![\"Komatsu](\"https:\/\/www.newsbeep.com\/au\/wp-content\/uploads\/2026\/08\/1786401733_652_ImageResizer.ashx.jpeg\")
<\/p>\nKomatsu Australia is moving to protect its corporate network using zero trust network architecture to tackle rapidly emerging cyber security threats posed by frontier AI models.<\/p>\n
<\/p>\n
At the end of this month the mining equipment company will enter a pilot phase using Zscaler\u2019s cloud-based security, zero trust exchange, to broker access to its applications, moving away from investment in building its own network protection infrastructure.<\/p>\n
The initial pilot will involve up to 100 users with a view to extending it just over 4000 users across its network footprint in Australia, New Zealand, New Caledonia and Papua New Guinea.<\/p>\n
Komatsu Australia cyber security manager Henry Wright told iTnews that the change meant that the company would treat every device connecting into its network, whether in the hands of a remote worker or one on premises, with the same level of trust.<\/p>\n
The move is partly driven by concerns about internal security threats such as employees transitioning to rivals, however Wright said it was primarily in response to recent developments in AI.<\/p>\n
Specifically, Wright said he was referring to the increasingly frequent reports of the likes of Anthropic and OpenAI losing control of agents that then autonomously carry out successful cyber-attacks on other companies.<\/p>\n
\u201cThe concern that we have right now \u2026 is things like [Claude] Mythos where they are going to scan your environment at machine speed to find a way in. If we’re not working towards minimising that attack surface, we’re opening ourselves up for a serious world of pain.<\/p>\n
\u201cThat’s why we started now. We think that as these advancements progress and as threat actors start utilising these tools to their advantage doing things at machine speed it\u2019s going to be scary, so we’re planning for that and that’s why we want to separate our network completely,\u201d Wright said.<\/p>\n
Zscaler’s zero trust network access (ZTNA) methodology is based on the concept of placing a switchboard between end users, an organisation’s applications and the wider internet.<\/p>\n
Applications called client connectors that sit on devices and lightweight virtual machines that run in data centres reach each other through points of presence on Zscaler’s global Zero Trust Exchange cloud platform to have security controls applied.<\/p>\n
Depending on what services are turned on, the zero trust exchange then controls what applications or internet locations users can access.<\/p>\n
Zscaler internet access (ZIA) replaces traditional firewalls acting as secure gateways to control outbound public internet access requests.<\/p>\n
Zscaler’s ZPA service sets access policies for inbound requests for applications which are, theoretically, then made invisible to the wider internet behind ZTE, hiding the attack surface from threats.<\/p>\n
Komatsu had been using ZIA for remote workers since the pandemic and is now expanding to ZPA.<\/p>\n
Even with the attack surface reduced, Wright said his main concern with AI is not that it would uncover critical vulnerabilities, but rather that it will find smaller ones and chain them together to create novel attack paths.<\/p>\n
\u201cI just think that we don’t know what we don’t know and that’s the fear I have,\u201d he said.<\/p>\n
The investments have also moved the heavy equipment manufacturer away from a capex model toward an opex model for security.<\/p>\n