Press Release titled "Zero-Day Attacks Mitigation - A Solution from Valiant Communications"

Valiant Communications Limited (An ISO 9001 :2015 and ISO 14001 :2015 Certified Company) . ::•:;/. VALIANT Regd. Office: 71/l, Shivaji Marg. New Delhi-110015. India . Corporate ldenlity No. : t7 4899 DL 1993 PLC056652 I GSTIN : 07 AAA CV 4250G 1Z J •: ::;.;. ...:. ... ...C .. ..O .. M ..M ...U ..N .. I CATIONS T: +91-11-4105 5601, 4105 5602. 4105 5603, 2592 8415, 2592 8416. 2541 0053 F: +91-11-2543 4300, 4105 5604 E : admin@valiantcom.com I W : www.valiantcom.com Date: 27-07-2026 The Secretary, BSE Limited Phiroze Jeejeebhoy Tower, 25th Floor, Dalal Street, Mumbai -400 023 Ref: Press Release titled "Zero-Day Attacks Mitigation - A Solution from Valiant Communications." Dear Sir I Madam, With the above reference, please find enclosed herewith the press release in compliance with SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015. We hope you find the same in order. Sincerely, For Valiant Communications Limited Manish Kumar Company Secretary PRESS RELEASE For immediate use 27 July 2026 Zero-Day Attacks Mitigation — A Solution from Valiant Communications The Threat Is Real, Escalating, and Outpacing Conventional Defences More than 23,600 vulnerabilities were published in the first half of 2025 alone — a 16% increase over 2024. Sophisticated threat actors, including nation-state groups and ransomware operators, are weaponising unknown vulnerabilities faster than ever before. Nearly 30% of Known Exploited Vulnerabilities were weaponised within 24 hours of public disclosure — some before patches were even available. Zero-day exploitation has shifted from occasional high-profile incidents to a persistent element of the threat landscape. Nearly 90 zero-day vulnerabilities were observed in active exploitation during 2025, continuing the elevated trend first seen after 2021. Ransomware incidents spiked by 36%, with attackers increasingly targeting edge devices and unconventional endpoints. Nearly 50% of attackers in recent campaigns were linked to state-sponsored or hacktivist groups, and state-backed campaigns focusing specifically on industrial and operational technology (OT) environments. The financial consequences are severe. The average cost of a data breach for US companies reached an all-time high of $10.22 million in 2025. Globally, the average stands at $4.44 million — and nearly two-thirds of breached organisations are still recovering from the incident long after it has been contained. This is precisely the threat environment where hardware-based isolation outperforms software- based security — and where VCL's Network Isolation Kill Switch and VCL-Network MouseTrap deliver demonstrable, measurable protection. A Zero-Day Attack Exploits the Fundamental Weakness of Signature-Based Security A zero-day attack exploits an unknown vulnerability — one for which no patch, signature, or antivirus definition yet exists. Every conventional software-based defence — firewalls, intrusion prevention systems, endpoint protection — relies on knowing what to look for. Against a zero- day, they are blind. In 2025, 48% of tracked zero-days targeted enterprise-grade technology, marking a new high. The increased exploitation of security and networking devices highlights the critical risk posed by trusted edge infrastructure. In 2024, 20 of 33 enterprise zero-days targeted security and networking devices — over 60% of enterprise zero-day exploitation. Enterprise software exhibits a consistent structural weakness: networking devices highlight the value attackers place on trusted edge infrastructure that lacks endpoint detection. Critically, the average time to identify and contain a breach stood at 258 days for identification and 64 days for containment. Every day a zero-day remains undetected, the attacker deepens their access, maps your network, and positions for maximum impact. VCL's Network Isolation Kill Switch and VCL-Network MousTrap take a fundamentally different approach: they don't need to recognise the attack. They detect its behaviour. How the VCL-Network MousTrap Catches Zero-Days The VCL-Network MouseTrap is an advanced honeypot — a decoy server that impersonates legitimate critical assets: servers, protection relays, RTUs, payment gateways, SCADA nodes. When a zero-day exploit propagates through a network, it probes and maps whatever it finds. The moment it probes the VCL-Network MouseTrap, it has revealed itself — without the defender needing to know anything about the exploit's signature or method. The VCL-Network MouseTrap instantly generates audio-visual alarms, SNMP traps, out-of-band security alerts, and Network Management System alarms. Crucially, its RS-232/RS-485 output is directly wired to VCL's Network Isolation Kill Switch — triggering an automated isolation the moment intrusion is confirmed, with zero human delay. A zero-day cannot hide its lateral movement from a decoy it doesn't know exists. How the VCL Network Isolation Kill Switch (VCL-2702/5052/5054) contains Zero-Days Once the VCL-Network MouseTrap fires, the VCL Network Isolation Kill Switch acts at the hardware level — physically severing the LAN from the WAN, or isolating specific servers and data storage assets, in milliseconds. This is not a software command that a sophisticated zero-day could intercept or disable. It is a physical disconnection, enforced by hardware, independent of the operating system, management plane, or any software layer the attacker may have already compromised. This distinction is decisive. Nation-state actors have been documented deploying custom tools to manipulate built-in integrity checker mechanisms and evade detection — precisely the kind of attack that renders software-defined responses unreliable. A hardware-enforced physical cut cannot be subverted by malware already present in the network. Critically, the VCL Network Isolation Kill Switch is fail-safe: if it loses power or suffers a control card failure, any port already placed in isolation mode remains isolated. The attacker cannot recover connectivity by disrupting the device itself. Why OT and Critical Infrastructure Face Disproportionate Risk Power utilities, water treatment plants, substations, defence installations, banking infrastructure, and data centres operate on networks where a zero-day breach is not merely a data security incident — it is a threat to physical safety, national security, and economic continuity. Malicious State-backed campaigns have focused specifically on industrial and OT environments, and nearly half of attacker groups involved in 2025 campaigns were state-sponsored or hacktivist in nature. These are not opportunistic criminals; they are adversaries with the patience, capability, and intent to cause lasting operational damage. OT environments compound the problem: many protection relays, RTUs, and SCADA systems cannot run endpoint agents, cannot be patched rapidly, and cannot tolerate the latency introduced by software-based security inspection. The only viable defence is one that operates independently of the endpoint — exactly what VCL's hardware architecture delivers. The Combined Architecture — Why It Matters Threat Stage VCL-MouseTrap Response VCL Kill Switch Response Zero-day probes network Decoy lures and logs attacker Standing by Intrusion confirmed Fires alarm + triggers Kill Physically isolates Switch via serial LAN/WAN and critical digital assets Attacker attempts lateral Non-volatile forensic log Network segments remain spread captures IP fingerprint physically severed Incident response Full access log for digital Isolated mode maintained forensics until manual release Compliance and Regulatory Alignment Regulators have responded to the escalating threat by mandating rapid detection and network segmentation capabilities in critical sectors. VCL's architecture directly supports compliance with:  International: IEC 62443 (Industrial Automation and Control Systems security) and IEC 61850 (substation communication security), both of w [Showing first 8,000 characters — download PDF for full document]