π2024 brought remarkable growth, new faces to #ZeroNation, and plenty of fun moments together πͺπΌπ.
To our customers, partners, investors, and teamβthank you for an incredible year; hereβs to a successful and inspiring 2025! π₯
#ZeroNetworks#NewYear2025#Cybersecurity #Gratitude
Gartner SRM is here! π
Swing by Booth #123 to see how Zero Networks makes AI-driven attacks irrelevant β and keeps your business running no matter what hits.π‘οΈ
#GartnerSRM
Nearly 80% of organizations are already deploying AI agents. Only a third have the policies to govern them.
AI agents authenticate, hold tokens, accumulate privileges, and connect to multiple systems simultaneously. And critically, they're provisioned for functionality, not security.
It's no wonder that nearly half of security pros now rank agentic AI and autonomous systems as the most dangerous attack vector.
Walk through how agentic AI is transforming the modern threat landscape and get a four-step roadmap for unlocking visibility and control over AI agents β‘οΈhttps://t.co/dfTOCJw6FW
Take a deep dive into the tactics attackers use to exploit AI agents and learn how to stop them β‘οΈ https://t.co/br9GZdx1qG
#AICybersecurity #AIAgentSecurity
OT segmentation used to mean a multi-year project. Most industrial organizations skipped it entirely β not because they didn't see the risk, but because the traditional approach was too complex and too disruptive.
That's changing.
π Today we announced 80% year-over-year growth in OT customers β including multiple top 20 global manufacturing companies β as industrial enterprises move from "someday" to "now" on segmentation.
Ransomware doesn't stop at the IT/OT boundary. Jaguar Land Rover. Airport systems forced to manual. Nation-state actors targeting energy and water infrastructure. In OT, a breach isn't just data loss β it's downtime, safety risk, and production shutdown.
Organizations need containment that works without disrupting operations. That's what we built.π‘οΈ
Read the PR here β https://t.co/IBtWpXJnQM
#ZeroTrust #OTSecurity #Microsegmentation #CyberResilience #ICS #NIS2
Active ransomware groups surged 49% year over year in 2025. The average attack now costs over $5 million. And 86% of cyber incidents cause operational downtime, reputational damage, or both.
Jaguar Land Rover. Marks & Spencer. Kettering Health. The pattern is consistent: attackers gain a foothold, move laterally with little friction, and reach the systems organizations can least afford to lose.
Downtime isn't just a side effect of ransomware, it's a deliberate tactic.
Detection-based strategies identify threats after malicious activity is already underway. When lateral movement begins in seconds and the average breach takes months to identity and contain, the only reliable answer is building containment into the architecture before attackers ever get the chance to spread.
π Take a closer look at how ransomware attacks unfold, where defenders can intervene to safeguard business continuity, and the controls that break the attack chain β https://t.co/ZBDKP3q5U2
#Ransomware #CyberResilience
The fastest recorded breakout time in 2025: 27 seconds. AI-enabled attackers can now move from initial access to exfiltration in 72 minutes β 4x faster than last year.
And that's before you factor in the AI agents already running in your environment. Every agent has legitimate permissions across multiple systems. An attacker who can influence that agent doesn't need stolen credentials; the agent's own connections become the attack surface.
Together, these two vectors have a name: AI-driven lateral movement (AILM).
Faster detection isn't the answer. The only reliable solution is architectural: close the network by default, restrict internal reachability, and extend identity controls to every AI agent.
When there's nowhere to move, attack speed stops mattering. Get our comprehensive breakdown of AILM π https://t.co/ioyFwOP1R4
#AILM #CyberResilience #LateralMovement
This week, two of our Zeros attended the Fast Company Most Innovative Companies Summit & Gala to celebrate and accept our recognition as one of the Worldβs Most Innovative Companies of 2026. π
Weβre incredibly honored by this achievement β and even more grateful for the people behind it. This recognition belongs to every teammate at Zero Networks who has worked relentlessly to rethink what network security and threat containment should look like for the modern enterprise. π
Together, weβve helped make automated containment, identity-based segmentation, and meaningful resilience outcomes a practical reality for organizations around the world.
Cybersecurity has never mattered more, which makes this recognition especially meaningful. Weβre proud to stand alongside innovators across our industry, including companies like @cyera_io, @Horizon3ai, @chainguard_dev, @Cloudflare, and @sublime_sec β as well as groundbreaking companies across the broader list like @Google, @nvidia, @AnthropicAI, @tryramp, and many more.
ππ Congratulations to our entire Zero Networks team. Weβre proud of what weβve built together β and even more excited for whatβs next. π
#TheFutureofCyber #ThreatContainment #CISO #CIO #NetworkSecurity #CyberResilience #BusinessResilience #UptimeIsEverything
Zero Networks is heading to the Wisconsin Technology Association Annual Tech Conference in one week β meet us there!
ποΈ Tuesday, May 19th | π 11 a.m. - 6 p.m. | πBrookfield Conference Center
Get all the details and register here β https://t.co/UUApt0RRrn
Enterprises don't need more alerts. They need fewer paths for attackers to move.
Lateral movement is how a minor breach becomes enterprise-wide disruption. Each pivot expands blast radius β from a compromised account to halted production systems to failed authentication across business units.
A containment-first architecture stops that chain before it starts. Hereβs how:
- Granular, identity-based access controls eliminate always-on access
- Comprehensive microsegmentation proactively restricts internal communication pathways
- Just-in-time MFA verification for privileged access (with automatic revocation)
- Deterministic automation that adapts policies as your environment changes
When containment is architectural, resilience becomes measurable, defensible, and durable. Get the definitive guide for strengthening cyber resilience via built-in containment: https://t.co/Gd0QHrsSy0
#CyberResilience
Attackers aren't just breaking in anymore β they're blending in.
They're using legitimate credentials, moving like real users, and expanding their blast radius before most teams even know something's wrong.
Our Field CTO, Chris Boehm, joined the @thecyberwire podcast to break down how this shift is happening and what organizations need to do about it β from minimizing blast radius to why Zero Trust isn't optional anymore.
ποΈ Ep. 2541: CyberWire Daily π https://t.co/QvHQoCMRTL
CISA just flagged a vulnerability in Grassmarlin β a retired NSA tool used to map OT and ICS networks. No patch exists.
It's a reminder that OT security debt doesn't age out. It compounds. π§
Our CEO Benny Lakunishok talked to SDxCentral about why this matters beyond one tool β and why energy, water, transport, and manufacturing can't afford to ignore it.
The attack surface isn't just growing. In OT, it's been quietly accumulating for years.
Full article π
https://t.co/XuCUWE8s6C
Resilience spans governance, security, and operations, making it a shared function β where accountability can get blurry.
The board defines risk tolerance and downtime thresholds. The COO keeps critical services running. The CISO closes the gap between exposure and business tolerance.
Thatβs three stakeholders with three interconnected mandates, but what happens when a breach occurs, and who is responsible?
When blast radius is limited and uptime is protected by design, the answer is built into the architecture. Cyber incidents are contained automatically so every layer of resilience ownership achieves its target outcomes.
Get the visual breakdown of how a containment-first architecture maps to key resilience outcomes: https://t.co/mEf1ptjKRR
#CyberResilience #BusinessContinuity
Zero Networks is heading to the 10th annual Secure Miami conference next Tuesday, May 5th β met us at South Florida's can't-miss cybersecurity event of the year!
ποΈ Tuesday, May 5th | ποΈ Florida International University |πTable #7
Get all the details and register here β https://t.co/sBq78RF4ai
ππ "Deployment was smooth and required minimal effort, which was ideal for our small cyber team. Zero Networks quickly gave us clear visibility and simple, automated segmentation. The ability to enforce MFA behind privileged ports has been a major security boost without adding complexity. Overall, the platform is easy to use, reliable, and delivers strong protection with very little overhead." ππ
π Get a no-BS review of our microsegmentation capabilities from a Manager of IT Security and Risk Management in the Software Industry: https://t.co/HrEP5cPRHi
πββοΈ Or, skip ahead and kickstart your own effortless microseg journey - book a demo with our team β https://t.co/mZVNEHctFy
Most vendors sell AI hype. We're not. Today, Zero Networks announced AI segmentation. π π
AI Segmentation gives enterprises real control β governing AI agents and SaaS tools at the network layer, stopping AI-driven lateral movement at its source, and embedding AI into security operations for continuous compliance and risk scoring.
Most vendors address one or neither. Zero controls both.
Contain AI, don't chase it. Read the press release to learn more β https://t.co/yrEsQB2RFn
Cyber resilience is now a board mandate, a regulatory requirement, and an audit expectation.
But most security teams are stuck in an endless detect-and-respond cycle that can't provably reduce risk fast enough β and comprehensive prevention frameworks take years to scale.
There's a faster path.
Join Zero Networks Field CTOs Albert Estevez Polo and Chris Boehm on April 29th as they cut through the complexity and lay out a clear route to cyber resilience, including:
- How to benchmark your current resilience posture with actionable next steps
- A blueprint for defending against emerging threats (like shadow AI vulnerabilities and identity-based attacks)
- Why automated containment is the key to limiting lateral movement and blast radius
- How to demonstrate resilience to auditors, regulators, and business executives
Stop firefighting; start engineering resilience. Register to learn how β https://t.co/xnYzPv60m2
#CyberResilience #ZeroTrust
"Assume breach" used to describe a mindset. Now, with efforts like Anthropic's Project Glasswing, that assumption isn't just theoretical.
We're entering a world where AI can discover vulnerabilities, chain them together, and generate working exploits faster than any human team can respond. If attacks are faster, cheaper, and more automated than ever, what actually keeps the business running?
In a new blog, Zero Networks' Co-Founder and CEO, Benny Lakunishok, lays out how AI just broke the old security model. Learn why containment is what actually matters now β‘οΈ https://t.co/VV74scgWuQ
Containment is what determines whether a cyber incident becomes a headline or a non-event β even for large, sophisticated organizations with modern security investments.
Incidents like the Hasbro breach serve as a reminder that it's time to shift focus from reacting to threats to preserving uptime. With controls designed to limit how far an attack can spread, the business keeps running even when a breach occurs.
Zero Networks Co-Founder and CEO, Benny Lakunishok, shared his perspective in a new breakdown of the Hasbro attack from Dark Reading: https://t.co/RYplLjKtZw
#CyberResilience #BreachContainment
We analyzed 3.4 trillion activities across 400 enterprise environments.
Here's what we found:
One compromised system can reach 85% of your environment in a single hop.
71% of threat activity flows through just 4 protocols you can't disable: SMB, RDP, WinRM, RPC.
Attackers don't need sophistication. They use the same trusted paths your IT team uses every day.
The breach isn't the failure. The blast radius is.
πHow to secure the 4 protocols driving enterprise risk in 2026: https://t.co/uN6JYbNAwk
π Full threat analysis: https://t.co/AukvyQ0jhK
Visibility π€ Control
Zero Networks is now a part of the Microsoft Sentinel connector ecosystem, enabling security teams to bring segmentation audit telemetry into Sentinel. The integration supports:
- Compliance monitoring
- Investigation of suspicious changes
- Faster detection of attempts to bypass lateral-movement controls
Learn more about the connector: https://t.co/FvFtc2teTy
71% of threat activity flows through just 4 protocols: SMB, RDP, WinRM, RPC.
51% of workload identities are completely inactive β dormant accounts attackers can hijack without raising a single alert.
Credential theft is step one. Privilege escalation is where the real damage happens.
Most security tools can see it coming. Almost none are architected to stop it.
Closing privileged protocols by default and enforcing just-in-time access doesn't just slow attackers down β it makes stolen credentials worthless.
π How to neutralize stolen credential threats: https://t.co/ZepxbNtiHX