Top all-time · #3757
Leading Cloud Enterprise Security Provider for Zero Trust
Company blog · zscaler.com/blogssecurity
Leading Cloud Enterprise Security Provider for Zero Trust is the company blog at zscaler.com, writing about security. Since 2010, 21 different Hacker News readers have linked it 24 times, most often “Firefox Extension BlackSheep Detects And Protects You From Firesheep”. No feed was found, so read it on the site itself.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
Linked as a source for Zscaler security research (an APT28 report, a signed-malware case) and product pages, such as its SSL inspection glossary. Commenters cite these pages without judging the writing.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Zscaler is a leading cloud enterprise security provider helping global businesses adopt zero trust for secure digital transformation.
Most-linked posts?
- Firefox Extension BlackSheep Detects And Protects You From Firesheep2 people · 2 mentions · first linked 2010-11-08
What Hacker News says?
Isn't there a history of signed malicious things? For example: https://www.zscaler.com/blogs/research/yet-another-signed-ma...
Comment linking /blogs/research/yet-another-signed-malware-spymel
on “Technical report on DNC hack [pdf]”Submitted Blacksheep answer to Firesheep as a story · 5 points
HN discussionThere's also Azure AD Application Proxy [1] and Zscaler Browser Access [2] No affiliation but what I'm having to use at work. [1] https://docs.microsoft.com/en-us/azure/active-directory/app-... [2] https://www.zscaler.com/blogs/company-news/securing-third-pa...
Comment linking /blogs/company-news/securing-third-party-access-internal-apps-just-got-easier
on “Exposing a web service with Cloudflare Tunnel”Submitted Firefox Extension BlackSheep Detects And Protects You From Firesheep as a story · 5 points
HN discussion> Compliance With anti-security policies that: break TLS, thwart certificate pinning, encourage users to ignore certificate errors, expand the attack surface, increase data leak risks, etc. All while wasting resources and money. Zscaler and its ilk have conned the IT world. Much like Crowdstrike did before it broke the airlines. Not to mention: > We only use data or metadata that does not contain customer or persona…
Comment linking /blogs/company-news/zscalers-commitment-to-responsible-ai
on “Stop Breaking TLS”Submitted CVE-2025-50165: Critical Flaw in Windows Graphics Component as a story · 4 points
HN discussionBut a simple gateway/ELB can protect your apps from the public internet. (But unless you’re pushing a root CA cert to all client devices then those apps aren’t “dark” in any sense due to CT logs). Zscalar’s ZPA docs say: > [ZPA] mitigates lateral threat movement through advanced segmentation https://www.zscaler.com/products/zscaler-private-access So it must be doing some segmentation at the network level, otherwise…
Comment linking /products/zscaler-private-access
on “Launch HN: Firezone (YC W22) – Zero-trust access platform built on WireGuard”Submitted Malicious Android Ads leading to drive by downloads as a story · 4 points
HN discussionit already exists https://www.remotehq.com/ https://www.tracefree.com/ https://webgap.io/ https://www.zscaler.com/
Comment linking /
on “Thin Platforms”Submitted Android Document Readers and Deception: Tracking the Latest Updates to Anatsa as a story · 3 points
HN discussionSomething like zscaler's ZIA [0] is in the same ballpark as BeyondCorp, or so I think. Cloudflare Warp is basically a CDN turned on its head: Security and privacy are a huge bonus, whilst low latency and high bandwidth remain its salient features. It is more like the Silk Browser [1], the Opera Turbo/Mini [2], or the Chrome FlyWheel [3] but operating at the network layer, and across all apps. [0] https://www.zscaler…
Comment linking /products/zscaler-internet-access
on “Cloudflare's CTO Wants to Shake Up How We Think About VPNs”Submitted InnfiRAT: A new RAT aiming for your cryptocurrency and more as a story · 3 points
HN discussionSaw this today: BlackSheep - http://www.zscaler.com/blacksheep.html Similar idea to FireShephard: "BlackSheep, also a Firefox plugin is designed to combat Firesheep. BlackSheep does this by dropping ‘fake’ session ID information on the wire and then monitors traffic to see if it has been hijacked. While Firesheep is largely passive, once it identifies session information for a targeted domain, it then makes a subseq…
Comment linking /blacksheep.html
on “FireShepherd is the antidote for Firesheep hacking mania ”Submitted Salesloft Drift Supply Chain Incident: Key Details and Zscaler's Response as a story · 2 points
HN discussionOriginal source: APT28 Leverages CVE-2026-21509 in Operation Neusploit https://www.zscaler.com/blogs/security-research/apt28-levera... > Please submit the original source. If a post reports on something found on another site, submit the latter. https://news.ycombinator.com/newsguidelines.html
Comment linking /blogs/security-research/apt28-leverages-cve-2026-21509-operation-neusploit
on “Russia's APT28 Rapidly Weaponizes Newly Patched Office Vulnerability”Submitted 87.2% of Threats Delivered over Encrypted Channels as a story · 2 points
HN discussionI work in a corporate setting and the money and time we wasted because of Zscaler and its SSL inspection [1] is beyond your wildest imagination. Whenever I see a "SSL certificate problem: self-signed certificate in certificate chain" error, I know I'm in trouble. [1] https://www.zscaler.com/resources/security-terms-glossary/wh...
Comment linking /resources/security-terms-glossary/what-is-ssl-inspection
on “SSH certificates: the better SSH experience”Submitted Technical Analysis of Anatsa Campaigns: Banking Malware in the Google Play Store as a story · 2 points
HN discussionSubmitted Technical Analysis of Pikabot as a story · 2 points
HN discussionSubmitted Mobile App Wall of Shame: SMS Touch as a story · 2 points
HN discussionSubmitted DanaBleed: DanaBot C2 Server Memory Leak Bug as a story · 1 points
HN discussionSubmitted We have a new record ransom payment $75M as a story · 1 points
HN discussionSubmitted Browser Isolation as a story · 1 points
HN discussionSubmitted Agent Tesla Rat Delivered by Quantum Builder with New TTPs as a story · 1 points
HN discussion
