NewApp Digest
search bot

Zero Trust

How Cybersecurity Services Have Evolved Beyond Antivirus and Firewalls
Tech Optimizer
June 19, 2026

How Cybersecurity Services Have Evolved Beyond Antivirus and Firewalls

Businesses traditionally relied on antivirus software and firewalls for cybersecurity, which were effective when threats were simpler and data was mostly stored on-site. However, the cybersecurity landscape has evolved, with cybercriminals employing advanced tactics that traditional methods cannot adequately address. Antivirus software is limited to detecting known threats, while modern malware can evade detection by altering its code or executing in memory. Firewalls also struggle when authorized users' credentials are compromised, allowing threats to infiltrate networks. Contemporary security strategies advocate for a multi-layered approach, incorporating tools like Endpoint Detection and Response (EDR), Multi-Factor Authentication (MFA), Zero Trust Architecture, Dark Web Monitoring, and Security Awareness Training. Compliance with regulatory standards is increasingly important, and cyber insurance providers now require businesses to demonstrate comprehensive security measures. Managed security providers are becoming essential for small and mid-sized businesses, offering expertise and resources to manage complex security tools and processes effectively. Organizations should assess their current security status and adopt a layered approach to address vulnerabilities, recognizing that traditional solutions alone are insufficient in today's threat landscape.
Windows Server is getting new network safety capabilities with DNS over HTTPS
Winsage
June 13, 2026

Windows Server is getting new network safety capabilities with DNS over HTTPS

Microsoft has introduced DNS over HTTPS (DoH) on Windows Server 2025, enhancing network security by encrypting DNS traffic for client-to-server communications. This feature, previously available only in Windows client editions, is now part of Microsoft's Zero Trust architecture. DoH routes DNS traffic through HTTPS secured with TLS certificates, preventing eavesdropping and safeguarding DNS data from tampering. It adheres to the IETF DNS over HTTPS standard (RFC 8484) and can integrate with existing infrastructure, allowing organizations to maintain unencrypted DNS traffic if needed. DoH is available for Windows Server 2025 systems updated to the latest Patch Tuesday release, and Microsoft has provided guidance on enabling this feature. However, DNS traffic exchanged between two DNS servers will not be encrypted by DoH.
Windows Server 2025 Adds DNS Over HTTPS for Secure DNS Traffic
Winsage
June 13, 2026

Windows Server 2025 Adds DNS Over HTTPS for Secure DNS Traffic

Microsoft has rolled out support for DNS over HTTPS (DoH) in Windows DNS Server as part of the Windows Server 2025 update. This feature enhances the security of DNS communications through encryption and server authentication, allowing encrypted client-to-resolver traffic in on-premises DNS environments. DoH encrypts DNS queries and responses using HTTPS, protecting sensitive information from interception or alteration. It also uses digital certificates for DNS server authentication to reduce spoofing and impersonation risks. The feature is compatible with existing Windows DNS Server configurations and supports both encrypted and traditional DNS. DoH support is available on Windows Server 2025 with the June 9, 2026 update or newer. Administrators must configure a trusted TLS certificate and enable DoH in the DNS Server service to deploy this feature. Microsoft plans to extend encryption capabilities to include communication between the Windows DNS Server and upstream DNS resolvers in the future.
z3soft sets a new standard in the security market with next-generation integrated security solutions
Tech Optimizer
April 5, 2026

z3soft sets a new standard in the security market with next-generation integrated security solutions

z3soft is developing the Agentic Security Platform (ASP), which integrates large language models, antivirus solutions, and comprehensive file security to shift from passive to proactive cybersecurity measures. CEO Park Ju-seon highlights the need for a broader market strategy to address challenges in the domestic security market, which is dominated by a few players. The ASP aims to combine legacy security systems with AI technology for enhanced security management. z3soft is focusing on creating a 'cyber immunity' solution for AI environments, integrating Zero Trust principles for data protection. The company plans to foster an integrated security ecosystem through partnerships with smaller firms and aims to make advanced security solutions accessible to small and medium-sized enterprises (SMEs) via a subscription model. z3soft intends to validate its business model in Japan and the U.S. before introducing it to South Korea, with goals set for market entry by 2027 and the launch of zero-trust firewalls in Japan and an integrated security platform in the U.S. Park anticipates that significant changes in the domestic market may take five to ten years.
How AI And Hacking Professionalism Are Overwhelming Endpoint Security
Tech Optimizer
March 19, 2026

How AI And Hacking Professionalism Are Overwhelming Endpoint Security

The digital landscape is transforming due to the professionalization of cybercrime, which is now a significant part of organized crime, second only to drug trafficking. Malware includes various types such as viruses, browser hijackers, password stealers, Trojans, botnet malware, and ransomware. Traditional antivirus solutions rely on signature-based detection, heuristic analysis, and behavior monitoring, but these methods can lead to false positives and negatives. The evolution of cybersecurity has seen the rise of "Ransomware-as-a-Service" (RaaS) and the use of polymorphic malware that changes its signature, making traditional defenses ineffective. Hackers are also using AI and machine learning to evade behavioral monitoring. New defense strategies include Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR), which focus on monitoring for breaches rather than preventing them. Leading vendors in this space include CrowdStrike, SentinelOne, Microsoft, and Palo Alto Networks. The zero trust security framework treats all access attempts as potentially hostile and emphasizes the integration of various security technologies. Emerging startups like FinalAV Security are developing zero trust solutions for consumers and small businesses, focusing on prevention rather than detection.
Microsoft Unveils Windows 11 Security, Resilience Features
Winsage
November 18, 2025

Microsoft Unveils Windows 11 Security, Resilience Features

Microsoft is enhancing the security framework of Windows through the Secure Future Initiative, focusing on trust, privacy, and enterprise controls. Key features include the introduction of Post-Quantum Cryptography (PQC) APIs for quantum-safe encryption, and an upgrade to BitLocker with hardware-accelerated support for improved disk encryption, set to roll out on new Windows 11 devices in Spring 2026. Microsoft is also integrating passkey manager support with Windows Hello, allowing users to choose from various passkey managers. Windows 11 employs App Control for Business to ensure only trusted applications run, while Microsoft Intune’s Managed Installer helps IT teams manage business applications. Additionally, Sysmon functionality will be integrated into Windows 11 and Windows Server 2025 for better threat detection. Microsoft is implementing Zero Trust DNS for encrypted name resolution and supporting Wi-Fi 7 for Enterprise with WPA3-Enterprise authentication. The Windows Resiliency Initiative (WRI) includes stricter driver standards, a shift in antivirus enforcement from kernel to user mode, and new safeguards like driver isolation and DMA remapping to enhance system stability.
Productivity and Workflow Apps Target for Android Malware and IoT Attacks: Study
AppWizard
November 6, 2025

Productivity and Workflow Apps Target for Android Malware and IoT Attacks: Study

- There has been a 67% year-over-year increase in malware aimed at mobile devices. - A 387% rise in IoT and OT attacks has been observed, particularly in the energy sector. - Researchers identified 239 malicious applications on the Google Play Store, which collectively had 42 million downloads. - A significant amount of malware was found in the "Tools" category, where malicious apps disguised themselves as legitimate productivity tools. - The manufacturing sector is a primary target for mobile and IoT attacks, with manufacturing and transportation industries accounting for 20.2% of all observed IoT malware attacks. - Mobile attacks are primarily concentrated in India, the United States, and Canada, with the U.S. being the epicenter for IoT threats, accounting for 54% of incidents. - India leads in mobile attacks at 26%, followed by the U.S. at 15% and Canada at 14%, with India experiencing a 38% increase in mobile threat attacks compared to the previous year. - There is a shift from card-focused fraud schemes to mobile payment methods among threat actors.
Search