{"id":46916,"date":"2022-05-24T16:23:00","date_gmt":"2022-05-24T10:53:00","guid":{"rendered":"https:\/\/arcon.xyz\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/"},"modified":"2026-04-06T15:49:26","modified_gmt":"2026-04-06T10:19:26","slug":"zero-trust-controlled-privileges-and-data","status":"publish","type":"risk-to-watch","link":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/","title":{"rendered":"Zero Trust, Controlled Privileges and Data"},"content":{"rendered":"

ARCON has always propagated the message of controlling and protecting the inner realm of an organization\u2019s IT network. It builds the foundation for robust cybersecurity.\u00a0<\/span><\/p>\n

Whether the cyber-criminal sits outside the realm or is present inside the periphery, typically it is the compromised insider-privy to confidential information- who is behind an insider attack or cyber-espionage.<\/span><\/p>\n

Recently approximately thirty (30) multinational companies faced the wrath of state-sponsored actors. The incident has brought to the forefront yet again the dire need to adopt robust access management methods to prevent the theft and exfiltration of sensitive data.<\/span><\/p>\n

\u00a0<\/span>What exactly happened?<\/b><\/p>\n

A report published by a US-based cybersecurity firm revealed that a state-sponsored group, in years\u2019 long cyber operations, stealthily stole intellectual property worth trillions of dollars. The victims are multinational organizations from manufacturing, pharmaceutical, energy and utilities sectors spread across Asia, Europe and North America.<\/span><\/p>\n

The alarming report unveiled that state-sponsored cyber-criminals exfiltrated hundreds of gigabytes of sensitive data. This data includes strategic blueprints, IT architecture diagrams, Intellectual Properties of drugs among other forms of sensitive data.<\/span><\/p>\n

Why did this happen?<\/b>\u00a0<\/span><\/p>\n

Cyber-criminals always focus on cutting-edge technologies from where they can obtain most of the case-sensitive data to execute cyber-attacks in the future through compromised network, devices, people and digital identities.<\/span><\/p>\n

The worst part therefore in this incident is that IT security communities are skeptical that there could be a massive cyber espionage that could inflict more disastrous damage to the organizations in the future.<\/span><\/p>\n

Since the theft was happening secretly for more than a year, the researchers are afraid that the business units of the organizations, network architecture, the employees\u2019 email accounts, credentials and even the stakeholder\u2019s data could be at stake.<\/span>\u00a0<\/b><\/p>\n

The forensic analysis<\/b><\/p>\n

It was established (after the first intrusion from cyber-criminals) that these state-sponsored actors had maintained full access to everything in the network that would enable them to identify and target the sensitive information at the right time.<\/span><\/p>\n

Typically, the following loopholes invites targeted cyber-attacks and cyber-espionage:<\/b><\/p>\n

\u00a0Access mechanisms to the IT network and infrastructure devices, including critical information are not robust enough. As a result, it becomes a cakewalk for cyber-criminals to execute zero-day types of attacks.<\/span><\/p>\n

Zero monitoring of the end-user activities. It enables and emboldens the cyber-criminals to keep on performing the espionage and subsequently steal the enterprise data.<\/span><\/p>\n

While organizations adopt new technologies to enhance business processes and business efficiency, many times the areas of data security are ignored. As a result, clandestine infrastructure helps the hackers to obtain unauthorized access control of the critical systems and eventually critical-business information is compromised.<\/span><\/p>\n

For a long period, organizations fail to conduct an IT audit which again lure the malicious actors to keep on doing the anomalies.<\/span><\/p>\n

Non-compliance to the global regulatory standards help the cyber crooks to inflict every possible damage.<\/span>\u00a0<\/span><\/p>\n

How could it have been prevented?<\/b><\/p>\n

ARCON being a global thought leader, innovator and trend-setter in the information security domain, propagates the adoption of the following cyber-attack preventive measures:<\/span><\/p>\n

\u00a0<\/span>Zero Trust Architecture:<\/b> The four critical components in the IT infrastructure: Network, People, Data and Devices, must always be controlled by a rule and role-based defined permissions to prevent unauthorized access. At every level of access, a trust has to maintained through<\/span> authentication and authorization<\/span><\/a> tools to establish the authenticity of the users.<\/span><\/p>\n

End-User Monitoring<\/b>: Seamless monitoring of the end-user activities helps organizations to know who is accessing what at what time and for what purpose. Otherwise, the irrelevant and malicious users can misuse information that he\/ she is not authorized to access. ARCON | Privileged Access Management is a robust tool for end-user monitoring.<\/span><\/p>\n

\u2018Just-in-time\u2019 Access to Target Applications: <\/b>Allowing 24*7 access to users increases the threat surface.<\/span> Always-on access<\/span><\/a> invites application misuse, abuse, snooping among other forms of threats that can lead to social engineering and subsequent cyber-attacks.<\/span>\u00a0<\/b><\/p>\n

Audit Trails<\/b>: It helps organizations to generate and maintain reports on every user activity on target systems at predefined time intervals. Any suspicious activity could be easily detected and notified so that the organization can take crucial preventive decisions.<\/span><\/p>\n

Compliance<\/b>: Following the global compliance standards is the safest way to protect an organization from anomalous activities. Adhering to IT security and regulatory mandates builds the foundation of a robust cyber-security framework. ARCON\u2019s enterprise-level solutions like Privileged Access Management (PAM), Endpoint Privileged Management (EPM), Identity and Access Management (IDAM), User Behaviour Analytics (UBA), My Vault and others help organizations to follow the mandates.<\/span><\/p>\n

The Bottom-line<\/b><\/p>\n

Protecting Intellectual Property is one of the core responsibilities of any multinational enterprise. Organizations are adopting new and advanced technologies to climb the ladder for business growth. However, to give a robust foundation to that \u2018business growth\u2019, simultaneous focus on data security is a must.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

ARCON has always propagated the message of controlling and protecting the inner realm of an organization\u2019s IT network. It builds the foundation for robust cybersecurity.\u00a0 Whether the cyber-criminal sits outside the realm or is present inside the periphery, typically it is the compromised insider-privy to confidential information- who is behind an insider attack or cyber-espionage. […]<\/p>\n","protected":false},"author":40,"featured_media":47362,"parent":0,"menu_order":0,"template":"","meta":{"_acf_changed":false,"footnotes":""},"risk-categories":[],"class_list":["post-46916","risk-to-watch","type-risk-to-watch","status-publish","has-post-thumbnail","hentry"],"acf":{"blog_inner_page_contents":[{"acf_fc_layout":"hero_section","image":47362,"news_logo":"","publish_date":"","reading_time":"","heading":"","para":"","cta_text":"","cta_url":"","is_featured_post":false},{"acf_fc_layout":"page_contents","social_media_items":null,"sidebar_item_desktop":[{"id":"Overview","item_name":"Overview"},{"id":"What exactly happened?","item_name":"What exactly happened?"},{"id":"Why did this happen?\u00a0","item_name":"Why did this happen?\u00a0"},{"id":"The forensic analysis","item_name":"The forensic analysis"},{"id":"How could it have been prevented?","item_name":"How could it have been prevented?"},{"id":"The Bottom-line","item_name":"The Bottom-line"}],"contents":[{"id":"Overview","title":"Overview","content":"ARCON has always propagated the message of controlling and protecting the inner realm of an organization\u2019s IT network. It builds the foundation for robust cybersecurity.\u00a0\r\n\r\nWhether the cyber-criminal sits outside the realm or is present inside the periphery, typically it is the compromised insider-privy to confidential information- who is behind an insider attack or cyber-espionage.\r\n\r\nRecently approximately thirty (30) multinational companies faced the wrath of state-sponsored actors. The incident has brought to the forefront yet again the dire need to adopt robust access management methods to prevent the theft and exfiltration of sensitive data."},{"id":"What exactly happened?","title":"What exactly happened?","content":"A report published by a US-based cybersecurity firm revealed that a state-sponsored group, in years\u2019 long cyber operations, stealthily stole intellectual property worth trillions of dollars. The victims are multinational organizations from manufacturing, pharmaceutical, energy and utilities sectors spread across Asia, Europe and North America.\r\n\r\nThe alarming report unveiled that state-sponsored cyber-criminals exfiltrated hundreds of gigabytes of sensitive data. This data includes strategic blueprints, IT architecture diagrams, Intellectual Properties of drugs among other forms of sensitive data."},{"id":"Why did this happen?\u00a0","title":"Why did this happen?\u00a0","content":"Cyber-criminals always focus on cutting-edge technologies from where they can obtain most of the case-sensitive data to execute cyber-attacks in the future through compromised network, devices, people and digital identities.\r\n\r\nThe worst part therefore in this incident is that IT security communities are skeptical that there could be a massive cyber espionage that could inflict more disastrous damage to the organizations in the future.\r\n\r\nSince the theft was happening secretly for more than a year, the researchers are afraid that the business units of the organizations, network architecture, the employees\u2019 email accounts, credentials and even the stakeholder\u2019s data could be at stake."},{"id":"The forensic analysis","title":"The forensic analysis","content":"It was established (after the first intrusion from cyber-criminals) that these state-sponsored actors had maintained full access to everything in the network that would enable them to identify and target the sensitive information at the right time.\r\n\r\nTypically, the following loopholes invites targeted cyber-attacks and cyber-espionage:<\/b>\r\n\r\n\u00a0Access mechanisms to the IT network and infrastructure devices, including critical information are not robust enough. As a result, it becomes a cakewalk for cyber-criminals to execute zero-day types of attacks.\r\n\r\nZero monitoring of the end-user activities. It enables and emboldens the cyber-criminals to keep on performing the espionage and subsequently steal the enterprise data.\r\n\r\nWhile organizations adopt new technologies to enhance business processes and business efficiency, many times the areas of data security are ignored. As a result, clandestine infrastructure helps the hackers to obtain unauthorized access control of the critical systems and eventually critical-business information is compromised.\r\n\r\nFor a long period, organizations fail to conduct an IT audit which again lure the malicious actors to keep on doing the anomalies.\r\n\r\nNon-compliance to the global regulatory standards help the cyber crooks to inflict every possible damage."},{"id":"How could it have been prevented?","title":"How could it have been prevented?","content":"ARCON being a global thought leader, innovator and trend-setter in the information security domain, propagates the adoption of the following cyber-attack preventive measures:\r\n\r\nZero Trust Architecture:<\/b>\u00a0The four critical components in the IT infrastructure: Network, People, Data and Devices, must always be controlled by a rule and role-based defined permissions to prevent unauthorized access. At every level of access, a trust has to maintained through\u00a0authentication and authorization\u00a0tools to establish the authenticity of the users.\r\n\r\nEnd-User Monitoring<\/b>: Seamless monitoring of the end-user activities helps organizations to know who is accessing what at what time and for what purpose. Otherwise, the irrelevant and malicious users can misuse information that he\/ she is not authorized to access. ARCON | Privileged Access Management is a robust tool for end-user monitoring.\r\n\r\n\u2018Just-in-time\u2019 Access to Target Applications:\u00a0<\/b>Allowing 24*7 access to users increases the threat surface.\u00a0Always-on access\u00a0invites application misuse, abuse, snooping among other forms of threats that can lead to social engineering and subsequent cyber-attacks.\u00a0<\/b>\r\n\r\nAudit Trails<\/b>: It helps organizations to generate and maintain reports on every user activity on target systems at predefined time intervals. Any suspicious activity could be easily detected and notified so that the organization can take crucial preventive decisions.\r\n\r\nCompliance<\/b>: Following the global compliance standards is the safest way to protect an organization from anomalous activities. Adhering to IT security and regulatory mandates builds the foundation of a robust cyber-security framework. ARCON\u2019s enterprise-level solutions like Privileged Access Management (PAM), Endpoint Privileged Management (EPM), Identity and Access Management (IDAM), User Behaviour Analytics (UBA), My Vault and others help organizations to follow the mandates."},{"id":"The Bottom-line","title":"The Bottom-line","content":"Protecting Intellectual Property is one of the core responsibilities of any multinational enterprise. Organizations are adopting new and advanced technologies to climb the ladder for business growth. However, to give a robust foundation to that \u2018business growth\u2019, simultaneous focus on data security is a must."}],"form_shortcode":"","choose_asset_type":"files","links":"","files":"","pardot_redirect_url":"","video_link":""}]},"yoast_head":"\nZero Trust, Controlled Privileges and Data - ARCON<\/title>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Zero Trust, Controlled Privileges and Data - ARCON\" \/>\n<meta property=\"og:description\" content=\"ARCON has always propagated the message of controlling and protecting the inner realm of an organization\u2019s IT network. It builds the foundation for robust cybersecurity.\u00a0 Whether the cyber-criminal sits outside the realm or is present inside the periphery, typically it is the compromised insider-privy to confidential information- who is behind an insider attack or cyber-espionage. […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/\" \/>\n<meta property=\"og:site_name\" content=\"ARCON\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-06T10:19:26+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"455\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/\",\"name\":\"Zero Trust, Controlled Privileges and Data - ARCON\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg\",\"datePublished\":\"2022-05-24T10:53:00+00:00\",\"dateModified\":\"2026-04-06T10:19:26+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/#primaryimage\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg\",\"contentUrl\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/wp-content\\\/uploads\\\/2026\\\/02\\\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg\",\"width\":1024,\"height\":455},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/zero-trust-controlled-privileges-and-data\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Risk To Watch\",\"item\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/risk-to-watch\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Zero Trust, Controlled Privileges and Data\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/#website\",\"url\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/\",\"name\":\"ARCON\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/arcon.xyz\\\/staging01\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Zero Trust, Controlled Privileges and Data - ARCON","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Zero Trust, Controlled Privileges and Data - ARCON","og_description":"ARCON has always propagated the message of controlling and protecting the inner realm of an organization\u2019s IT network. It builds the foundation for robust cybersecurity.\u00a0 Whether the cyber-criminal sits outside the realm or is present inside the periphery, typically it is the compromised insider-privy to confidential information- who is behind an insider attack or cyber-espionage. […]","og_url":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/","og_site_name":"ARCON","article_modified_time":"2026-04-06T10:19:26+00:00","og_image":[{"width":1024,"height":455,"url":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/","url":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/","name":"Zero Trust, Controlled Privileges and Data - ARCON","isPartOf":{"@id":"https:\/\/arcon.xyz\/staging01\/#website"},"primaryImageOfPage":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/#primaryimage"},"image":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/#primaryimage"},"thumbnailUrl":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg","datePublished":"2022-05-24T10:53:00+00:00","dateModified":"2026-04-06T10:19:26+00:00","breadcrumb":{"@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/#primaryimage","url":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg","contentUrl":"https:\/\/arcon.xyz\/staging01\/wp-content\/uploads\/2026\/02\/zero-trust-controlled-privileges_RTW-banner-1-1024x455-1.jpeg","width":1024,"height":455},{"@type":"BreadcrumbList","@id":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/zero-trust-controlled-privileges-and-data\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/arcon.xyz\/staging01\/"},{"@type":"ListItem","position":2,"name":"Risk To Watch","item":"https:\/\/arcon.xyz\/staging01\/risk-to-watch\/"},{"@type":"ListItem","position":3,"name":"Zero Trust, Controlled Privileges and Data"}]},{"@type":"WebSite","@id":"https:\/\/arcon.xyz\/staging01\/#website","url":"https:\/\/arcon.xyz\/staging01\/","name":"ARCON","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/arcon.xyz\/staging01\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46916","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch"}],"about":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/types\/risk-to-watch"}],"author":[{"embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/users\/40"}],"version-history":[{"count":5,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46916\/revisions"}],"predecessor-version":[{"id":50828,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-to-watch\/46916\/revisions\/50828"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/media\/47362"}],"wp:attachment":[{"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/media?parent=46916"}],"wp:term":[{"taxonomy":"risk-categories","embeddable":true,"href":"https:\/\/arcon.xyz\/staging01\/wp-json\/wp\/v2\/risk-categories?post=46916"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}