[rawgabbit]

Before zero trust, once you logged in, you have access to the entire kingdom of resources/files/APIs etc.

To me, this sounds like zero trust version 2.0. The "brain" challenges agentic AI trying to access resources it normally doesn't access.

Personally, I like the name "Beyond Zero" because it isn't oxymoronic like "Zero Trust".

[galactushonor]

I have a simple question. When a company gets compromised, how come there are no alarms when TBs of data gets egressed?

[kbart]

That's a survirvorship bias - we normally only hear of the attacks that succeed, not the ones that have been successfully prevented.

[idkyall]

At a high level it's possible to alarm on data egress, but at the same time it depends on the type and degree of compromise we're discussing and how the attacker exfiltrates the data. If an intruder isn't detected, they could slowly egress the data to borrowed residential IPs, rather than a giant multi TB transfer that might set off more obvious alarms. For a large enough organization with substantial outbound traffic to start, it can become incredibly hard to distinguish from legitimate activity.

[rawgabbit]

Organizations today run every SAAS under the sun. Files and data are wired up in a hodgepodge with security usually being an afterthought. There are companies like Big Banks that do monitor all network traffic including traffic to their provisioned Google Drive or Clickhouse. A lot of companies only have logs which they feed to an alerting system which is after the fact.