One such example, identified by Zscaler in a Fortune 500 organization, was the case of Dr Watson.
The program downloaded over HTTP, was identified as coming from a trusted source--in this case Dropbox, deemed to be benign and allowed entry.