Netskope

It's time for the #WeekendWrapUp of Netskope news you may have missed: 🔸CIO Online | The SaaSpocalypse is a people problem: https://lnkd.in/eUcfNewE 🔸CRN | Cybersecurity Agent Collisions Are Coming And Could Be ‘Very Ugly’: https://lnkd.in/evK_a6e3 More news you may have missed ⏬ https://lnkd.in/gW5if9Nf

What happens when a threat actor combines a browser API, a blockchain, and a fake CAPTCHA into one attack chain? Netskope Threat Labs traced a WordPress mass-compromise campaign affecting hundreds of sites. A rogue plugin registers a Service Worker in the visitor's browser that strips the site's Content-Security-Policy header and injects a script pulling its payload from a smart contract on Base, a technique known as EtherHiding. From there, the chain runs through: 🔸A fake reCAPTCHA prompt that tricks the visitor into pasting and running a command themselves 🔸A disguised polyglot file that a trusted Windows binary executes 🔸A fileless PowerShell stage with the Antimalware Scan Interface blinded 🔸A payload hidden inside a steganographic image on a legitimate CDN Nine layers later, it delivers Amatera, a password stealer that hides its command-and-control lookups behind DNS-over-HTTPS. Get the full breakdown of all nine layers: https://lnkd.in/eB-3FKUW

✍️ This week's AI Index report is here, and writing emerged as the fastest-growing application type. Check out the full dashboard for the latest trends and insights: https://lnkd.in/gtpQi8A4 #AIIndex

⏱️ Discovering a potential breach on a Friday afternoon starts a clock. GDPR gives you 72 hours to notify regulators. Could your team produce a comprehensive, auditable chain of custody before that window closes? For most organizations, the answer is no. Only 12% can produce one quickly. Our latest blog makes the case for why organizations should build continuous evidence into daily operations, not treat it as a post-incident task. Read "Detection Isn't Proof: The 72-Hour-Evidence Problem" to get the full story: https://lnkd.in/e8CH_DtW

🔓Security teams can’t secure what they can’t see. At Black Hat USA 2026, Eliot Sun, VP of Product Management at Netskope, joined Zeus Kerravala, Founder and Principal Analyst at ZK Research, to talk about why organizations are stuck when it comes to moving AI from the pilot phase to production. Eliot's answer: it comes down to visibility. Most organizations know AI is being used across their business, they just do not know how much, and that visibility is what tells security teams which controls they actually need. 🎙️ Catch the full discussion: https://lnkd.in/eiKNMz33 #BHUSA #BlackHat26 #DataSecurity

❓Where does your insider risk program actually have blind spots? Third-party contractors rarely show up on HR's leaver lists. And employees flag risk signals for weeks before anyone connects the dots. Insider incidents now cost the average organization $19.5 million a year, according to the Ponemon Institute. Netskope Insider Threat AISecOps Agent was built to close the gap. One watchlist, one daily assessment. See how it works: https://lnkd.in/efCiVrGX

On Security Visionaries, Mohit k, Sr. Application Security Engineer at Netskope, joined host Emily Wearmouth to talk through what happens when you point frontier AI models at your own product's code. The research draws on Claude Mythos and ChatGPT 5.5, and covers why a memory corruption bug remains one of the hardest and most dangerous flaws to find, why AI is even more useful earlier, threat modeling a product before it's built, than after the fact, and more. Catch the full episode if you missed it the first time. https://lnkd.in/erct6JfC

Q&A with Akshay Bairagi, Sr. Staff Engineer at Netskope. Get to know Akshay as he shares why Netskope has been a good fit for him, how he'd describe Netskopers, and more! Think you'll love Netskope? Learn more: https://lnkd.in/dt-CG-c #WhyILoveNetskope #LifeAtNetskope

🛡️ Post-quantum cryptography (PQC) just landed in Netskope One Next Gen SWG. Data you're protecting today (health records, financial history, trade secrets) can be captured now and decrypted later once quantum computers catch up. Security teams call this harvest now, decrypt later, and it's why we're not waiting for that threat to fully materialize before shipping protection. We've added support for X25519MLKEM768, a hybrid key-exchange algorithm that pairs elliptic-curve cryptography (what's in wide use today) with a post-quantum method. It covers traffic in both directions: client to Netskope, and Netskope to the destination server. Three specifics before you turn it on. ✅ It's a tenant-level feature flag built for controlled testing, not a forced flip. ✅ It's native to the OpenSSL 3.5 upgrade, not bolted on. ✅ Transaction events show PQC use, so it's not a black box. It's live in commercial environments now. FedRAMP, PBMM, Data Plane on-Premises, and Virtual Private Edge support is planned for future releases. Full post: https://lnkd.in/e-Rb4ZmC

Last week, we celebrated Mike Anderson, our Chief Digital and Information Officer, on his induction into the 2026 CIO Hall of Fame. The CIO Hall of Fame is presented annually at the CIO 100 Awards & Conference, recognizing an elite group of IT leaders who have shaped the profession. Mike said it best, "Moments like this are a reminder that the people and relationships built along the way are what matter most." Here's a look back at a few of our favorite moments from the night. Congratulations, Mike. #CIO100 #CIOHOF CIO Online Foundry