Cloudflare launches eSim to protect mobile devices
>
Cloudflare is going to launch its own eSIM card equivalent, which it says is the world’s first “Zero Trust” SIM card.
The new Cloudflare SIM is subscribed to the zero trust security model, which describes a “never trust, always verify” approach where devices are never automatically trusted, even if they have been previously verified or already connected to a secure corporate network. .
Not surprisingly, there is interest in such technology, mobile devices remain an extremely popular endpoint for hackers to access corporate networks; cybersecurity firm Zimperium analyzed more than 500,000 phishing sites in 2022 and found that the number of mobile-specific phishing websites grew by 50%.
What do users get?
Employees can get their monthly data costs covered by their employer if they agree to allow Cloudflare to route their work-related SIM card traffic over a network with Zero Trust protections
Cloudflare claims the solution is easy to install and users only need to scan a QR code, which can be embedded in an employee’s onboarding materials, from their phone’s camera.
The new SIM card allows companies to prevent employees from visiting phishing and malware sites, according to Cloudflare DNS requests leaving the device can automatically and implicitly use the Cloudflare Gateway for DNS filtering.
In addition, the new SIM card will enable companies to mitigate common SIM-based attacks, with Cloudflare saying that “an eSIM-first approach allows us to prevent SIM swapping or clone attacks, and by preventing SIM cards lock on individual employee devices, the same protections for physical SIM cards”.
Cloudflare also claims that the new SIM card will enable secure, identity-based private connectivity to cloud services, on-premise infrastructure and fleets of IoT devices through its WAN-as-a-service solution Magic WAN.
Zero Trust SIM has yet to launch but will be rolled out to customers on a regional basis, and Cloudflare says it is currently testing the technology on its own network.
If you are an organization without an existing mobile device solution and would like to sign up, please contact here (opens in new tab).