{"data":[{"_meta":{"retrieved_2nd_on":1793848729},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1793719118,"created_utc":1793719118,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1xmvowo","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1xmvowo","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1xmvowo/octobers_ai_security_news_for_small_it_teams_with/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1793719126,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"Michael here. I work on the NordLayer team, so keep that in mind. A lot happened in AI in October. Here’s October’s AI security news that matters for small IT teams. I added who each story is for and 1 step I’d take.\n\n**1. Hackers used AI agents in real attacks.** Microsoft tied ARTEX (an AI agent framework for running attacks) to the ConnectWise supply-chain attack. It tried to sign in to over 2,250 Microsoft 365 tenants. Those were attempts, not confirmed breaches. \n\nIn a separate campaign, CrowdStrike tracked VAPOR PANDA (a China-linked hacker group) using AI agents against 200+ organizations. They got in at 9 of them. Agents let hackers run recon and privilege escalation against more targets at once.\n\n**Who it’s for:** everyone on Microsoft 365, and especially ConnectWise users.\n\n**Step**: make sure MFA covers every admin account and check failed logins in your sign-in logs.\n\n**2. At least 9 AI developer platforms had security incidents.** Wiz found incidents at Fireworks AI, Zeabur, Lightning AI, OpenCode, Railway, Warp, Northflank, and 2 others. Stolen AI credentials came up again and again. In 2 separate cases, attackers used stolen credentials to send about 2.5 million requests to Amazon Bedrock (AWS’s service for AI models). That’s over $100,000 at list prices.\n\n**Who it’s fo**r: teams that store AI API keys in developer platforms or pay for model access through AWS.\n\n**Step**: rotate the AI API keys stored in those services and set spend alerts on your model accounts.\n\n**3. LiteLLM 1.107.0 was malicious.** LiteLLM is an open-source Python library that connects apps to AI providers. The bad version shipped through PyPI and the official container images. It ran when Python started, even if your app never imported LiteLLM. It went after cloud, dev environment, and AI tool credentials.\n\n**Who it’s for**: only teams that build with Python and pull LiteLLM in directly or through another package. If nobody on your team writes code, you can skip this one.\n\n**Step**: search dev machines, CI runners, and images for 1.107.0. If you find it, rotate every credential those hosts had.\n\n**4. AI agents went outside their task without any hacker involved.** OpenAI reported 2 internal cases. Coding agents turned off monitoring alerts or removed a monitoring integration. One agent said it kept the monitor running. But it hadn’t. \n\nAnthropic’s IPO filing also listed 4 cases where models reached live external systems during testing. The cause was misconfigured access controls. Neither report showed customer data at risk.\n\n**Who it’s for**: teams that let AI coding agents run commands or touch production systems.\n\n**Step**: give each agent its own identity with least-privilege access. Send its logs somewhere it can’t edit.\n\n**5. AI models now find exploitable bugs.** Anthropic said an unreleased research model found and exploited bugs in Chrome, Safari, Android, Windows, and Linux. Chrome alone got 62 patched CVEs out of it. All of it went through coordinated disclosure. \n\nThe same week, Google released Gemini 4 Carbon. It scored 88.2% on SEC-bench Pro (a vulnerability discovery benchmark) and went to selected defenders first. \n\nOpenAI released GPT-6.1 Terra and rated it Critical for cyber under its Preparedness Framework (OpenAI’s internal risk scale).\n\n**Who it’s for**: everyone, because the time between a bug and an exploit keeps shrinking.\n\n**Step**: if browser and OS updates wait for a monthly cycle, move them to weekly.\n\n\n\n**If you’re writing an AI agent policy:** NIST, the NSA, and CISA published voluntary guidance on AI-agent incident response on October 16. Microsoft also announced task-scoped agent identities and permissions on October 19.\n\nIf you changed how you store AI API keys or scope agent permissions after October, I’d like to hear what worked for your team! ","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":121,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"October’s AI security news for small IT teams, with 1 step per story","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1xmvowo/octobers_ai_security_news_for_small_it_teams_with/","user_reports":[],"view_count":null,"visited":false,"wls":6},{"_meta":{"retrieved_2nd_on":1793801001},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1793196200,"created_utc":1793196200,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1xhoygy","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1xhoygy","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1xhoygy/if_an_api_key_showed_up_in_a_coding_agent_session/","pinned":false,"profile_img":"https://styles.redditmedia.com/t5_a3gyxw/styles/profileIcon_fmq7xj3q5xcc1.jpg?frame=1&auto=webp&crop=256%3A256%2Csmart&s=42f8bcbc770866081d59b9a1560c888173e87e56","pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1793196214,"saved":false,"score":3,"secure_media":null,"secure_media_embed":{},"selftext":"Most IT admins know that Cursor, Claude Code and Codex are installed, but far fewer can say which files an agent read, what commands it ran or which MCP servers it connected to.\n\nTake a simple case. A developer asks an agent to fix an auth bug. The agent searches the repo, opens config files, runs terminal commands and pulls context from an MCP server. The PR shows the final diff and nothing else. If that MCP server wasn’t approved, or a credential showed up mid-session, there’s no record to check.\n\nAn approved-tools list won’t help here, since it only says what developers should use. Blocking agents won’t help either because the usage will move to personal setups you can’t see at all.\n\nWe created **NordLayer AI Scout** for cases like these:\n\n* An agent connects to an MCP server that isn’t on your approved list\n* An agent reads an API key from a .env file, or a developer pastes one into a prompt\n* An agent opens files outside the project it was asked to work on\n* A terminal command fails or does something unexpected, and you need the full sequence of what led up to it\n* Security asks what agents have access to during an incident review\n* You need real usage data before an AI usage review\n\nA desktop sensor reconstructs sessions from supported local coding agents and brings them into one console: prompts and agent reasoning (based on your retention settings), tool calls with inputs and outputs, commands and errors, files read or modified, detected credentials and other sensitive data, and the MCP servers and external connections in use.\n\nIt records and reconstructs activity and doesn’t block agent actions. The goal is to give eng and security teams enough information to set controls that match real risk, so developers can keep using the tools.","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":120,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"If an API key showed up in a coding agent session, where would you look?","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":3,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1xhoygy/if_an_api_key_showed_up_in_a_coding_agent_session/","user_reports":[],"view_count":null,"visited":false,"wls":6},{"_meta":{"retrieved_2nd_on":1793096284},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"contest_mode":false,"created":1792491484,"created_utc":1792491484,"discussion_type":null,"distinguished":null,"domain":"v.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1xaocj2","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":true,"likes":null,"link_flair_background_color":"","link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","locked":false,"media":{"reddit_video":{"bitrate_kbps":null,"dash_url":"https://v.redd.it/wdc14jf5llwh1/DASHPlaylist.mpd?f=hd%2CsubsAll%2ChlsSpecOrder%2Cvp9&v=1&a=1795083512%2CYTljNDBlNDAyNGE5NGVhN2Y5MmExZjFjMmVlMDQ2NjNmY2Q4YjAzMTA3MTgzNzhkMzhhYjU2ZDgwNmJkZDc0Mw%3D%3D","duration":58,"fallback_url":"https://packaged-media.redd.it/wdc14jf5llwh1/dl/m2-res_720p.mp4?m=DASHPlaylist.mpd&v=1&e=1792508400&s=352e05a381be833c8a24f39b6717347f2da2d799","has_audio":null,"height":1080,"hls_url":"https://v.redd.it/wdc14jf5llwh1/HLSPlaylist.m3u8?f=hd%2CsubsAll%2ChlsSpecOrder%2Cvp9&v=1&a=1795083512%2CYzk4NmQ3ZWJiYTlhZDJkZDE5NzRlYzQyZWUxZjNjOWY2ZTNmYTQ0YzY0NDZmNjNmM2YyZjRhNjI3MzliYzUyYg%3D%3D","is_gif":false,"scrubber_media_url":"https://v.redd.it/wdc14jf5llwh1/CMAF_96.mp4","transcoding_status":"completed","width":1920}},"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1xaocj2","no_follow":false,"num_comments":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://v.redd.it/wdc14jf5llwh1"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1xaocj2/you_cant_secure_what_you_cant_see_that_includes_ai/","pinned":false,"post_hint":"hosted:video","preview":{"enabled":false,"images":[{"id":"ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI","resolutions":[{"height":60,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=108&format=pjpg&auto=webp&s=74ffe9cc2937fa74064d266856f207bec10c4e0c","width":108},{"height":121,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=216&format=pjpg&auto=webp&s=974f94c4c8672d23462ce7d9832e2075152a7a48","width":216},{"height":180,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=320&format=pjpg&auto=webp&s=5d9296c8d9ceda08cf172618a2fc8562d7320435","width":320},{"height":270,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=480&format=pjpg&auto=webp&s=ae345cee8a5c2edbde70f02b7f517a50064ba794","width":480},{"height":360,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=640&format=pjpg&auto=webp&s=cce9ac9ba4cc9f9a8dec79f93ceb8fb044c960e5","width":640},{"height":405,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=720&format=pjpg&auto=webp&s=2a3ec53faee441b9a95fb224e8e93cccf77f48ad","width":720},{"height":540,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=960&format=pjpg&auto=webp&s=f0da05e43fba45c9fd5cbdf4c6ec3a86863f8d81","width":960},{"height":607,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=1080&format=pjpg&auto=webp&s=bc3aba25ae9bf7ccfde625c46982991885837377","width":1080}],"source":{"height":1080,"url":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?format=pjpg&auto=webp&s=f027057ef4586159be0bb813a6a11623d7756851","width":1920},"variants":{}}]},"profile_img":"https://styles.redditmedia.com/t5_a3gyxw/styles/profileIcon_fmq7xj3q5xcc1.jpg?frame=1&auto=webp&crop=256%3A256%2Csmart&s=42f8bcbc770866081d59b9a1560c888173e87e56","pwls":6,"quarantine":false,"removal_reason":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1792491512,"saved":false,"score":2,"secure_media":{"reddit_video":{"bitrate_kbps":null,"dash_url":"https://v.redd.it/wdc14jf5llwh1/DASHPlaylist.mpd?f=hd%2CsubsAll%2ChlsSpecOrder%2Cvp9&v=1&a=1795083512%2CYTljNDBlNDAyNGE5NGVhN2Y5MmExZjFjMmVlMDQ2NjNmY2Q4YjAzMTA3MTgzNzhkMzhhYjU2ZDgwNmJkZDc0Mw%3D%3D","duration":58,"fallback_url":"https://packaged-media.redd.it/wdc14jf5llwh1/dl/m2-res_720p.mp4?m=DASHPlaylist.mpd&v=1&e=1792508400&s=352e05a381be833c8a24f39b6717347f2da2d799","has_audio":null,"height":1080,"hls_url":"https://v.redd.it/wdc14jf5llwh1/HLSPlaylist.m3u8?f=hd%2CsubsAll%2ChlsSpecOrder%2Cvp9&v=1&a=1795083512%2CYzk4NmQ3ZWJiYTlhZDJkZDE5NzRlYzQyZWUxZjNjOWY2ZTNmYTQ0YzY0NDZmNjNmM2YyZjRhNjI3MzliYzUyYg%3D%3D","is_gif":false,"scrubber_media_url":"https://v.redd.it/wdc14jf5llwh1/CMAF_96.mp4","transcoding_status":"completed","width":1920}},"secure_media_embed":{},"selftext":"NordLayer AI Scout shows you exactly how AI is used across your organization: \n\n\\- See which AI tools and coding agents employees rely on\n\n\\- Warn, redact, or block prompts with sensitive data in web chats\n\n\\- Track MCP servers and skills that coding agents can access\n\n\\- Measure real AI adoption across teams\n\nVisibility for your team. Guardrails for your data. Less guesswork and more informed decisions for everyone.","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":117,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://external-preview.redd.it/ZTZwdXR4YWJsbHdoMW3Gp_eEtc33jFSoYXcIFyQxruj8-VOoxR3oeUFSVnxI.png?width=140&height=78&format=jpg&auto=webp&s=9fb7b506a78dae2d528f59258ecdb5f792ac705a","thumbnail_height":78,"thumbnail_width":140,"title":"You can’t secure what you can’t see. That includes AI.","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":2,"upvote_ratio":1,"url":"https://v.redd.it/wdc14jf5llwh1","url_overridden_by_dest":"https://v.redd.it/wdc14jf5llwh1","user_reports":[],"view_count":null,"visited":false,"wls":6},{"_meta":{"retrieved_2nd_on":1792847886},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1791980588,"created_utc":1791980588,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1x5psuy","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":{"reddit_video":{"bitrate_kbps":null,"dash_url":null,"duration":null,"fallback_url":"https://preview.redd.it/ii7h615aefvh1.gif?width=1200&format=mp4&s=c2ed113a40559d003a9cb6f708b519b9c29c9c93","has_audio":null,"height":1200,"hls_url":null,"is_gif":false,"scrubber_media_url":null,"transcoding_status":"completed","width":1200}},"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1x5psuy","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/ii7h615aefvh1.gif"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1x5psuy/your_teams_are_using_ai_do_you_know_how/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"ii7h615aefvh1","resolutions":[{"height":108,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=108&crop=smart&format=png8&s=b0a904b8231309f18f8c52de984469d9735285b1","width":108},{"height":216,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=216&crop=smart&format=png8&s=916a86991cb79e53f075e07f9f8814aefd593d6d","width":216},{"height":320,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=320&crop=smart&format=png8&s=91b81b28dabd31aed81f64c19e354437249f1bba","width":320},{"height":640,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=640&crop=smart&format=png8&s=942ff425980bd5fd0b8a52346e54362d6dbf53f6","width":640},{"height":960,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=960&crop=smart&format=png8&s=e8210e35e124ae29699c9862ffa70c0036504222","width":960},{"height":1080,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=1080&crop=smart&format=png8&s=238137259bd11e798db01634ff341818331420d8","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ii7h615aefvh1.gif?format=png8&s=c071dfda9e816cca1ca23c6b93706a4b5ae55c03","width":1200},"variants":{"gif":{"resolutions":[{"height":108,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=108&crop=smart&s=f42651392ae83cce9a661f5dc8bf1d9d1e42afd8","width":108},{"height":216,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=216&crop=smart&s=3a5db08ab43c5a39462b80631e8ff64a1648f52c","width":216},{"height":320,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=320&crop=smart&s=4fc5dc81eb8189052c79cd6f8749e85dc53d1698","width":320},{"height":640,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=640&crop=smart&s=71750c1d4d0c368c5a38c478501649d4c661514c","width":640},{"height":960,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=960&crop=smart&s=1e66fbeff59ed7abc6a63caa7128349672b5a92c","width":960},{"height":1080,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=1080&crop=smart&s=f4b65f26e8387bb8b2e5fb914b3f3bd6ae4e7ff5","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ii7h615aefvh1.gif?s=431e9a3fefb3278a4f8c34da0cd8e10ed086d89f","width":1200}},"mp4":{"resolutions":[{"height":108,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=108&format=mp4&s=7114271638c13a998d79c6bdee14f5a4a21e0089","width":108},{"height":216,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=216&format=mp4&s=471073491229e37eb40934c5c412509bec80c225","width":216},{"height":320,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=320&format=mp4&s=b7c993b00da41e62fd4bbef153b15844475a33a4","width":320},{"height":640,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=640&format=mp4&s=4a5533474910fac04762f4309690dc4fd64d07b3","width":640},{"height":960,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=960&format=mp4&s=ffab60df78bba79df2802099f6cb44556b42bcae","width":960},{"height":1080,"url":"https://preview.redd.it/ii7h615aefvh1.gif?width=1080&format=mp4&s=971a774ba9f81ef37f7f9495db662b50fd2ab984","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ii7h615aefvh1.gif?format=mp4&s=aefb9f9c729a25da58de93b7938b63669904689c","width":1200}}}}]},"profile_img":"https://www.redditstatic.com/avatars/defaults/v2/avatar_default_3.png","pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1791980602,"saved":false,"score":3,"secure_media":{"reddit_video":{"bitrate_kbps":null,"dash_url":null,"duration":null,"fallback_url":"https://preview.redd.it/ii7h615aefvh1.gif?width=1200&format=mp4&s=c2ed113a40559d003a9cb6f708b519b9c29c9c93","has_audio":null,"height":1200,"hls_url":null,"is_gif":false,"scrubber_media_url":null,"transcoding_status":"completed","width":1200}},"secure_media_embed":{},"selftext":"Which tools are in use? What goes into prompts? What do coding agents access?\n\nIf you’re guessing, you might already be behind.\n\nIntroducing NordLayer AI Scout: one view of AI tools, prompts, and coding agents across your workforce.\n\nSo you know what’s being used, what data is shared, and what your AI agents access.\n\nLearn more about NordLayer AI Scout and start your 30-day trial","send_replies":true,"spoiler":false,"stickied":true,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":117,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/ii7h615aefvh1.gif?frame=1&width=140&height=140&auto=webp&s=93f8203adf0aa1dad4df4e200154a8ba3a8abb78","thumbnail_height":140,"thumbnail_width":140,"title":"Your teams are using AI. Do you know how?","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":3,"upvote_ratio":1,"url":"https://i.redd.it/ii7h615aefvh1.gif","url_overridden_by_dest":"https://i.redd.it/ii7h615aefvh1.gif","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1x5psuy?m=AQAAusXQamSguceoF9c-eh1KWE7pU4hYHeqRtFUdcOyoP3eLeR8N","wls":6},{"_meta":{"retrieved_2nd_on":1792139698},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1791534895,"created_utc":1791534895,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1x1g04x","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1x1g04x","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1x1g04x/ai_accountability_when_youre_a_1person_it_team/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1791534919,"saved":false,"score":2,"secure_media":null,"secure_media_embed":{},"selftext":"You’re the only IT person at a company with 100-200 employees, and pretty much all of them are using AI at this point: definitely ChatGPT, Claude and Copilot, and probably a bunch of personal accounts.\n\nOne day a EU customer sends over a security questionnaire and you’re expected to explain which AI tools employees are allowed to use, whether you can detect someone uploading customer data into ChatGPT, what logs you have, who investigates violations, how long you keep all that info etc. \n\nSo where do you even start when AI security is just 1 of the 100 things you’re responsible for?\n\nFirst thing I’d figure out is **what AI tools people are using** (everything). Random browser extensions, coding agents, desktop apps, personal accounts - all of it. And some of those tools won’t show up in every monitoring tool.\n\nThen there’s the **policy** side of things. Someone (not you) needs to decide what’s approved and what employees absolutely cannot put into AI (customer records, credentials, confidential source code, you name it). This needs to come from management, NOT you making up rules as you go. Once that’s agreed on, it’s time to figure out whether your existing stack can detect or block any of it. Important: document approvals and changes. If something can’t be enforced technically, also say so. \n\nThen, **logging**. Say a customer asks for 3 months of AI activity. Can you pull that and show who used which service, when, whether something triggered a security policy and what happened afterward? You need to know what you’re collecting (more importantly, what you’re missing).\n\nFinally, **what happens when something goes wrong**?\n\nSomeone uploads a customer spreadsheet into an AI tool they shouldn’t be using - who finds out, investigates and documents what was done about the data?\n\nEven a basic ticketing system could work, as long as you’re recording it. Most important is being able to prove you followed up.\n\nAs for the retention and getting the data out of your tools - that’s something legal or compliance needs to weigh in on: GDPR can come into play here. The EU regulations are their own rabbit hole. Having two employees in Europe and customers there doesn’t mean every EU AI requirement applies to you, but it’s definitely something worth reviewing, e.g. the EU AI Act can reach US companies in certain situations, including where AI outputs are used in the EU.\n\nOverall, management needs to own the policy decisions; legal needs to figure out which regulations and obligations apply. Your goal is to get to a point where, when a customer or auditor asks what you’re doing about AI usage, you’ve got something real to show them","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":117,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"AI accountability when you’re a 1-person IT team","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":2,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1x1g04x/ai_accountability_when_youre_a_1person_it_team/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1x1g04x?m=AQAAx_jJan2DaUdNIm_aRrpIHZ-Se7a1H1HpjUHiW2NZbnqgpx9s","wls":6},{"_meta":{"retrieved_2nd_on":1792107946},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1791285786,"created_utc":1791285786,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1wz01xq","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1wz01xq","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1wz01xq/a_few_thoughts_on_shadow_ai_detection_from_a/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1791285811,"saved":false,"score":3,"secure_media":null,"secure_media_embed":{},"selftext":"I saw a post from someone who had been asked to build shadow AI detection from scratch [https://www.reddit.com/r/cybersecurity/comments/1wghgug/wtf\\_did\\_i\\_get\\_intostanding\\_up\\_shadow\\_ai\\_detection/](https://www.reddit.com/r/cybersecurity/comments/1wghgug/wtf_did_i_get_intostanding_up_shadow_ai_detection/)  \n\nMy answer became too long so here it is\n\n1. **First, I’d figure out what shadow AI means for your org.** I don’t think one can build useful detections until you understand 1) what’s considered normal AI use, 2) the scope of shadow AI. The latter can (but not necessarily) include chatbots, coding assistants, APIs, browser extensions, agents, random SaaS tools with AI bolted onto them, etc. Some of them will be considered normal\n2. **Then I’d build the most basic inventory possible with whatever data I already have.** If the environment is completely bare, I’d probably check what I can see right now and build from there. Like, what AI services are there, who’s using them, do we know whether they’re approved, restricted, blocked, or just unknown\n3. **It’s important not to fool yourself into thinking you have more visibility than you do.** A tool might show me traffic to ChatGPT, but I still don’t know what somebody typed into it or whether they pasted sensitive data. I’ll need to know things like, this tool shows me this, it doesn’t show me this, here are the gaps.\n4. **Someone needs to decide which tools are allowed.** Before I create alerts for any AI services, there needs to be a person who reviews new tools, decides whether they’re acceptable, and who owns the findings when things look bad\n5. **I’d care more about risky behavior than raw AI usage.** The metrics would be about somebody uploading sensitive data, connecting an unknown AI service into the org’s systems, using an API in a weird place, giving an agent broad access to internal resources, etc. I’m not sure data like “people used AI 10,000 times this month” tells me anything about risk.\n6. **Some investigation questions:** if I find something concerning, then what? What evidence do I collect and who do I send it to? What can they do about it? Especially if detection and response belong to different teams, I’d want this handoff figured out early.\n7. **Until I know the manual process works, I probably wouldn’t start automation.** Better first have findings that someone cares about, then XSOAR starts making sense for enrichment, handoffs, response, whatever. \n8. **Definition of “done” for the first 90 days shouldn’t be too ambitious.** The first milestone would probably be being able to answer what AI tools are being used; which ones are approved vs unknown; which ones are touching sensitive data or important systems; finally when something happens, who owns it\n9. **The governance side will be slower than the technical detection.** It may be relatively easy to find an AI service in logs, but then there’s the next problem: figuring out why people are using it, whether there’s an approved alternative, getting somebody to formally approve or reject it and, most importantly, making that process repeatable across the company. It will take way longer.\n\n","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":115,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"A few thoughts on shadow AI detection from a completely bare start","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":3,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1wz01xq/a_few_thoughts_on_shadow_ai_detection_from_a/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1wz01xq?m=AQAAsyvGaojGE0RfpjiYvkSfmaEzjoVCp6dZ8C1TN5sKLYV0uZBl","wls":6},{"_meta":{"retrieved_2nd_on":1791538261},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1790932913,"created_utc":1790932913,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1wvp87u","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1wvp87u","no_follow":true,"num_comments":1,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1wvp87u/9_completely_normal_ai_agent_incidents_reported/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1790932938,"saved":false,"score":4,"secure_media":null,"secure_media_embed":{},"selftext":"1. **OpenAI agent breached Australia’s Medicare statistics portal.** Disclosed Sep 24. The access happened on June 18. An internal research model retrieved internal files, credentials, and aggregate statistics (no individual patient records were reached). \n2. **OpenAI disclosed that its research agents leaked 53 user images.** The agents had uploaded the images to external websites - the company reported on Sep 25.\n3. **Claude accessed a real system and read personal information.** Disclosed Sep 9. During a January security test, an early build obtained admin access, collected credentials and read one person’s sensitive information. \n4. **DeepSeek-powered agents compromised 395 organizations through PaperCut.** Also disclosed Sep 9. The campaign began Aug 31 and reached at least 440 compromised installations across 395 named organizations in 48 countries. Credential theft and domain-admin access in some cases.\n5. **Gemini broke into 3 real companies during testing.** Reported Sep 18, incidents from May. In one case, Gemini worked out the password; in the other two cases it reused credentials found in a public repository. Google says the model stopped after recognizing the targets were real companies outside its test scope, which gives us all hope. \n6. **AI agents stole more than 600,000 credit-card records.** Reported Sep 22 by Gambit. The campaign started in July. Between Sep 10 and 15, the agents compromised at least 27 companies to varying degrees, planted skimmers and stole card data. One agent also destroyed a victim’s data during cleanup\n7. **An enterprise was breached by AI agents in under 10 h.** Disclosed Sep 2 by Unit 42. Using stolen privileged credentials, the attacker reached source repositories and used the victim’s own cloud AI services against it. Neither the victim nor the incident date was disclosed.\n8. **An OpenAI agent bypassed network restrictions.** Happened Sep 20. An internal research agent used a gap in DNS filtering to contact an external chatbot. The automated shutdown did not shut it down. Staff stopped the run about 2.5 h after the alert, and OpenAI paused the relevant training and tests for its most capable models.\n9. **AI agents attempted to hack US and Canadian government websites.** Detailed Sep 30 by Transluce. The May and June attempts targeted the US Education Department and Library and Archives Canada. Both failed, no non-public data was reached.","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":115,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"9 completely normal AI agent incidents reported in September","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":4,"upvote_ratio":0.84,"url":"https://www.reddit.com/r/NordLayer_official/comments/1wvp87u/9_completely_normal_ai_agent_incidents_reported/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1wvp87u?m=AQAAScnAavQ9xlCUzoMIvoR96TZDEjmEqRxjYMYiq7_cXA5-0enQ","wls":6},{"_meta":{"retrieved_2nd_on":1790804519},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"Buinovskis","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1k2fxyzqxm","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1790674896,"created_utc":1790674896,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1wt5qyu","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1wt5qyu","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1wt5qyu/how_to_block_websites_with_nordlayer/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1790674917,"saved":false,"score":2,"secure_media":null,"secure_media_embed":{},"selftext":"NordLayer has 2 separate products that can block web access in different ways:\n\n* **NordLayer** is the main network security product. It makes sense if you want website rules to apply across employees’ devices and browsers while they’re connected through NordLayer.\n* **NordLayer Browser** is a managed browser. It makes sense if you mainly want to control what employees can open and do inside their work browser. The rules apply inside NordLayer Browser, not other browsers.\n\nBoth are managed from the same Control Panel.\n\n|What you want to block|Examples|What to use|Important detail|Starting price\\*|\n|:-|:-|:-|:-|:-|\n|**Specific websites**|facebook.com, chatgpt.com, any other domain|**NordLayer Browser → Routing policies**|Add a domain to a blocklist and apply it to selected teams or everyone.|**NordLayer Browser Premium:** from **$4/user/month** \\+ $40/month for the required company server.|\n|**Website categories**|Gambling, AI, social media, streaming, adult content|**NordLayer → DNS Filtering by Category**  or  **NordLayer Browser → DNS Filtering by Category**|Choose from 50+ categories. Admins can block **up to 30 categories at once**.|**NordLayer Core:** from **$11/user/month** \\+ $40/month server.   **NordLayer Browser Premium:** from **$4/user/month** \\+ $40/month server.|\n|**Known malicious websites**|Known phishing, malware, and other dangerous sites|**NordLayer → Web Protection**  or  **NordLayer Browser → Web Protection**|Blocking is automatic, based on threat intelligence. You don’t need to enter every bad site yourself.|**NordLayer Lite:** from **$8/user/month**.   **NordLayer Browser Premium:** from **$4/user/month** \\+ $40/month server.|\n|**Apps and online services**|YouTube, TikTok, Netflix, Reddit, Dropbox|**NordLayer → Application Blocker**  or  **NordLayer Browser → Routing policies**|NordLayer can block **400+ apps, services, and protocols**.   Browser controls apply to web apps used inside NordLayer Browser.|**NordLayer Core:** from **$11/user/month** \\+ $40/month server.   **NordLayer Browser Premium:** from **$4/user/month** \\+ $40/month server.|\n|**Sites already blocked by your DNS provider**|Your company already has a DNS blocklist|**Custom DNS** in NordLayer or NordLayer Browser|NordLayer uses your existing DNS service and its filtering rules. It does not create the blocklist for you.|**NordLayer Core:** from **$11/user/month** \\+ $40/month server.   **NordLayer Browser Premium:** from **$4/user/month** \\+ $40/month server.|\n\nIn short, NordLayer Browser controls apply inside the **managed browser**, while NordLayer controls apply more broadly **across the device or network connection**.\n\n\\*All plans have a 5-user minimum. These are NordLayer’s starting prices as of September 2026. The Core plan and NordLayer Browser Premium require the additional $40/month server.","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":115,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"How to block websites with NordLayer","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":2,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1wt5qyu/how_to_block_websites_with_nordlayer/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1wt5qyu?m=AQAAZdm8aq0JoMxbkvU4IhsEhxi4BAGM1GuOCxf-RSC5ZgFiERFT","wls":6},{"_meta":{"retrieved_2nd_on":1788393680},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1788264063,"created_utc":1788264063,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1w49x24","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1w49x24","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/1bcmcllwyvmh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1w49x24/new_season_same_old_risks/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"1bcmcllwyvmh1","resolutions":[{"height":108,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=108&crop=smart&auto=webp&s=b87e6ed9536124269ee1f5bfea7824b940b43d1d","width":108},{"height":216,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=216&crop=smart&auto=webp&s=430db82d06c4f53d28fb8979147f1cd8b68e640e","width":216},{"height":320,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=320&crop=smart&auto=webp&s=9a34f0cc9d9b46d61f520bf95bbeee31671c5982","width":320},{"height":640,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=640&crop=smart&auto=webp&s=5953c44a2ed67b8c27cc20100bc2a0373e6497aa","width":640},{"height":960,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=960&crop=smart&auto=webp&s=3d25a3d61ba05be90f3d7d11049fa3003f39e64a","width":960},{"height":1080,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?width=1080&crop=smart&auto=webp&s=0a1b039503015e57d562bfa4e1fa8cc5f33b3879","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/1bcmcllwyvmh1.png?auto=webp&s=14e67e3e978404e28567980257eff4e965fa4a50","width":1200},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1788264083,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"  \nAs employees return, more devices connect, more apps go remote, and more room for human error opens up.  \n  \nNordLayer secures every connection with business VPN, ZTNA, DNS filtering, and network access control – so small mistakes don't become big breaches.  \n  \nGet 10% OFF a new annual plan with code nl-fall-26 [https://nordlayer.com/pricing/](https://nordlayer.com/pricing/)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":110,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/1bcmcllwyvmh1.png?width=140&height=140&auto=webp&s=9cac0c734f7afbe31329527b57d82e5cf7520fb6","thumbnail_height":140,"thumbnail_width":140,"title":"New season, same old risks 🍂","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/1bcmcllwyvmh1.png","url_overridden_by_dest":"https://i.redd.it/1bcmcllwyvmh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1w49x24?m=AQAAEhCYanUWY0IVZKdhyjLx69nyEj7tLsH3RMlZvzQl45g49B8u","wls":6},{"_meta":{"retrieved_2nd_on":1787176062},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1787046456,"created_utc":1787046456,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1vrkkr0","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"#f2ffff","link_flair_css_class":"","link_flair_richtext":[],"link_flair_template_id":"30f93eb0-d8d1-11ef-b6b9-a6ccf0b8effd","link_flair_text":"News & Announcements","link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1vrkkr0","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/ldl2p34eu3kh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1vrkkr0/split_tunneling_shouldnt_force_you_to_choose/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"ldl2p34eu3kh1","resolutions":[{"height":108,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=108&crop=smart&auto=webp&s=39ec3a022c27dc559c496a2b40b65c7d7beb2c1f","width":108},{"height":216,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=216&crop=smart&auto=webp&s=ae6512fe22433126229964e16d1fa9653666bc91","width":216},{"height":320,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=320&crop=smart&auto=webp&s=ec079d5285a475b1d24a82f6e06b98e44334c351","width":320},{"height":640,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=640&crop=smart&auto=webp&s=013016e158a010980420c736cb22c6f4539e2e07","width":640},{"height":960,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=960&crop=smart&auto=webp&s=9ac53c9bc23ae3ebf1859f0668bd45c71589a8c2","width":960},{"height":1080,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?width=1080&crop=smart&auto=webp&s=eff0d6a49de48df44ecbe3b103f4f680660b3ad0","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ldl2p34eu3kh1.png?auto=webp&s=e149e3d7fa017d7eed755ec9b29f3ba388df6ba4","width":1200},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1787046475,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"If you’ve ever had to deal with an app or service that just doesn’t play nicely with a VPN, this one’s for you.\n\nNordLayer now supports **Exclude Split Tunneling**.\n\nInstead of choosing what traffic goes through the VPN, you can choose what should stay outside it.\n\nFor example, you can:\n\n→ Keep your regular business traffic protected by the VPN  \n→ Let specific IPs or subnets connect directly to the internet  \n→ Avoid routing issues with services that don’t work well over a VPN  \n→ Adapt traffic routing to fit your network setup\n\nUntil now, NordLayer supported Include Split Tunneling, where you picked the traffic that should use the VPN.\n\nNow you can define the traffic that shouldn’t.\n\nBasically, more control over where your traffic goes, without having to choose between “everything through the VPN” and “nothing through the VPN.”\n\n**Exclude Split Tunneling is now** [available ](https://nordlayer.com/blog/features-in-review-vpn-split-tunneling/)**in NordLayer!**","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":107,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/ldl2p34eu3kh1.png?width=140&height=140&auto=webp&s=71495ae3b8e59195178fe53133eb8035e8a5b4bc","thumbnail_height":140,"thumbnail_width":140,"title":"Split tunneling shouldn’t force you to choose between “VPN everything” and “VPN only these things.”","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/ldl2p34eu3kh1.png","url_overridden_by_dest":"https://i.redd.it/ldl2p34eu3kh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1vrkkr0?m=AQAAynuFarALl0BM9DXvlkT55Iz18pZRnRfisaqWWreTNVzU5d6l","wls":6},{"_meta":{"retrieved_2nd_on":1786042755},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1785913151,"created_utc":1785913151,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1vfzvi7","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1vfzvi7","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/u925ylii8ihh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1vfzvi7/how_many_browser_extensions_are_installed_across/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"u925ylii8ihh1","resolutions":[{"height":108,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=108&crop=smart&auto=webp&s=07db7a15c395fdfe2187774c81a6c109bfb879f1","width":108},{"height":216,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=216&crop=smart&auto=webp&s=5a9d6e14fc6cc87803a160dbec620cba0a1ef676","width":216},{"height":320,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=320&crop=smart&auto=webp&s=44ae742852e0c1e5ad71a945d4977b1d72c9d54b","width":320},{"height":640,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=640&crop=smart&auto=webp&s=996e01b5c69f6e13b867f6e57ef5c515685675aa","width":640},{"height":960,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=960&crop=smart&auto=webp&s=caf98a5ea91d2d05ca5d1e704f660a943c6114cc","width":960},{"height":1080,"url":"https://preview.redd.it/u925ylii8ihh1.png?width=1080&crop=smart&auto=webp&s=d21890fe3008595fef21357282537cb2979532b1","width":1080}],"source":{"height":1080,"url":"https://preview.redd.it/u925ylii8ihh1.png?auto=webp&s=cda4687acc705205c11d5267a5d81328a3ef8f02","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1785913166,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"Probably more than you think.\n\nExtensions can access website data, passwords, and active sessions. And even a trusted extension can become a risk if it’s compromised, sold, or updated with new permissions.\n\nWith Extension Blocking in NordLayer Browser, admins can now do more than just see what’s installed:\n\n🔍 See extensions across your teams  \n🚫 Block unwanted or risky ones  \n✅ Allow trusted extensions  \n📌 Require the ones your team needs  \n👥 Set policies for specific teams\n\nIt also covers sideloaded extensions, so the ones that usually slip through the cracks don’t get a free pass. Set the policy once. Apply it to the right team. Done. \n\n👉 Learn more about Extension Blocking in NordLayer Browser [HERE](https://nordlayer.com/browser/features/extension-tracking/?utm_source=linkedin&utm_medium=social_media&utm_campaign=)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":105,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/u925ylii8ihh1.png?width=140&height=140&auto=webp&s=dd73fbfea67b690d3cc7429a2b75e76c104abd08","thumbnail_height":140,"thumbnail_width":140,"title":"How many browser extensions are installed across your team right now? 🤔","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/u925ylii8ihh1.png","url_overridden_by_dest":"https://i.redd.it/u925ylii8ihh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1vfzvi7?m=AQAAzjB0ak8THzM7UP17ONBvxQFi1E48iM2fz1qurj0HUce0pimZ","wls":6},{"_meta":{"retrieved_2nd_on":1785896224},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"michael_nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_1egfcluhff","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1785766608,"created_utc":1785766608,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1veepdf","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1veepdf","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/t5tq0itx46hh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1veepdf/july_2026_biggest_breaches_minnesota_water/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"t5tq0itx46hh1","resolutions":[{"height":135,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=108&crop=smart&auto=webp&s=64b560581f9ac67524d0048b7a07efe16d4b22b7","width":108},{"height":270,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=216&crop=smart&auto=webp&s=a44feb87cf456ebe3d23f44085c67fec8192df84","width":216},{"height":400,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=320&crop=smart&auto=webp&s=0b920cae560f855a17015321f545c8eedd8ef9a4","width":320},{"height":800,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=640&crop=smart&auto=webp&s=8e4c3437c7ab2898645465107134a75c5861ca0c","width":640},{"height":1200,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=960&crop=smart&auto=webp&s=d08b0ecc85b3ce6604419b5f24f2f84857705227","width":960},{"height":1350,"url":"https://preview.redd.it/t5tq0itx46hh1.png?width=1080&crop=smart&auto=webp&s=3ef2cf12e456c1d4c65d6dee2eed7851747f0def","width":1080}],"source":{"height":1350,"url":"https://preview.redd.it/t5tq0itx46hh1.png?auto=webp&s=172d1c7183344ded8f80375063dc677ecdb2fc4c","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1785766627,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":105,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/t5tq0itx46hh1.png?width=140&height=140&crop=1:1,smart&auto=webp&s=62cb46b49f5b616bd66be388c8d6ef02522055ba","thumbnail_height":140,"thumbnail_width":140,"title":"July 2026 biggest breaches: Minnesota water systems, OpenAI, and ShinyHunters","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/t5tq0itx46hh1.png","url_overridden_by_dest":"https://i.redd.it/t5tq0itx46hh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1veepdf?m=AQAAY_Rxaseb6VvoKMdPy6TQb4DQznHNAlxaCglt4tBgiLccYCwN","wls":6},{"_meta":{"retrieved_2nd_on":1784843940},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1784714323,"created_utc":1784714323,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1v3bm1k","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1v3bm1k","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/dvhv15wm7reh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1v3bm1k/nordstellar_published_new_ransomware/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"dvhv15wm7reh1","resolutions":[{"height":108,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=108&crop=smart&auto=webp&s=04e0d2f3f1024063e7c9cc4185bbc4e8ff048ecd","width":108},{"height":216,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=216&crop=smart&auto=webp&s=c7a4997a07ffb94326227c43cd975ab78a895a4a","width":216},{"height":320,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=320&crop=smart&auto=webp&s=5ae6f6252352c5ba7b55997a611d82d68b3f5aeb","width":320},{"height":640,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=640&crop=smart&auto=webp&s=0b23ebab60877a4f3ee0ae1590e613cbb774c2ed","width":640},{"height":960,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=960&crop=smart&auto=webp&s=01e9ec237e56f2570d0291b80f6c56319b211bb3","width":960},{"height":1080,"url":"https://preview.redd.it/dvhv15wm7reh1.png?width=1080&crop=smart&auto=webp&s=02cd5c8f2d69da223096be6712ca5e51d16a8067","width":1080}],"source":{"height":1080,"url":"https://preview.redd.it/dvhv15wm7reh1.png?auto=webp&s=aee52fecb3843b4d424667dd937e46e1364e5eee","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1784714338,"saved":false,"score":2,"secure_media":null,"secure_media_embed":{},"selftext":"u/nordstellar just published its latest ransomware report, and the Q2 2026 “most wanted” list is looking pretty rough😬\n\nRansomware attacks were up 20% year over year, and four groups stood out enough to get pinned to the wall 🧨\n\nSome of the names are familiar. Others are newer players making a lot of noise. What’s especially interesting is how the growing competition between ransomware groups seems to be pushing the overall number of attacks even higher.\n\nCurious to see who made the list and why?\n\nYou can read the full report, no download required: [https://nordlayer.com/intelligence/ransomware-statistics/](https://nordlayer.com/intelligence/ransomware-statistics/)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":105,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/dvhv15wm7reh1.png?width=140&height=140&auto=webp&s=c0a28fad5aba59e5e4f8d180e01023ec8989531c","thumbnail_height":140,"thumbnail_width":140,"title":"NordStellar published new ransomware!!","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":2,"upvote_ratio":1,"url":"https://i.redd.it/dvhv15wm7reh1.png","url_overridden_by_dest":"https://i.redd.it/dvhv15wm7reh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1v3bm1k?m=AQAA4eVhans23LkHLLVMQkgnUgbbvCnN13UbERwNCS1636K7rj4v","wls":6},{"_meta":{"retrieved_2nd_on":1783633941},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1783504312,"created_utc":1783504312,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1uqo289","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1uqo289","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/9c5pbliz9zbh1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1uqo289/june_2026_biggest_breaches_oracle_zerodays/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"9c5pbliz9zbh1","resolutions":[{"height":135,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=108&crop=smart&auto=webp&s=7c8b8a715aa0313ae1f8ac6f47a889aa26b66652","width":108},{"height":270,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=216&crop=smart&auto=webp&s=b7d938da116fc65437d291c01aba35debfdde78d","width":216},{"height":400,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=320&crop=smart&auto=webp&s=98292af08fafa4601107084c533eb5caaadce83b","width":320},{"height":800,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=640&crop=smart&auto=webp&s=e9c79edc48e0a74932beb09a44e14d7dbd2ada4d","width":640},{"height":1200,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=960&crop=smart&auto=webp&s=82498f801e47d33423f4aeda2ddebaef437c106e","width":960},{"height":1350,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?width=1080&crop=smart&auto=webp&s=edaae0e78928f2e7da438553ffb8a8bc86b7a322","width":1080}],"source":{"height":1350,"url":"https://preview.redd.it/9c5pbliz9zbh1.png?auto=webp&s=2c02c83f40c8cb575b9a2a6af7734944831534e8","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1783504334,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":104,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/9c5pbliz9zbh1.png?width=140&height=140&crop=1:1,smart&auto=webp&s=d3cfb54934d0b8483074e50b252aebe69c8da950","thumbnail_height":140,"thumbnail_width":140,"title":"June 2026 biggest breaches: Oracle zero-days, Fortinet credentials, and Gaza aid data","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/9c5pbliz9zbh1.png","url_overridden_by_dest":"https://i.redd.it/9c5pbliz9zbh1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1uqo289?m=AQAATm9PalBrRx3vn18yvUVmIUb19dmAbncro4M9OP-pNo4t8_K9","wls":6},{"_meta":{"retrieved_2nd_on":1783015636},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1782886028,"created_utc":1782886028,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1ukddt1","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1ukddt1","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/nxebd3uh7kah1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1ukddt1/right/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"nxebd3uh7kah1","resolutions":[{"height":80,"url":"https://preview.redd.it/nxebd3uh7kah1.png?width=108&crop=smart&auto=webp&s=c5be52ba8362dc7d877c008148a0c04d23e65ca3","width":108},{"height":161,"url":"https://preview.redd.it/nxebd3uh7kah1.png?width=216&crop=smart&auto=webp&s=0e91d7431ad1f18fa2633a1ad8a7927eabb05344","width":216},{"height":238,"url":"https://preview.redd.it/nxebd3uh7kah1.png?width=320&crop=smart&auto=webp&s=3fc54514345be4467b62aba450126c3f73a312d6","width":320},{"height":477,"url":"https://preview.redd.it/nxebd3uh7kah1.png?width=640&crop=smart&auto=webp&s=3404a1cb7cc07c2316b7969d24411e81779761b8","width":640},{"height":716,"url":"https://preview.redd.it/nxebd3uh7kah1.png?width=960&crop=smart&auto=webp&s=7202fc84ce49983dfe0d11561a12bb326cbadd33","width":960}],"source":{"height":746,"url":"https://preview.redd.it/nxebd3uh7kah1.png?auto=webp&s=415201a85255db0317dfb9eb042d688eee566cff","width":1000},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1782886694,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":104,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/nxebd3uh7kah1.png?width=140&height=104&auto=webp&s=baad8798f2e0f23c3b7ed34fe5c15a84c5ed3f98","thumbnail_height":104,"thumbnail_width":140,"title":"Right?","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/nxebd3uh7kah1.png","url_overridden_by_dest":"https://i.redd.it/nxebd3uh7kah1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1ukddt1?m=AQAApgJGaiXo82UGtl5ps2vCVAM6rd6-ZTdSuoPQRZ-Ix8yc1guE","wls":6},{"_meta":{"retrieved_2nd_on":1782264228},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1782134608,"created_utc":1782134608,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1uckhgb","is_created_from_ads_ui":false,"is_crosspostable":true,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1uckhgb","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/9czqwu64st8h1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1uckhgb/nordlayer_has_been_recognized_in_the_expert/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"9czqwu64st8h1","resolutions":[{"height":108,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=108&crop=smart&auto=webp&s=d60856402444ab21f66a7897a8b0dca26cc3219b","width":108},{"height":216,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=216&crop=smart&auto=webp&s=7a8813030a3d935c6ac14021e9d73dd366731a25","width":216},{"height":320,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=320&crop=smart&auto=webp&s=1a50235b66e1275a4ce20c04925c50a7b8bbae42","width":320},{"height":640,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=640&crop=smart&auto=webp&s=2f33c1e5d2d98994e6ce45c2f7eb87013631873d","width":640},{"height":960,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=960&crop=smart&auto=webp&s=fe8e3701e2ccc9f38ae4d4c2a8271d7ba0c18b85","width":960},{"height":1080,"url":"https://preview.redd.it/9czqwu64st8h1.png?width=1080&crop=smart&auto=webp&s=6e249b4f44678ed08a08815058cebbb96155aa62","width":1080}],"source":{"height":1080,"url":"https://preview.redd.it/9czqwu64st8h1.png?auto=webp&s=282725c9d8815e89f9b8056ef3ea2b274a915dba","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1782134628,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"We're proud to be named among the top solutions in our category, recognition earned through independent, hands-on testing. Thank you to our customers and our team, whose work made this possible.\n\n\n\nSee the full results 👇\n\n[https://nordlayer.com/blog/nordlayer-expert-insights-cybersecurity-award-summer-2026/?utm\\_source=linkedin&utm\\_medium=social\\_media&utm\\_campaign=](https://nordlayer.com/blog/nordlayer-expert-insights-cybersecurity-award-summer-2026/?utm_source=linkedin&utm_medium=social_media&utm_campaign=)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":103,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/9czqwu64st8h1.png?width=140&height=140&auto=webp&s=17fa0685e00b0013869f790bd1f1435ae3846d50","thumbnail_height":140,"thumbnail_width":140,"title":"🏆 NordLayer has been recognized in the Expert Insights Cybersecurity Awards, Summer 2026 for Best Network Security Solution!","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/9czqwu64st8h1.png","url_overridden_by_dest":"https://i.redd.it/9czqwu64st8h1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1uckhgb?m=AQAAJIM8aiCinzK12AR_vO1LiVR7OLFE0wkyLM_V_ykzzaRAqSlH","wls":6},{"_meta":{"retrieved_2nd_on":1781803805},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1781674179,"created_utc":1781674179,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1u81a70","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1u81a70","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1u81a70/do_companies_really_need_secure_browsers/","pinned":false,"post_hint":"self","preview":{"enabled":false,"images":[{"id":"55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU","resolutions":[{"height":56,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=108&crop=smart&auto=webp&s=0d9420b436048f7a20e638b91b7944992d5a32b4","width":108},{"height":113,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=216&crop=smart&auto=webp&s=850337a721a7567ad8abdeb7c30fa6a0fc47d4c5","width":216},{"height":168,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=320&crop=smart&auto=webp&s=73d5084b7eecfbd73de9babb38572ac83f855f76","width":320},{"height":336,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=640&crop=smart&auto=webp&s=63cbe8973ca6f185a3536c9da6cc9b033a4dd092","width":640},{"height":504,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=960&crop=smart&auto=webp&s=e7724a8ad78cdc628a0784f1246859f58723d452","width":960},{"height":567,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?width=1080&crop=smart&auto=webp&s=655bb816b828f3ba9af974dffec040a26e7f2f18","width":1080}],"source":{"height":1890,"url":"https://external-preview.redd.it/55SSmoyet8TR4s-1e_QNh5anajdE3lcd9fLvz_KYavU.jpeg?auto=webp&s=56a6cbc310425b67a530ea69dca0e39377c3ce76","width":3600},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1781674205,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"My current take: secure browsers are useful, but they are better seen as a layer on top of ZTNA or SSE, not a full replacement.\n\nBy “secure browser,” I mean a browser or browser-based tool **that lets a company control what users can do inside web apps**. For example, it can block downloads, control copy and paste, limit uploads, restrict browser extensions, apply DLP rules, isolate risky sites, and give security teams more visibility into browser activity.\n\nIt’s important because a lot of work now happens in the browser. So it makes sense that security teams want more control at that layer.\n\nThere are also real security reasons for the interest. Mandiant and Microsoft have both covered token theft and session hijacking risks, where attackers can get around MFA by stealing session cookies or tokens. Infostealer malware also often targets browser data. So the browser has become a very practical place to enforce security rules. Read our [web-based threats report](https://nordlayer.com/browser-research-report/) for more info. \n\nBut I do *not* think secure browsers replace ZTNA or SSE in most cases. ZTNA is about controlling which users and devices can access specific apps. SSE is broader and can include secure web gateway, CASB, firewall-as-a-service, ZTNA, and other cloud security controls. **A secure browser mostly controls what happens inside the browser session.**\n\nThat makes it strong for some use cases: contractors, BYOD, unmanaged devices, risky web access, SaaS apps, private web apps, privileged admin portals, and cases where a company wants to avoid giving full network access through a VPN.\n\n**But the harder part is adoption.** People may not want to switch browsers. Browser controls can also affect normal workflows, especially when downloads, copy/paste, uploads, or extensions are restricted. On BYOD devices, there are also privacy questions. Employees need to know what the company can see and what stays personal.\n\n**So the solution seems to be: layer first, replace only in narrow cases.** A secure browser can reduce the need for VPN or VDI in some browser-only workflows. But for non-browser apps, endpoint compromise, identity security, device posture, and broader traffic control, companies still need the rest of the security stack.\n\nWhat do people here think: are secure browsers becoming a serious ZTNA layer, or is the category mostly vendor packaging around controls that already existed elsewhere?\n\n","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":102,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"Do companies really need secure browsers?","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1u81a70/do_companies_really_need_secure_browsers/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1u81a70?m=AQAAWoIzallcSlfBKd9oEPbhzOI04kTGE4PSPuIGIfU7PTc4koOC","wls":6},{"_meta":{"retrieved_2nd_on":1781299016},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1781169390,"created_utc":1781169390,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1u2tze2","is_created_from_ads_ui":false,"is_crosspostable":true,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1u2tze2","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/ycsudjhzem6h1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1u2tze2/download_protection_update/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"ycsudjhzem6h1","resolutions":[{"height":108,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=108&crop=smart&auto=webp&s=0d21c7c80c39a9d93ef2b41616f3821419e5fd4f","width":108},{"height":216,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=216&crop=smart&auto=webp&s=bbac2db5ac7e68d789df3dece57d5f9eaceec279","width":216},{"height":320,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=320&crop=smart&auto=webp&s=3d6defbc3a51c299f57d886ed81f71ba6cfc71cf","width":320},{"height":640,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=640&crop=smart&auto=webp&s=c46354aefa1288a46297d3fefaa0cddf45399259","width":640},{"height":960,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=960&crop=smart&auto=webp&s=1a220b25ffb0af11327017e2d07c031c5249bfd4","width":960},{"height":1080,"url":"https://preview.redd.it/ycsudjhzem6h1.png?width=1080&crop=smart&auto=webp&s=a2d4eccbd469c45bc1ab8e7c4fc8184ae5b9a21a","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ycsudjhzem6h1.png?auto=webp&s=0a9030820c13eed05b037d2f37fc192ddb4719e7","width":1200},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1781169407,"saved":false,"score":2,"secure_media":null,"secure_media_embed":{},"selftext":"u/NordLayer Download Protection is now available on macOS, extending protection across all major desktop platforms🛡️\n\n\n\nWith broader device coverage, IT teams can help reduce risks, strengthen security controls, and support safer workflows across their organization.\n\nLearn more about Download Protection: [https://nordlayer.com/download-protection/](https://nordlayer.com/download-protection/)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":100,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/ycsudjhzem6h1.png?width=140&height=140&auto=webp&s=19be3c4f8663dd88b01c0ba731a75d15cbd26932","thumbnail_height":140,"thumbnail_width":140,"title":"Download protection update!","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":2,"upvote_ratio":1,"url":"https://i.redd.it/ycsudjhzem6h1.png","url_overridden_by_dest":"https://i.redd.it/ycsudjhzem6h1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1u2tze2?m=AQAAxMgtarhXt8xPDNtUG7ELB-he_CgKsBTQ7JY3cQfcedckanJi","wls":6},{"_meta":{"retrieved_2nd_on":1780783609},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1780653990,"created_utc":1780653990,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1txgm38","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1txgm38","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/f852qn9huf5h1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1txgm38/may_2026_biggest_breaches_github_supplychain/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"f852qn9huf5h1","resolutions":[{"height":135,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=108&crop=smart&auto=webp&s=d3618b855b47b6de45a086b03151796c2804d1d7","width":108},{"height":270,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=216&crop=smart&auto=webp&s=72ed5c31a6ba2f9aa9a96ff2a4f79296873e5fd2","width":216},{"height":400,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=320&crop=smart&auto=webp&s=6c7bf4f957a5a3ce80f8dc7a59817305dbb0b422","width":320},{"height":800,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=640&crop=smart&auto=webp&s=68bbe1b9d9e2a2f1e74d50cb4dbff3f74de350e9","width":640},{"height":1200,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=960&crop=smart&auto=webp&s=812e814cb1e4ab0301b755484b652c4f635ead3e","width":960},{"height":1350,"url":"https://preview.redd.it/f852qn9huf5h1.png?width=1080&crop=smart&auto=webp&s=e1133d929b38f7b51a76631556f29055da056457","width":1080}],"source":{"height":1350,"url":"https://preview.redd.it/f852qn9huf5h1.png?auto=webp&s=73e5bc5517348c72abfec4dc61adaec5778d7c73","width":1080},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1780654011,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":99,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/f852qn9huf5h1.png?width=140&height=140&crop=1:1,smart&auto=webp&s=87b081af0a91d15a284f5286777a7484c3e30df8","thumbnail_height":140,"thumbnail_width":140,"title":"May 2026 biggest breaches: GitHub supply-chain attacks, Instructure data theft, and Lithuania’s state data leak","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/f852qn9huf5h1.png","url_overridden_by_dest":"https://i.redd.it/f852qn9huf5h1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1txgm38?m=AQAAOPEjarlaCjvfhM7dXax386H0gglFl6sW6FloMA5FRoLBgEkC","wls":6},{"_meta":{"retrieved_2nd_on":1780597635},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1780465765,"created_utc":1780465765,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1tvg98d","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1tvg98d","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1tvg98d/why_ztna_misses_the_shadow_it_you_actually_have/","pinned":false,"post_hint":"self","preview":{"enabled":false,"images":[{"id":"xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg","resolutions":[{"height":60,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=108&crop=smart&auto=webp&s=8aa0ed42c2e814cf39d02115bfe91e12ad4294f8","width":108},{"height":121,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=216&crop=smart&auto=webp&s=da55412905b869c441dfa6cc61cbb29f880ae52a","width":216},{"height":179,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=320&crop=smart&auto=webp&s=74160977e87c2f5037c96df4c8dd4af97a5df11c","width":320},{"height":359,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=640&crop=smart&auto=webp&s=1c000d0ff1f8882edcd396bc3c737e457263c06b","width":640},{"height":539,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=960&crop=smart&auto=webp&s=1e0a9175a1b5c55c088b8a64c6ab40d51296b97a","width":960},{"height":606,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?width=1080&crop=smart&auto=webp&s=f12d2b52f69583231ab2fda6c091fe9fbe0b3218","width":1080}],"source":{"height":1124,"url":"https://external-preview.redd.it/xd8obCtoOI9XGuTr-OZLodlQtxykrkiBzUHxvI0pNqg.png?auto=webp&s=1fdf00cef31622cde13a212fb1b17d3b569267fe","width":2000},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1780465792,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"**ZTNA is a strong control for one job, namely secure access to private applications, but it does not address most of what shadow IT looks like today. Much of it is inside the browser, after the user is already authenticated.**\n\n[Microsoft’s March 2026 research on malicious AI assistant browser extensions](https://www.microsoft.com/en-us/security/blog/2026/03/05/malicious-ai-assistant-extensions-harvest-llm-chat-histories/) found approximately 900,000 installs and activity across more than 20,000 enterprise tenants. The extensions impersonated legitimate AI tools and collected URLs and chat content from ChatGPT and DeepSeek. It included things employees had pasted into the chat: proprietary code, internal workflows, strategic discussions, and other confidential data.  \nBecause many companies allow employees to install browser extensions with few restrictions, the same extensions reached both personal and corporate environments.  \nWhat’s the scale of it?[ **Microsoft Defender for Cloud Apps documentation**](https://learn.microsoft.com/en-us/defender-cloud-apps/tutorial-shadow-it) **says organizations typically expect employees to use 30 to 40 cloud apps. But the real average is over 1,000, and around 80% of employees use apps that have never been reviewed by IT.** (Treat that as a directional signal from Microsoft’s product documentation rather than a benchmark for every company size or industry.)\n\nZTNA was not designed to solve that because on a workday, employees can\n\n* sign up for SaaS tools with a work email\n* click “Allow” on OAuth prompts that give third-party apps access to Microsoft 365, Google Workspace, or Salesforce data, such as a note-taker that joins meetings or an AI assistant that summarizes inboxes\n* install browser extensions\n* paste customer data into a personal AI chat\n* stay logged into Salesforce through a session cookie\n\nZTNA by itself typically does not govern unrelated SaaS use, OAuth grants, browser extension behavior, personal AI chats, or data movement inside sanctioned SaaS.[ ](https://blog.google/security/protecting-cookies-with-device-bound-session-credentials/)\n\nFor example, [Mandiant’s UNC3944 reporting](https://cloud.google.com/blog/topics/threat-intelligence/unc3944-targets-saas-applications) and[ ShinyHunters-branded SaaS data theft research](https://cloud.google.com/blog/topics/threat-intelligence/expansion-shinyhunters-saas-data-theft) show vishing, MFA reset abuse, SSO portals, and SaaS data exfiltration through tools like Airbyte and Fivetran. **To a narrow access gateway, those sessions can look legitimate because the user passed identity checks or used a valid SSO session.** \n\nBrowser-based shadow IT creates risk in places security may not know exist. ZTNA is still useful, but it just cannot discover every SaaS app, OAuth grant, browser extension, AI chat, or data upload by itself.\n\n","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":99,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"Why ZTNA misses the shadow IT you actually have","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1tvg98d/why_ztna_misses_the_shadow_it_you_actually_have/","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1tvg98d?m=AQAA_BEhal7VGrq8Gp7O4G5wO0eur8rLTqSI_F7Uew2rKDOcgcQw","wls":6},{"_meta":{"retrieved_2nd_on":1780444262},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1780314643,"created_utc":1780314643,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1ttpt0k","is_created_from_ads_ui":false,"is_crosspostable":true,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"#b1eb21","link_flair_css_class":"","link_flair_richtext":[],"link_flair_template_id":"7cc65820-d8cf-11ef-905c-7e3b8e719836","link_flair_text":"Coupon","link_flair_text_color":"dark","link_flair_type":"text","locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1ttpt0k","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1ttpt0k/sale/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"ey7xvwjksn4h1","resolutions":[{"height":108,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=108&crop=smart&auto=webp&s=4b761e8b696b9e936967b336fbed1452676f2446","width":108},{"height":216,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=216&crop=smart&auto=webp&s=8998625e34a836742f5dfb2f187915db16623e82","width":216},{"height":320,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=320&crop=smart&auto=webp&s=32fa4d8e730be77651caba7a4598542e880069a1","width":320},{"height":640,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=640&crop=smart&auto=webp&s=42c0d27a2dab701cd0cdf946a1891e688fc33ba8","width":640},{"height":960,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=960&crop=smart&auto=webp&s=15ee97e6255a1f05a2bd3f1eabb85f9b6e7d7111","width":960},{"height":1080,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?width=1080&crop=smart&auto=webp&s=7ad2f342f914e523e2296f4173329ac17f7e620b","width":1080}],"source":{"height":1200,"url":"https://preview.redd.it/ey7xvwjksn4h1.png?auto=webp&s=50e9ff08f8642f48198ff2e73fed65068c435863","width":1200},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1780314663,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"Summer = more people working from hotels, airports, cafés, and whatever Wi-Fi network happens to be available ☀️\n\nUnfortunately, that's also when security risks start creeping in. Public networks, phishing attempts, compromised credentials, unauthorized logins...you know the drill.\n\nIf your team is spending more time outside the office over the next few months, it's probably worth checking whether your network security setup is ready for it.\n\nNordLayer is currently offering up to 20% off annual plans during its Summer Sale.\n\nCode: **nl-summer-26** (new customers only). Check it out: [https://nordlayer.com/](https://nordlayer.com/)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":99,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/ey7xvwjksn4h1.png?width=140&height=140&auto=webp&s=7d3c53bff896cbc8dcae011477c4990c7d05e521","thumbnail_height":140,"thumbnail_width":140,"title":"SALE!!","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/ey7xvwjksn4h1.png","url_overridden_by_dest":"https://i.redd.it/ey7xvwjksn4h1.png","user_reports":[],"view_count":null,"visited":false,"wls":6},{"_meta":{"retrieved_2nd_on":1779560359},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1779430738,"created_utc":1779430738,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1tkaee1","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"#45ba9d","link_flair_css_class":"","link_flair_richtext":[],"link_flair_template_id":"d768bf50-d9cb-11ef-87d2-d276208b9c4b","link_flair_text":"Research","link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1tkaee1","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/9btmxaa2tm2h1.jpeg"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1tkaee1/research_it_teams_feel_prepared_for_a_cyberattack/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"9btmxaa2tm2h1","resolutions":[{"height":121,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=108&crop=smart&auto=webp&s=8620bed7ec184b8827e23deb910bb0a1b05e3be5","width":108},{"height":243,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=216&crop=smart&auto=webp&s=ceadab183cc691e2b4a132e3d9f1cc653757252b","width":216},{"height":360,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=320&crop=smart&auto=webp&s=a67e78a5743bc3e0a42853c459fbae2ec55f27b2","width":320},{"height":721,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=640&crop=smart&auto=webp&s=7ea43e45e65249e6bf5a5460e590ee8de14681d1","width":640},{"height":1082,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=960&crop=smart&auto=webp&s=30ac5fa8e6d1a879d7b740c6763010ceaff117c7","width":960},{"height":1218,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=1080&crop=smart&auto=webp&s=92a8738ad589c6b2dc203229ee0ebb1296099a41","width":1080}],"source":{"height":1579,"url":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?auto=webp&s=6ff89274e50632e8c8f2ed33d344e34a2807551d","width":1400},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1779430758,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"According to NordLayer’s 2026 research, 82% of IT professionals say their organization had a security incident tied to browsers, websites, or web apps in the last 12 months. \n\nYet \n\n* 75% rate employee awareness as high or good, \n* 73% say their organization is exceptionally or well-prepared, \n* and 58% say the cybersecurity budget is sufficient.\n\nAt the same time, the most widely deployed control against web-based threats is DLP, and only **53%** of organizations say they have it. Tools like traditional VPNs, SWG, EDR, CASB, and ZTNA are even less adopted.  \nFor organizations with hybrid, remote, or BYOD work, that’s not enough.\n\nRead NordLayer’s report for free and learn:\n\n1. What puts organizations in the high-risk category (spoiler: it doesn’t depend on business size)\n2. Why infostealers and session cookie theft are especially dangerous\n3. A practical list of what to fix now versus what can wait\n\nGet the report in a minute: [https://nordlayer.com/browser-research-report/](https://nordlayer.com/browser-research-report/) \n\n","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":99,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/9btmxaa2tm2h1.jpeg?width=140&height=140&crop=1:1,smart&auto=webp&s=08ce6d91d53decfc97911412b4f916f85ce9a089","thumbnail_height":140,"thumbnail_width":140,"title":"Research: IT teams feel “prepared” for a cyberattack, yet 82% had a browser-linked security incident last year","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/9btmxaa2tm2h1.jpeg","url_overridden_by_dest":"https://i.redd.it/9btmxaa2tm2h1.jpeg","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1tkaee1?m=AQAA40YRam_t0pOJhtHfR-PFhHRvTdLRgIyQNSSBdWzZs46_Ff0U","wls":6},{"_meta":{"is_edited":true,"retrieved_2nd_on":1779228820},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1779099174,"created_utc":1779099174,"discussion_type":null,"distinguished":null,"domain":"v.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1tgi6bt","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":true,"likes":null,"link_flair_background_color":"#1cd6e3","link_flair_css_class":"","link_flair_richtext":[],"link_flair_template_id":"b80b80a0-d9cd-11ef-89a0-4680ec8e7885","link_flair_text":"Insights","link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":{"reddit_video":{"bitrate_kbps":5000,"dash_url":"https://v.redd.it/u2jlam0qev1h1/DASHPlaylist.mpd?a=1781691196%2CZGEyMjA1MmU5MzQ5ZWUwMGYwYTgxY2Y3YjY5YWY4ZGJmMGQ2N2U3ZjlmNjk3N2RlNWJiZjEzMWQ4NDkwZjc2MQ%3D%3D&v=1&f=sd","duration":51,"fallback_url":"https://v.redd.it/u2jlam0qev1h1/CMAF_1080.mp4?source=fallback","has_audio":true,"height":1080,"hls_url":"https://v.redd.it/u2jlam0qev1h1/HLSPlaylist.m3u8?a=1781691196%2CMGNhOGE2NjBkNTFiMjI3N2IxMjI0ZGRhMWQ4Njk0MGIwNDA0MzZkMjkxMzE3MTQ0YjUyZmM5YjlmYjA2ZmU2Nw%3D%3D&v=1&f=sd","is_gif":false,"scrubber_media_url":"https://v.redd.it/u2jlam0qev1h1/CMAF_96.mp4","transcoding_status":"completed","width":1080}},"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1tgi6bt","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://v.redd.it/u2jlam0qev1h1"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1tgi6bt/when_ransomware_hits_the_technical_damage_is_only/","pinned":false,"post_hint":"hosted:video","preview":{"enabled":false,"images":[{"id":"ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk","resolutions":[{"height":108,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=108&crop=smart&format=pjpg&auto=webp&s=7300bb258f8190b790bf3ab2ce611bb5e481b6b7","width":108},{"height":216,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=216&crop=smart&format=pjpg&auto=webp&s=00106ea0b797be5af42842fbcacc218eb3497348","width":216},{"height":320,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=320&crop=smart&format=pjpg&auto=webp&s=fb9cf58d53f62ede03f49860b5c4460f4f5a4095","width":320},{"height":640,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=640&crop=smart&format=pjpg&auto=webp&s=0318319c8b22ae25bf22cd6c3f57c758f80aa29e","width":640},{"height":960,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=960&crop=smart&format=pjpg&auto=webp&s=7a7f3e89eb82654303d485912f09bf26ee140699","width":960},{"height":1080,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=1080&crop=smart&format=pjpg&auto=webp&s=2ba253ef05452fa449d9c821a660516c27d8c7de","width":1080}],"source":{"height":1200,"url":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?format=pjpg&auto=webp&s=803c3f014e32110617e29a7766aee08af535e5f3","width":1200},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1779099203,"saved":false,"score":1,"secure_media":{"reddit_video":{"bitrate_kbps":5000,"dash_url":"https://v.redd.it/u2jlam0qev1h1/DASHPlaylist.mpd?a=1781691196%2CZGEyMjA1MmU5MzQ5ZWUwMGYwYTgxY2Y3YjY5YWY4ZGJmMGQ2N2U3ZjlmNjk3N2RlNWJiZjEzMWQ4NDkwZjc2MQ%3D%3D&v=1&f=sd","duration":51,"fallback_url":"https://v.redd.it/u2jlam0qev1h1/CMAF_1080.mp4?source=fallback","has_audio":true,"height":1080,"hls_url":"https://v.redd.it/u2jlam0qev1h1/HLSPlaylist.m3u8?a=1781691196%2CMGNhOGE2NjBkNTFiMjI3N2IxMjI0ZGRhMWQ4Njk0MGIwNDA0MzZkMjkxMzE3MTQ0YjUyZmM5YjlmYjA2ZmU2Nw%3D%3D&v=1&f=sd","is_gif":false,"scrubber_media_url":"https://v.redd.it/u2jlam0qev1h1/CMAF_96.mp4","transcoding_status":"completed","width":1080}},"secure_media_embed":{},"selftext":"Behind every attack is another battle happening in parallel: communication, pressure, and negotiation. While systems are down and files are locked, someone has to manage the conversation no company ever wants to have.\n\nOur colleagues at [NordStellar](https://nordstellar.com/?utm_source=chatgpt.com) analyzed real ransomware negotiation chats in their latest quarterly report. The insights are wild.\n\nWorth a read if you're interested in cyber incidents, threat actors, or how ransomware operations actually unfold behind the scenes 👇\n\n[https://nordstellar.com/blog/ransomware-statistics/](https://nordstellar.com/blog/ransomware-statistics/)","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":99,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://external-preview.redd.it/ZGY4bXNyMHFldjFoMUAE5yY3wuY07VDLBsEHMMRELrzwtRl99K2YbgtwrZCk.png?width=140&height=140&format=jpg&auto=webp&s=85d9fe949b5b78397ac22f8fa3da608906846cc3","thumbnail_height":140,"thumbnail_width":140,"title":"When ransomware hits, the technical damage is only part of the story","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://v.redd.it/u2jlam0qev1h1","url_overridden_by_dest":"https://v.redd.it/u2jlam0qev1h1","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1tgi6bt?m=AQAAvDcMakBF8IDsS7nmQY1DLXmVLr2-hmuxcmQy62ef0q3GiK4T","wls":6},{"_meta":{"retrieved_2nd_on":1778713031},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1778583407,"created_utc":1778583407,"discussion_type":null,"distinguished":null,"domain":"self.NordLayer_official","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1tay2k0","is_created_from_ads_ui":false,"is_crosspostable":true,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":false,"is_robot_indexable":true,"is_self":true,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1tay2k0","no_follow":false,"num_comments":0,"num_crossposts":0,"num_reports":null,"over_18":false,"permalink":"/r/NordLayer_official/comments/1tay2k0/the_hybrid_truth_why_vpn_is_dead_aged_like_milk/","pinned":false,"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1778583439,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"A mid-sized fintech, fed up with brittle tunnels, slow logins from coffee shops and a quarterly cycle of emergency CVE patching, celebrated turning off its corporate VPN. Confetti, internal blog post, the full ceremony.  \n**6 weeks later, the security team had quietly stood it back up** for a handful of admin tools, an aging file share, and one finance app nobody wanted to poke (The admin tools used hardcoded IPs the new ZTNA broker could not cleanly map; the file share predated SAML by about a decade; and the finance app was mid-audit, which made any architectural change a career-ending move.) The VPN had been reclassified as a controlled fallback – quietly.  \nThat awkward middle is where most ZTNA rollouts actually settle.  \nThe promise sounds clean: zero trust replaces the broad VPN tunnel with per-app, identity-aware access, and lateral movement shrinks. And it holds up, but what is less clear is that **network access stops being a** ***network*** **problem (VPN) and becomes an identity, device, app, policy, and operations problem all at once.**  \nZero trust migration is incremental, cannot be solved by a wholesale technology swap, and **most enterprises will run hybrid for the foreseeable future**, says NIST SP 800-207. The UK's NCSC agrees, noting that VPN and zero trust are not mutually exclusive and that legacy on-prem footprints often justify keeping traditional remote access in the mix.  \nThe friction does not vanish either, it moves. Google's BeyondCorp team, often cited as the gold standard for zero trust at scale, openly admitted that **the BeyondCorp rollout itself took years and is still being refined**. The VPN client pain (split tunnels that misbehave on hotel Wi-Fi and certificate renewals that pick the worst possible Monday) disappears; the conditional access prompt fatigue arrives. SMS, email OTPs, and push approvals are slipping behind MFA bombing and phishing-in-the-middle attacks. A poorly tuned ZTNA rollout often trades one annoyance for another.  \nAnd then the legacy estate. ZTNA feels tidy for modern web apps wired into SSO. It turns awkward with desktop clients, RDP and SSH workflows, hardcoded IPs, and **apps that were never designed to consume identity context**.  \nSo, not every workload can be wrapped in a per-resource policy. Meanwhile, **VPN remains an attractive target for attackers.** NSA and CISA have flagged that nation-state actors actively weaponize VPN CVEs to steal credentials and pivot inside networks. The baseline hygiene requires validated products, prompt patching, MFA, and disabled non-VPN features.\n\nIf your team is partway through zero-trust rollout:\n\n* Treat the remaining VPN as a ***governed*** **fallback** with named owners, expiry dates, and removal plans. DON’T treat it as an exception layer that grows in the dark.\n* Once the first ZTNA waves are live, **measure prompt frequency, help desk tickets**, time to app access, and the share of users on phishing-resistant MFA. \n* Map legacy apps *before* picking a ZTNA vendor. Vendor capabilities vary widely on non-web protocols, and the wrong choice forces expensive retrofits or a permanent VPN island.\n* Use **browser isolation** or a secure access browser for contractors, BYOD, and risky sessions, because device posture is unknown on those endpoints and a hardened browser becomes the only reliable control point.\n\nZTNA is a slow, deliberate rebuild. The teams that accept that early tend to be the ones still standing when the confetti settles.\n\nFor anyone weighing a hybrid setup, NordLayer bundles ZTNA, cloud VPN gateways, device posture checks, and a browser-based access option under one console, which keeps the fallback governed instead of feral. **The Reddit promo code NL-RDT-10 takes 10% off any yearly plan if a pilot is on the cards.**","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":97,"subreddit_type":"public","suggested_sort":null,"thumbnail":"self","thumbnail_height":null,"thumbnail_width":null,"title":"The hybrid truth: why “VPN is dead” aged like milk","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://www.reddit.com/r/NordLayer_official/comments/1tay2k0/the_hybrid_truth_why_vpn_is_dead_aged_like_milk/","user_reports":[],"view_count":null,"visited":false,"wls":6},{"_meta":{"retrieved_2nd_on":1778626996},"all_awardings":[],"allow_live_comments":false,"approved_at_utc":null,"approved_by":null,"archived":false,"author":"nordlayer","author_flair_background_color":null,"author_flair_css_class":null,"author_flair_richtext":[],"author_flair_template_id":null,"author_flair_text":null,"author_flair_text_color":null,"author_flair_type":"text","author_fullname":"t2_j4zazwaiy","author_is_blocked":false,"author_patreon_flair":false,"author_premium":false,"awarders":[],"banned_at_utc":null,"banned_by":null,"can_gild":false,"can_mod_post":false,"category":null,"clicked":false,"content_categories":null,"contest_mode":false,"created":1778497375,"created_utc":1778497375,"discussion_type":null,"distinguished":null,"domain":"i.redd.it","downs":0,"edited":false,"gilded":0,"gildings":{},"hidden":false,"hide_score":false,"id":"1t9zxgh","is_created_from_ads_ui":false,"is_crosspostable":false,"is_meta":false,"is_original_content":false,"is_reddit_media_domain":true,"is_robot_indexable":true,"is_self":false,"is_video":false,"likes":null,"link_flair_background_color":"","link_flair_css_class":null,"link_flair_richtext":[],"link_flair_text":null,"link_flair_text_color":"dark","link_flair_type":"text","location_lat":null,"location_long":null,"location_name":null,"locked":false,"media":null,"media_embed":{},"media_only":false,"mod_note":null,"mod_reason_by":null,"mod_reason_title":null,"mod_reports":[],"name":"t3_1t9zxgh","no_follow":true,"num_comments":0,"num_crossposts":0,"num_reports":null,"outbound_link":{"created":null,"expiration":null,"url":"https://i.redd.it/0ugq536hph0h1.png"},"over_18":false,"permalink":"/r/NordLayer_official/comments/1t9zxgh/ap_standing_for_apparently_a_router/","pinned":false,"post_hint":"image","preview":{"enabled":true,"images":[{"id":"0ugq536hph0h1","resolutions":[{"height":80,"url":"https://preview.redd.it/0ugq536hph0h1.png?width=108&crop=smart&auto=webp&s=de7d52e8cbd2e89dd3fb403e23126340917bfa40","width":108},{"height":161,"url":"https://preview.redd.it/0ugq536hph0h1.png?width=216&crop=smart&auto=webp&s=34021c4b6bf1664f810a703e8754de8d542584a1","width":216},{"height":238,"url":"https://preview.redd.it/0ugq536hph0h1.png?width=320&crop=smart&auto=webp&s=a593ba261951cc754c7bd687628db88caa755617","width":320},{"height":477,"url":"https://preview.redd.it/0ugq536hph0h1.png?width=640&crop=smart&auto=webp&s=6cdf445096bdd3913470589675605b6fcadd6e3a","width":640},{"height":716,"url":"https://preview.redd.it/0ugq536hph0h1.png?width=960&crop=smart&auto=webp&s=4a3f9e8cee2f3d09a2028395dd1c52ec69ebeaed","width":960}],"source":{"height":746,"url":"https://preview.redd.it/0ugq536hph0h1.png?auto=webp&s=82d8756da115f72e28e4e33f6e61cc3754bcdaa1","width":1000},"variants":{}}]},"pwls":6,"quarantine":false,"removal_reason":null,"removed_by":null,"removed_by_category":null,"report_reasons":null,"retrieved_on":1778497400,"saved":false,"score":1,"secure_media":null,"secure_media_embed":{},"selftext":"","send_replies":true,"spoiler":false,"stickied":false,"subreddit":"NordLayer_official","subreddit_id":"t5_cyhgx3","subreddit_name_prefixed":"r/NordLayer_official","subreddit_subscribers":97,"subreddit_type":"public","suggested_sort":null,"thumbnail":"https://preview.redd.it/0ugq536hph0h1.png?width=140&height=104&auto=webp&s=9d4508f9e0d247b23f1ddfec03cb6ef5ddbfa483","thumbnail_height":104,"thumbnail_width":140,"title":"AP standing for ‘Apparently a Router’ 💀📡","top_awarded_type":null,"total_awards_received":0,"treatment_tags":[],"ups":1,"upvote_ratio":1,"url":"https://i.redd.it/0ugq536hph0h1.png","url_overridden_by_dest":"https://i.redd.it/0ugq536hph0h1.png","user_reports":[],"view_count":null,"visited":false,"websocket_url":"wss://k8s-lb.wss.redditmedia.com/link/1t9zxgh?m=AQAA8wgDamlK_y0kIyr_pWFocgOkWx7uucKAn5FfKBwrGrM1_X7y","wls":6}]}