Think you'll love Netskope? Learn more: https://lnkd.in/dt-CG-c #WhyILoveNetskope #LifeAtNetskope

A user downloads a financial report, renames it, edits it, and uploads it to personal cloud storage. By the time it resurfaces, the name and the content have both changed, but the data still needs governance. Network controls see the download and the upload, but with the file changed in between, they can't determine whether the two are connected. Our latest blog explains how Netskope One Data Lineage combines evidence from inline, API connector, and endpoint activity to reconnect the journey. Read How Data Lineage Catches a File That’s Trying Not to Be Found https://lnkd.in/etkCDq-w

How is your vendor's AI risk score actually calculated? That's one of five questions IDC says you should ask before trusting any AI risk score. A detection layer only catches what it already knows, which is why the questions matter. Bring your hardest questions to your local AI in the Fast Lane event. 📍 Register for a stop near you: https://lnkd.in/e3Bwfz85 🔗 Read IDC's full analysis, Netskope and AI in the Fast Lane: https://lnkd.in/esw9MT4h

It's time for the #WeekendWrapUp of Netskope news you may have missed: 🔸 Ars Technica | Your uncle’s frozen Mac says it’s infected after viewing a Google ad. Now what? https://lnkd.in/eU5Dxs6B 🔸 Cybersecurity Dive I Retailers tamp down shadow AI but struggle to oversee agentic sprawl: https://lnkd.in/eTTdYsJZ 🔸 Netskope Enables Security Teams to Stop Risky AI Agent Actions Before They Execute: https://lnkd.in/ez9G5Jhw More news you may have missed ⏬ https://lnkd.in/gW5if9Nf

This week's AI Index is out. Media is the fastest-growing industry at +6.2% week on week, North America leads all regions, and ChatOn is making moves on the app leaderboard. Get the full breakdown: https://lnkd.in/gtpQi8A4 #AIIndex

It can start with a single click on a Google ad, leading to a fake online store used as cover. Netskope Threat Labs uncovered a cloud-hosted tech-support-scam kit that waits for mouse movement before decrypting a hidden command-and-control (C2) address, retrieving an OS-specific encrypted payload, and assembling a fake security alert entirely within browser memory. Once triggered, the locker forces the browser into full screen, blocks the usual browser exit shortcuts, and deliberately degrades the page with lag and alert sounds to convince the victim their machine is broken, all to pressure them into calling a bogus support line. And it isn't an isolated campaign. Over a two-week period, the kit reached at least 619 organizations, with researchers identifying more than 250 Google Ads campaign IDs. Netskope Threat Protection detects the kit inline as Generic.Phishing Tech Support Scam Kit Detected, while Netskope Threat Labs continues monitoring the campaign and expanding coverage as operators rotate infrastructure and variants. Read how the scam works and the techniques it's using to evade analysis: https://lnkd.in/eFNy_vuY