{"id":18626,"date":"2025-12-08T09:53:58","date_gmt":"2025-12-08T08:53:58","guid":{"rendered":"https:\/\/www.kappadata.pl\/?p=18626"},"modified":"2025-12-08T09:53:58","modified_gmt":"2025-12-08T08:53:58","slug":"how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches","status":"publish","type":"post","link":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/","title":{"rendered":"How to Stop Lateral Movement After a Phishing Attack? runZero on Blocking Network Breaches"},"content":{"rendered":"<div class=\"wpb-content-wrapper\"><p>[vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_empty_space][\/vc_column][\/vc_row][vc_row css_animation=&#8221;&#8221; row_type=&#8221;row&#8221; use_row_as_full_screen_section=&#8221;no&#8221; type=&#8221;full_width&#8221; angled_section=&#8221;no&#8221; text_align=&#8221;left&#8221; background_image_as_pattern=&#8221;without_pattern&#8221;][vc_column][vc_column_text css=&#8221;&#8221;]<\/p>\n<div class=\"flex-shrink-0 flex flex-col relative items-end\">\n<div class=\"pt-0\">\n<div class=\"gizmo-bot-avatar flex h-8 w-8 items-center justify-center overflow-hidden rounded-full\">\n<div class=\"vc_row wpb_row section vc_row-fluid \">\n<div class=\" full_section_inner clearfix\">\n<div class=\"wpb_column vc_column_container vc_col-sm-12\">\n<div class=\"vc_column-inner\">\n<div class=\"wpb_wrapper\">\n<div class=\"wpb_text_column wpb_content_element \">\n<div class=\"wpb_wrapper\">\n<p data-start=\"207\" data-end=\"565\">Every cybersecurity professional knows this truth. It is rarely said out loud, but in practice, attackers will sooner or later gain access to the network. This may happen through a sophisticated phishing campaign, stolen credentials, or a simple configuration flaw. However, the real threat begins only when the attacker starts moving across the environment.<\/p>\n<p data-start=\"567\" data-end=\"709\">And this is where the key question arises:<br data-start=\"609\" data-end=\"612\" \/><strong data-start=\"612\" data-end=\"709\">How can you stop lateral movement in the network before an incident turns into a catastrophe?<\/strong><\/p>\n<p data-start=\"711\" data-end=\"980\">It is lateral movement that is responsible for most incident escalations \u2014 from ransomware to data breaches. Attackers do not want to remain on a single compromised device. Instead, they look for paths leading to servers, backups, Active Directory, or web applications.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p>[\/vc_column_text][vc_empty_space]<div class=\"image_with_text\"><img decoding=\"async\" itemprop=\"image\" src=\"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/Asset-inventory-in-the-runZero-Platform.png\" alt=\"\" \/><h3  class=\"image_with_text_title\"><\/h3><span style=\"margin: 6px 0px;\" class=\"separator transparent\"><\/span><\/div>[vc_empty_space][vc_column_text css=&#8221;&#8221;]<\/p>\n<div class=\"flex-shrink-0 flex flex-col relative items-end\">\n<div class=\"pt-0\">\n<div class=\"gizmo-bot-avatar flex h-8 w-8 items-center justify-center overflow-hidden rounded-full\">\n<blockquote data-start=\"2232\" data-end=\"2415\">\n<div class=\"wpb_text_column wpb_content_element \">\n<div class=\"wpb_wrapper\">\n<div class=\"flex-shrink-0 flex flex-col relative items-end\">\n<div class=\"pt-0\">\n<div class=\"gizmo-bot-avatar flex h-8 w-8 items-center justify-center overflow-hidden rounded-full\">\n<h6 class=\"sr-only\">ChatGPT powiedzia\u0142:<\/h6>\n<div class=\"text-base my-auto mx-auto pb-10 [--thread-content-margin:--spacing(4)] thread-sm:[--thread-content-margin:--spacing(6)] thread-lg:[--thread-content-margin:--spacing(16)] px-(--thread-content-margin)\">\n<div class=\"[--thread-content-max-width:40rem] thread-lg:[--thread-content-max-width:48rem] mx-auto max-w-(--thread-content-max-width) flex-1 group\/turn-messages focus-visible:outline-hidden relative flex w-full min-w-0 flex-col agent-turn\" tabindex=\"-1\">\n<div class=\"flex max-w-full flex-col grow\">\n<div class=\"min-h-8 text-message relative flex w-full flex-col items-end gap-2 text-start break-words whitespace-normal [.text-message+&amp;]:mt-1\" dir=\"auto\" data-message-author-role=\"assistant\" data-message-id=\"dca8ddca-82d9-4c87-869d-5dd0a70eda51\" data-message-model-slug=\"gpt-5-1\">\n<div class=\"flex w-full flex-col gap-1 empty:hidden first:pt-[1px]\">\n<div class=\"markdown prose dark:prose-invert w-full break-words dark markdown-new-styling\">\n<h3 data-start=\"0\" data-end=\"44\"><strong data-start=\"4\" data-end=\"44\">Raritan SX2\/SXII Retirement Timeline<\/strong><\/h3>\n<p data-start=\"46\" data-end=\"121\">The EOL process has been officially confirmed and includes three key dates:<\/p>\n<ul data-start=\"123\" data-end=\"246\">\n<li data-start=\"123\" data-end=\"162\">\n<p data-start=\"125\" data-end=\"162\"><strong data-start=\"125\" data-end=\"141\">June 2, 2025<\/strong> \u2013 EOL announcement<\/p>\n<\/li>\n<li data-start=\"163\" data-end=\"203\">\n<p data-start=\"165\" data-end=\"203\"><strong data-start=\"165\" data-end=\"186\">December 31, 2025<\/strong> \u2013 end of sales<\/p>\n<\/li>\n<li data-start=\"204\" data-end=\"246\">\n<p data-start=\"206\" data-end=\"246\"><strong data-start=\"206\" data-end=\"227\">December 31, 2027<\/strong> \u2013 end of support<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"248\" data-end=\"396\" data-is-last-node=\"\" data-is-only-node=\"\">Importantly, Legrand warns that component shortages may shorten this timeline, creating additional pressure to begin migration as early as possible.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/blockquote>\n<\/div>\n<\/div>\n<\/div>\n<p>[\/vc_column_text][vc_empty_space][vc_column_text css=&#8221;&#8221;]<\/p>\n<h2 data-start=\"111\" data-end=\"200\"><strong data-start=\"114\" data-end=\"200\">Visibility Is the Foundation: 60% of the Network Is Invisible to Traditional Tools<\/strong><\/h2>\n<p data-start=\"202\" data-end=\"493\">The runZero team shows that, on average, <strong data-start=\"243\" data-end=\"329\">60% of the attack surface consists of devices that organizations cannot see at all<\/strong> \u2014 unmanaged endpoints, IoT and OT devices, and shadow IT.<br data-start=\"387\" data-end=\"390\" \/><strong data-start=\"390\" data-end=\"493\">Without full asset inventory, it is impossible to effectively stop lateral movement in the network.<\/strong><\/p>\n<hr data-start=\"495\" data-end=\"498\" \/>\n<h2 data-start=\"500\" data-end=\"570\"><strong data-start=\"503\" data-end=\"570\">The Most Common Internal Exposures That Enable Lateral Movement<\/strong><\/h2>\n<p data-start=\"572\" data-end=\"660\">runZero identifies <strong data-start=\"591\" data-end=\"609\">five key areas<\/strong> that most often open the door to lateral movement:<\/p>\n<h3 data-start=\"662\" data-end=\"697\"><strong data-start=\"666\" data-end=\"697\">1. File Servers and Backups<\/strong><\/h3>\n<p data-start=\"698\" data-end=\"835\">Legacy protocols (SMBv1), lack of SMB signing, and clear-text LDAP \u2014 all of these allow attackers to \u201cjump\u201d between resources in seconds.<\/p>\n<h3 data-start=\"837\" data-end=\"862\"><strong data-start=\"841\" data-end=\"862\">2. Open Databases<\/strong><\/h3>\n<p data-start=\"863\" data-end=\"976\">MongoDB, Redis, and Cassandra are often exposed without authentication. This is the fastest path to data leakage.<\/p>\n<h3 data-start=\"978\" data-end=\"1005\"><strong data-start=\"982\" data-end=\"1005\">3. Active Directory<\/strong><\/h3>\n<p data-start=\"1006\" data-end=\"1139\">Accounts with non-expiring passwords, misconfigured policies, and inactive accounts \u2014 a perfect environment for privilege escalation.<\/p>\n<h3 data-start=\"1141\" data-end=\"1178\"><strong data-start=\"1145\" data-end=\"1178\">4. Unsecured Web Applications<\/strong><\/h3>\n<p data-start=\"1179\" data-end=\"1291\">HTTP logins, default passwords, outdated admin panels \u2014 a classic route for lateral movement across the network.<\/p>\n<h3 data-start=\"1293\" data-end=\"1325\"><strong data-start=\"1297\" data-end=\"1325\">5. Remote Access and BMC<\/strong><\/h3>\n<p data-start=\"1326\" data-end=\"1430\">RDP, VNC, TeamViewer, and Internet-exposed IPMI\/iDRAC devices give attackers full control over hardware.<\/p>\n<p>[\/vc_column_text][vc_empty_space]<div class=\"image_with_text\"><img decoding=\"async\" itemprop=\"image\" src=\"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/Service-inventory-in-the-runZero-Platform.png\" alt=\"\" \/><h3  class=\"image_with_text_title\"><\/h3><span style=\"margin: 6px 0px;\" class=\"separator transparent\"><\/span><\/div>[vc_empty_space][vc_column_text css=&#8221;&#8221;]<\/p>\n<h2 data-start=\"118\" data-end=\"181\"><strong data-start=\"121\" data-end=\"181\">How to Stop Lateral Movement in the Network with runZero<\/strong><\/h2>\n<p data-start=\"183\" data-end=\"300\">Those who act <strong data-start=\"197\" data-end=\"207\">before<\/strong> an incident occurs win \u2014 not those who react during one.<br data-start=\"264\" data-end=\"267\" \/>runZero enables organizations to:<\/p>\n<ul data-start=\"302\" data-end=\"531\">\n<li data-start=\"302\" data-end=\"349\">\n<p data-start=\"304\" data-end=\"349\"><strong data-start=\"304\" data-end=\"346\">detect unmanaged and invisible devices<\/strong>,<\/p>\n<\/li>\n<li data-start=\"350\" data-end=\"414\">\n<p data-start=\"352\" data-end=\"414\"><strong data-start=\"352\" data-end=\"411\">identify misconfigurations that enable lateral movement<\/strong>,<\/p>\n<\/li>\n<li data-start=\"415\" data-end=\"480\">\n<p data-start=\"417\" data-end=\"480\"><strong data-start=\"417\" data-end=\"477\">prioritize risks based on real, not theoretical, threats<\/strong>,<\/p>\n<\/li>\n<li data-start=\"481\" data-end=\"531\">\n<p data-start=\"483\" data-end=\"531\"><strong data-start=\"483\" data-end=\"530\">see the network through the attacker\u2019s eyes<\/strong>.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"533\" data-end=\"629\">As a result, organizations can <strong data-start=\"564\" data-end=\"628\">stop lateral movement before attackers reach critical assets<\/strong>.<\/p>\n<h2 data-start=\"636\" data-end=\"737\"><strong data-start=\"639\" data-end=\"737\">Conclusion: The Key Question Is Not \u201cIf,\u201d but \u201cWhat Will You Do When They Are Already Inside?\u201d<\/strong><\/h2>\n<p data-start=\"739\" data-end=\"1049\">In a world where phishing and credential theft are everyday reality, it is no longer enough to simply detect the initial breach. What truly matters is <strong data-start=\"890\" data-end=\"919\">stopping lateral movement<\/strong>.<br data-start=\"920\" data-end=\"923\" \/>runZero provides full visibility across the environment and helps <strong data-start=\"989\" data-end=\"1048\">close attack paths before they turn into real incidents<\/strong>.<\/p>\n<h2 data-start=\"1056\" data-end=\"1109\"><strong data-start=\"1059\" data-end=\"1109\">Want to See What\u2019s Really Inside Your Network?<\/strong><\/h2>\n<p data-start=\"1111\" data-end=\"1237\">Contact <strong data-start=\"1119\" data-end=\"1133\">Kappa Data<\/strong> \u2014 we will show you how runZero helps stop lateral movement and build true cyber resilience from within.<\/p>\n<p>[\/vc_column_text][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>A successful phishing attack is often just the beginning. The real danger starts when attackers begin moving laterally through your network. Discover how runZero helps stop lateral movement before it leads to ransomware, data loss, or full-scale breaches.<\/p>\n","protected":false},"author":26,"featured_media":18629,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[71,750],"tags":[270,1225,1226,752],"class_list":["post-18626","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-publications","category-runzero-en","tag-cybersecurity-en","tag-lateralmovement","tag-phishingprotection","tag-runzero-en"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.<\/title>\n<meta name=\"description\" content=\"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.\" \/>\n<meta property=\"og:description\" content=\"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/\" \/>\n<meta property=\"og:site_name\" content=\"Kappa Data\" \/>\n<meta property=\"article:published_time\" content=\"2025-12-08T08:53:58+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"1228\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ola Serafin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ola Serafin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/\"},\"author\":{\"name\":\"Ola Serafin\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\"},\"headline\":\"How to Stop Lateral Movement After a Phishing Attack? runZero on Blocking Network Breaches\",\"datePublished\":\"2025-12-08T08:53:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/\"},\"wordCount\":651,\"image\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/runZero-literal-moment.jpg\",\"keywords\":[\"#cybersecurity\",\"#LateralMovement\",\"#PhishingProtection\",\"#runZero\"],\"articleSection\":[\"publications\",\"runZero\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/\",\"name\":\"How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/runZero-literal-moment.jpg\",\"datePublished\":\"2025-12-08T08:53:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\"},\"description\":\"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/runZero-literal-moment.jpg\",\"contentUrl\":\"https:\\\/\\\/www.kappadata.pl\\\/wp-content\\\/uploads\\\/2025\\\/12\\\/runZero-literal-moment.jpg\",\"width\":1920,\"height\":1228,\"caption\":\"Jak zatrzyma\u0107 ruch boczny w sieci, zanim incydent zamieni si\u0119 w katastrof\u0119?\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Strona g\u0142\u00f3wna\",\"item\":\"https:\\\/\\\/www.kappadata.pl\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"runZero\",\"item\":\"https:\\\/\\\/www.kappadata.pl\\\/category\\\/runzero\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"How to Stop Lateral Movement After a Phishing Attack? runZero on Blocking Network Breaches\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#website\",\"url\":\"https:\\\/\\\/www.kappadata.pl\\\/\",\"name\":\"Kappa Data\",\"description\":\"The Art of IT-infrastucture, security and IoT distribution\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.kappadata.pl\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.kappadata.pl\\\/#\\\/schema\\\/person\\\/d1b118980a9e892e9128e0dec942a300\",\"name\":\"Ola Serafin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g\",\"caption\":\"Ola Serafin\"},\"sameAs\":[\"http:\\\/\\\/kappadata.pl\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.","description":"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/","og_locale":"en_US","og_type":"article","og_title":"How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.","og_description":"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.","og_url":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/","og_site_name":"Kappa Data","article_published_time":"2025-12-08T08:53:58+00:00","og_image":[{"width":1920,"height":1228,"url":"http:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg","type":"image\/jpeg"}],"author":"Ola Serafin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ola Serafin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#article","isPartOf":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/"},"author":{"name":"Ola Serafin","@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300"},"headline":"How to Stop Lateral Movement After a Phishing Attack? runZero on Blocking Network Breaches","datePublished":"2025-12-08T08:53:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/"},"wordCount":651,"image":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg","keywords":["#cybersecurity","#LateralMovement","#PhishingProtection","#runZero"],"articleSection":["publications","runZero"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/","url":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/","name":"How to Stop Lateral Movement After a Phishing Attack \u2013 runZero.","isPartOf":{"@id":"https:\/\/www.kappadata.pl\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#primaryimage"},"image":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#primaryimage"},"thumbnailUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg","datePublished":"2025-12-08T08:53:58+00:00","author":{"@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300"},"description":"Stop lateral movement after phishing with runZero. Gain full network visibility and block attackers before they reach critical systems.","breadcrumb":{"@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#primaryimage","url":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg","contentUrl":"https:\/\/www.kappadata.pl\/wp-content\/uploads\/2025\/12\/runZero-literal-moment.jpg","width":1920,"height":1228,"caption":"Jak zatrzyma\u0107 ruch boczny w sieci, zanim incydent zamieni si\u0119 w katastrof\u0119?"},{"@type":"BreadcrumbList","@id":"https:\/\/www.kappadata.pl\/en\/how-to-stop-lateral-movement-after-a-phishing-attack-runzero-on-blocking-network-breaches\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Strona g\u0142\u00f3wna","item":"https:\/\/www.kappadata.pl\/en\/"},{"@type":"ListItem","position":2,"name":"runZero","item":"https:\/\/www.kappadata.pl\/category\/runzero\/"},{"@type":"ListItem","position":3,"name":"How to Stop Lateral Movement After a Phishing Attack? runZero on Blocking Network Breaches"}]},{"@type":"WebSite","@id":"https:\/\/www.kappadata.pl\/#website","url":"https:\/\/www.kappadata.pl\/","name":"Kappa Data","description":"The Art of IT-infrastucture, security and IoT distribution","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.kappadata.pl\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.kappadata.pl\/#\/schema\/person\/d1b118980a9e892e9128e0dec942a300","name":"Ola Serafin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/46b33a839f63570fe8b8f59364eb7c69211298cafb1f9521405c3099f8cf7a09?s=96&d=mm&r=g","caption":"Ola Serafin"},"sameAs":["http:\/\/kappadata.pl"]}]}},"_links":{"self":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/18626","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/users\/26"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/comments?post=18626"}],"version-history":[{"count":3,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/18626\/revisions"}],"predecessor-version":[{"id":18654,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/posts\/18626\/revisions\/18654"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/media\/18629"}],"wp:attachment":[{"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/media?parent=18626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/categories?post=18626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kappadata.pl\/en\/wp-json\/wp\/v2\/tags?post=18626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}