Today’s world is full of unprecedented innovations and rapidly evolving technologies. It’s an era of endless possibilities, coupled with a new set of risks for security and privacy. At Samsung Electronics, we recognise that as we enter these uncharted territories, we must be prepared for the ever-changing security landscape and champion a dynamic approach to enterprise security.

The cybersecurity threats of today affect everyone, from consumers to businesses. Enterprise device fleets must be resilient— from suspicious URLs, insider employee threats and malware, to emerging risks associated with AI usage in the workplace, including sensitive data leaks. As a growing number of employees across industries — from corporate offices to the frontlines — use devices to access enterprise networks and resources, there are increased security risks that may also lead to a substantial financial toll on businesses.

Enterprise security incidents can arise across operations. However, the International Data Corporation (IDC)[1] found that an overwhelming 70 percent of successful breaches originate from endpoints — the devices that connect to networks like phones, laptops and tablets. Unfortunately, in today’s security operations landscape, IT administrators have much less visibility into mobile devices compared to PCs and servers. With mobile devices now being the most common method of employee network access, this has to change. A systematic, comprehensive approach is critical to ensuring seamless mobile capabilities and a enhanced way of protection. At Samsung, we’re setting a new standard for mobile enterprise security by committing to a collaborative Zero Trust strategy for endpoints in partnership with market leaders.

Core Principles for Endpoint Security

Samsung’s legacy of innovation is built upon our deep understanding of users. We’re constantly listening to feedback from consumers and businesses, anticipating the evolution of mobile technology. This is what enables us to develop industry-first solutions for consumers and businesses alike. As the Head of the Global Mobile B2B Team, I’m especially proud of how we’ve led the way in critical areas that deliver value to enterprises across the board. From advancing hardware-backed device attestation and threat detection to fully embracing the security principles, we are constantly striving to provide our customers with mobile devices and solutions that exceed their security requirements.

Zero Trust is a security framework that continuously assesses security, risk and trust levels based on context. The current security solutions market is dominated by network-centric Zero Trust solutions that focus on securing access at the network edge. Unfortunately, this approach by itself neglects a critical blind spot: the endpoint. Endpoints have the largest attack surface and are the most challenging IT assets to protect against cyberattacks. In most cases, they are the most vulnerable points in an organization’s IT ecosystem.

Zero Trust principles for endpoints, when realised correctly, ensure that access requests from endpoints are handled based on context that correlates with the device’s security and the user’s needs, and are continuously verified in real time. Although there is no definitive list of core principles behind Zero Trust endpoint protection, the following principles are the most commonly adopted:

• “Never trust, always verify” approach for devices: Devices should no longer be implicitly trusted just because they are within the network boundary. Instead, each device needs to be verified prior to being granted access.
• Continuous risk assessment and enforcement: Endpoint protection must be agile and ready to adapt to constantly changing risk conditions. This means continuously evaluating context — such as location, time of access and the device’s security— and adjusting security policies accordingly. Suspicious activity needs to be addressed through enforcement actions such as access restrictions or complete isolation.
• Restricted privileges and narrowly scoped access: Endpoints must enforce access control in real time based on context while ensuring privileges are granted dynamically with a narrow scope.
• Incorporation of user identity, device security and behavioral signals: A Zero Trust-compliant solution needs to make granular and informed trust decisions to enforce tight access controls. To enable such decisions, Zero Trust’s continuous evaluation of context integrates user identity, device security and behavioral signals.

While the Zero Trust security strategy is growing in adoption, Samsung is fully embracing it. By doing so, we are helping to protect the most vulnerable points in an organisation’s IT landscape. Risks related to endpoint security are constantly increasing as cloud-based applications, Bring Your Own Device (BYOD) programs and remote work prevail in the modern workplace environment. Samsung recognises the critical nature of this problem and is proactively addressing it in collaboration with partners.

Innovation and Collaboration for Security at Every Level

How does this work in practice? From the hardware level and all the way to the operating system and security interface, Zero Trust security principles are built into the architecture of Samsung Galaxy devices, enhancing protection at every layer while intuitively integrating with a business’s existing security infrastructure. Together, these practices empower enterprises to administer security threat detection and provide  more reliable responses.

At Samsung, we recognise that security is a collective effort. It is only through open collaboration with partners that we can bring the most advanced solutions to our customers. In my time at Samsung, we’ve made extensive strides in bringing forth versatile, optimised and secure solutions[2] for enterprises of all kinds.

In 2024, we integrated Samsung Knox[3] — our multilayer security management platform — with Cisco Secure Access, an innovative Security Service Edge solution. This collaboration delivers a secure and flexible employee access experience, enabling organisations to verify user identity, device security and context before granting access.

We also have a strong partnership with Microsoft, defined by a shared vision of reimagining mobile device security for business customers. The first step of this strategic plan began in 2023, when we integrated Samsung Knox with Microsoft Intune, creating an on-device mobile hardware-backed device = solution that works equally well on both company and personal devices. This solution is now enabled by default in all new Android App Protection Policies, empowering organisations to bolster the security of all Samsung devices in their fleet. In yet another step forward in our partnership with Microsoft, Samsung offers a direct-to-security operations center (SOC) connector. This was achieved through the integration of Knox Asset Intelligence and Microsoft Sentinel[4], a scalable, cloud-native security information and event management (SIEM) solution. This integration delivers unprecedented visibility into mobile security threats, providing centralised monitoring and protection across enterprise device fleets.

Working together with partners, Samsung is addressing key challenges in multiple areas — securing mobile devices, minimising damage from potential cyber threats and empowering employees to work efficiently and effectively, reducing concerns for security.

Holistic Security for Enhanced Privacy

We’re constantly innovating, refining and developing Samsung Knox solutions in order to bring our customers enhanced control, greater transparency and better protection against cyber threats.

By embodying Zero Trust as a core pillar of Samsung Knox, every measure is being taken to help secure mobile devices and data.

As threats become increasingly complex with AI and hyperconnectivity taking center stage, security and privacy are more important now than ever before. Today’s business landscape is constantly being threatened by an increasing volume of cyberattacks that aim to exploit IT vulnerabilities, with mobile devices and other endpoints quickly becoming prime targets.

That’s why Samsung is working with market-leading companies to provide security solutions that work seamlessly with existing infrastructure, offering increased end-to-end protection. These collaborative solutions are a testament to our commitment to not only adhere to industry standards but to also drive their continued development when it comes to Zero Trust endpoint security. This is just the beginning.

To learn more about Samsung Knox’s approach to mobile security, visit samsungknox.com.

[1] The Hacker News, “10 Critical Endpoint Security Tips You Should Know,” April 26, 2024 (reporting IDC data)

[2] Cisco Secure Access, Microsoft Intune and Microsoft Sentinel are third-party solutions and paid offerings.

[3] Samsung Knox Vault availability may vary by model including but not limited to Galaxy S Series, Galaxy A Series, Galaxy Tab S Series and more.

[4] Knox Asset Intelligence is a paid offering available through Knox Suite Plans.

This level of personalisation can be incredibly helpful, but the more your phone knows, the more there is to protect. So, what’s keeping all that personal data secure?

Samsung believes there is no privacy without strong security. That’s why every Galaxy device is protected from the chip up by a multi-layered approach, which includes on-device personalisation, user-controlled cloud processing, and ecosystem-wide protection through Samsung Knox Matrix.

At the core of this system is Samsung Knox Vault[2], Samsung’s hardware-based solution for your most sensitive information.

Secured at the Hardware Level

Most devices rely on software alone to guard sensitive data, but Galaxy devices go further.

Knox Vault is a hardware-level security solution that creates a physical barrier between your most private information and everything else. It works like a locked room inside your phone, with its own processor and memory. It pairs a secure processor with dedicated memory, isolating your passwords, PINs, biometrics, and cryptographic keys. These are the kinds of details you don’t want anyone else to access, and Knox Vault is built to make sure they stay private. You don’t need to activate or manage it, it’s always on, working silently in the background, helping keep your data safe while you get on with your day.

This is particularly crucial in the age of AI as user concerns are expanding from traditional cybersecurity threats, like viruses and malware, to worries over leaking personal data, such as conversations with your AI assistant. And as AI becomes part of more everyday tasks, the types of data that need protection are also expanding.

For example, location service metadata from your personal photos, not only details the resolution and file format, but could easily give away where you live and the exact location where the image was taken. In the era of AI, personal information like your address, face clustering ID, person ID, pet type, scene type and more need to encrypted and stored in a safe location. These things aren’t just files — they are deeply connected to your daily life.

Knox Vault helps mitigate these growing concerns by safely storing personal information in a secure, hardware-isolated environment designed to block both physical tampering and remote attacks ensuring your data can’t be accessed without approval.

Personalised AI, Protected at the Core

Knox Vault not only provides protection for today’s threats, it also ensures your privacy as mobile experiences continue to evolve.

As Galaxy AI becomes more useful, it also becomes more personal — learning how you use your device and adapting to your needs. And because this relies on deeply personal data, Knox Vault plays a crucial role in keeping that information private.

Features like Now Brief[3] provide useful summaries and suggestions based on your daily activity, while Modes and Routines[4] creates auto-generated routines by adjusting settings in response to your habits. These tools and the highly tailored AI experiences they enable are guided by a map of personalised data – data that is encrypted, with Knox Vault securing the keys.

Galaxy AI¹ also ensures privacy by processing tasks directly on-device where possible[5], keeping data in your hands and off online servers. Audio Eraser,[6] for example, can remove the background noise from videos or voice recordings without the need for any cloud-based processing — helping your personal comversations stay private. Call Transcript[7] and summary operates in the same way, keeping your calls organised while ensuring personal conversations stay private by remaining on-device.

Knox Vault helps ensure your data is protected, confidential and secure. Building on its role in Galaxy AI¹ as the trusted foundation for security and privacy, Knox Vault will expand across Samsung’s growing AI ecosystem as AI becomes more deeply integrated into the user experience.

Knox Vault is more than a security feature, it’s Samsung’s promise that no matter how advanced your devices become, or how much AI evolves, keeping privacy secured is our goal.

[1] Fees may apply to certain AI Features at the end of 2025. Certain Galaxy AI features requires Samsung and Google Account. Internet connection may be required to use some features.

[2] Samsung Knox Vault is included on Galaxy S series, Galaxy A series, Galaxy Tab S series and more. Knox Vault availability may vary by model.

[3]  Now Brief requires Samsung Account login, app compatibility and user’s consent to access certain information. Service availability may vary.

[4] Modes and Routines requires Samsung Account login. Customised content and recommendations requires Permissions to access data including location, app usage and how you use your device.

[5] Samsung Account login required. Processing data only on your device allows advanced intelligence features to operate locally, rather than online. Enabling this option may limit the functionality of certain AI features that rely on online data processing for advanced capabilities.

[6] Results may vary per video depending on sounds present in the video. Samsung Account login required. Certain types of sound can be detected such as voices, music, wind, nature, crowd and noise. The actual sound detection may vary depending on audio source, and the condition of the video. Accuracy of results is not guaranteed.

[7] Call Transcript feature requires a network connection to receive calls. Samsung Account login required. Summary feature for Call Transcript is capable of automatically transcribing recorded calls when a certain number of characters is met and is under the character limit. Call recording may not be supported in some countries. Currently available on pre-installed Samsung phones and Voice Record app. Service availability may vary by language or region. Certain languages may require language pack download. Accuracy of results is not guaranteed.