zenarmor

Instant network security for the hyper-distributed, agile world.

Plug & Secure. Anywhere, Anytime, Any Cloud!

#SASE #SSE #ZTNA

[zenarmor @zenarmor]

CISA lists CVE-2026-19868 as exploited: on a widely used firewall's SSL VPN set up for SAML, valid credentials for another login method skip SAML and its MFA.

With remote access through Zenarmor ZTNA instead, that portal wouldn't face the internet at all.

Patch it either way.

#ZTNA #ZeroTrust

[zenarmor @zenarmor]

NIST's final report on moving to post-quantum crypto (IR 8547) is out. US federal high-value systems: key establishment by 2030, signatures by 2031.

Key exchange first, because of harvest now, decrypt later. Our explainer: https://t.co/JHiIEM6quF

#PQC #PostQuantum

[zenarmor @zenarmor]

A common OPNsense homelab plan has VLANs for trusted, IoT, cameras, and guest. Firewall rules decide what reaches what.

Zenarmor can add a policy per VLAN ID, so the camera VLAN can get stricter app and web rules than your PCs.

Do your cameras really need full network and internet access?

#ZTNA #NGFW

[zenarmor @zenarmor]

Need to control access to specific A.I. tools?

In Zenconsole: Policies > Internet Security Policies > your policy > App Controls > A.I. Tools, flip the category toggle, then Sync Now.

One toggle covers the whole category, or choose specific ones, on every gateway and endpoint using that policy.

#ZTNA #ZeroTrust #Cybersecurity #AIsecurity

[zenarmor @zenarmor]

A pentester got domain admin at a factory through one unpatched Windows 7 box open to EternalBlue.

The strong admin password didn't help.

Zenarmor lists devices by type and OS at the gateway, so you can find the Windows boxes. Check versions and give old ones their own VLAN.

#ZTNA #Cybersecurity

[zenarmor @zenarmor]

Come learn about Zenarmor's radically simple unified network security and our intuitive Zenconsole.

Protect your users, your customers, and your data wherever they work.

November 9, 2026 - 7am PT / 4pm CET
https://t.co/paX18NxpUK

#ZTNA #cybersecurity

[zenarmor @zenarmor]

PHP2Shell (CVE-2026-109618, CVE-2026-109619) is now exploited in the wild: code execution on unpatched PHP web servers, no login needed.

Patch first. Then check what your web servers can reach outbound. Most need DNS, updates, and a couple of APIs, not the whole internet.

#ZTNA

[The Hacker News @TheHackersNews]

🚨 PHP2Shell exploited in real-world attacks.

An attacker chained PHP2Shell with a Linux kernel flaw to gain root access to 25 servers across four countries, including three in a U.S. government-affiliated environment.

The intrusion extended into the internal network, where the attacker targeted Active Directory.

Suspected China nexus. Signs of AI-assisted tooling.

Read the full report: https://t.co/x0JCElC4uC

[zenarmor @zenarmor]

Some mesh Wi-Fi systems have an "IoT network" toggle that only adds a second Wi-Fi name. The devices still land on the main LAN next to the laptops and NAS, and traffic between them never touches the firewall. Put #IoT on its own VLAN first, then set firewall rules by device type.

#CybersecurityAwarenessMonth #cybersecuritytips

[zenarmor @zenarmor]

Privacy group noyb's annual report says complaints have led to about €2 billion in GDPR fines and it's preparing it's first collective redress case.

Fines from regulators are one risk, while users claiming damages is another. Know exactly where your users' data is processed.

[zenarmor @zenarmor]

GLBA and the NAIC Model Law expect defensible evidence. Fragmented logs and authenticate-once VPNs don't deliver it.

Our CEO in @ITLupdates on why endpoint-first SASE fits how insurance actually works:
https://t.co/Lh4S18owZa

#GLBA #CyberSecurity #InsurTech #Zenarmor #SASE

[zenarmor @zenarmor]

Zenarmor is a Top InfoSec Innovators 2026 winner!

Cyber Defense Magazine has recognized Zenarmor with the Pioneering Secure Access Service Edge award, following our finalist recognition announced during Black Hat USA 2026.

We built Zenarmor around a clear belief: enterprise-grade security should be simple to deploy and operate, wherever users work.
Zenarmor SASE Anywhere Architecture™ delivers unified security, with inspection and enforcement running locally across endpoints, gateways, cloud workloads, and containers. Zenconsole™ brings policy management and visibility together in one place.

Zenarmor SASE: Single App. Single Stack. Single Pass.

Thank you to our customers and partners for your trust and feedback, and to the entire Zenarmor team for the work behind this win. Thank you Cyber Defense Magazine, for the recognition, and congratulations to our fellow winners!

Read the full announcement on our blog: https://t.co/BMlREOSsPg
See the architecture behind our approach: https://t.co/5cqYAYtPHd

#Zenarmor #SASE #CyberDefenseMagazine
#Cybersecurity #ZeroTrust #ZTNA

[zenarmor @zenarmor]

If any box you look after still runs a Zenarmor version older than 2.1, put October 31 on the calendar.

The legacy threat-intel endpoints those versions use retire that day, so plan the update before then.

Details: https://t.co/Lh4S18owZa

#Zenarmor #SASE #ZTNA #SSE

[zenarmor @zenarmor]

source - Ars Technica:
https://t.co/EIvyVeUxKc

[zenarmor @zenarmor]

Attackers got into the refrigeration controllers of about 700 European supermarkets: spoiled stock, several fires. The controllers had web logins open to the internet and predictable default passwords.

With Zero Trust Network Access (ZTNA) in front, those logins wouldn't have been reachable at all.

#Zenarmor #ZTNA #CyberSecurity #CybersecurityAwarenessMonth

[zenarmor @zenarmor]

Missed the last OPNsense update? 26.7.6 is worth taking a look at.

It patches several FreeBSD security issues, including jail escapes and a kernel TLS DoS, fixes the lockout handler, and moves interface settings to the new MVC/API.

Zenarmor adds enterprise-grade NGFW capabilities to OPNsense, including deep packet inspection and full TLS inspection to find threats inside encrypted traffic.

Release notes: https://t.co/oGcFnCFxyx

#OPNsense #Zenarmor #NetworkSecurity #NGFW #CyberSecurity

[zenarmor @zenarmor]

#SASE inspection can happen in one of two places: at a vendor PoP in a remote cloud (a round-trip can cost 20 to 300ms) or locally on the device or gateway the traffic already passes through (Zenarmor adds about 0.2ms).

What do your users, apps and data need?
#ZTNA

[zenarmor @zenarmor]

Just over a day left until our latest webinar to go over what's new (it's a lot!) in Zenarmor 2.7! Our #SASE stack gives you #ZTNA , TLS inspection and more in a native multi-tenant platform.

Sign up here 👇, and we'll see you there!
https://t.co/bERkDg4y4N

[Home Network Guy @HomeNetworkGuy_]

A continuation of the @OPNsense transparent filtering bridge (for 26.1-26.7) showing how to set up 4 different security services on the bridge. https://t.co/BFyXXQxk2F