The Zero Trust Hub
Trends, insights, and resources for today's cybersecurity leaders. Updated weekly.
IIn SecurityWeek, John Kindervag says Zero Trust still works against AI-powered attacks. His new book argues that AI threats are the same old threats, only faster and at greater scale. But you have to get it right. A flawed policy engine gives AI agents a way through. At machine speed, strong policy and containment matter more than ever.
In LBC, Michael Adjei calls Trump’s voluntary AI safety pact better than nothing, but not enough. Firms choose their own auditors and face no penalty when they fall short. He wants clear rules backed by government. He also urges every business to assume AI agents will get in, then gain the visibility and containment to stop them.
100 Editions and Still Counting on Zero Trust
VP, Industry Strategy
The Zero Trust Hub’s 100th edition lands in October, the same month Cybersecurity Awareness Month marks its 23rd year.
The timing is a coincidence, but the two share a purpose. Both exist to keep security on people’s minds long enough to change how they act.
They also show how much the job has changed. When Cybersecurity Awareness Month began in 2004, most advice focused on personal habits like strong passwords and careful clicking. Over 100 editions, the Hub has covered ransomware disrupting schools, AI agents moving through networks, and AI shrinking the time between a vulnerability’s disclosure and its exploit.
The threats have grown, and people alone can’t carry the defense.
Awareness still matters. It works best when it runs all year and rests on a Zero Trust architecture that assumes someone, someday, will click. That’s why 100 editions of the Hub and 31 days of awareness belong in the same conversation.
What 100 editions of the Zero Trust Hub show
The Hub has covered a lot of ground across 100 editions. We’ve shared ideas from security leaders, researchers, and guests on The Monday Microsegment podcast. The topics have ranged from social engineering and AI supply chain risk to the practical steps teams take to contain a breach.
Through all of it, one theme keeps coming back: breaches happen, and the organizations that recover fastest are the ones that planned for it.
Security experts describe it in different ways. Some call it resilience. Others call it breach containment or an assume-breach mindset. The idea underneath is the same.
That steady message is the value of reaching 100. Security learning doesn’t end when a campaign does. Each edition adds to a shared record of how our industry is working through its hardest problems in real time.
Why Cybersecurity Awareness Month matters
October gives security teams something rare: the attention of the whole business at once. Executives, HR, finance, and frontline staff hear the same message in the same month.
That’s significant. Phishing, stolen credentials, and social engineering remain common ways into an organization, and employees are often the first to see them.
The challenge is what happens in November. Attackers don’t work on a calendar, and AI is helping them write better lures faster. A convincing AI-written email can fool a well-trained employee on a busy afternoon.
Security awareness training lowers the odds of that click, but no program can bring them down to zero.
Zero Trust: assume breach, then contain it
This is where Zero Trust earns its place. Zero Trust starts from the assumption that a breach will happen. You verify every connection, give each user and workload only the access it needs, and limit where an attacker can go once they’re inside.
Microsegmentation is how you enforce that in practice. It places controls between workloads, so a compromised laptop or server can't reach the rest of your network. Least-privilege access is the principle that connects the two.
Awareness training helps people spot threats. Zero Trust keeps the one they miss from turning into a crisis. Security programs need both.
Why CISOs shouldn’t wait on Zero Trust
Every month without containment in place leaves the same paths open. If an attacker gets in next March, a flat network lets them move toward your most critical systems before anyone notices.
The longer those paths stay open, the more a breach costs in downtime, recovery, and customer trust.
So treat this Cybersecurity Awareness Month as a starting point. Run the training, then ask your team one practical question: if someone clicks today, how far could an attacker get? If the answer isn’t clear, that’s your Zero Trust priority for the next year.
The Hub reached 100 editions because this conversation never really stops. Your security awareness program shouldn’t either. With Zero Trust underneath it, one click stays one click — not a full-scale disaster.
STATSHOT
Inside Job
Data Breaches Close to Home On-premises data moved to the top of the breach list in 2026. Its share rose, overtaking data across on-premises, public cloud, and private cloud environments, which fell in 2026. Public cloud held steady, while private cloud data breaches increased slightly. The changes were modest, but they put in-house data at the center of breach risk.
The Flaw Opens the Door. The Network Does the Rest.
Michael Adjei traces how attackers turn one flaw into a network-wide breach. The exploit just gets them in. The real damage comes next, as they move from machine to machine over paths most networks leave open. Close those paths, and a foothold stays a foothold.
Under Pressure: 100+ U.S. Water Systems Attacked
When attackers hijacked internet-exposed PLCs in July, some utilities lost water pressure, some sites flooded, and a disrupted pump station in Georgia prompted a boil-water advisory. See how Zero Trust security helps water systems contain attacks.
Zero Trust Resources
Get the industry’s first vendor-neutral Zero Trust certification.
