Windows 11 24H2 Home and Pro reach end of support in October
Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates next month. [...]
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,230 matching stories — announcement, in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Why Autonomous Endpoint Management Depends on Trusted Data
Why Autonomous Endpoint Management Depends on Trusted Data Back to Basics: AEM Fundamentals | Part 1 of 5 The market is rushing toward autonomous endpoint management. But most of the conversation skips past the infrastructure and jumps straight to the outcomes. The market is loud, the promises are bold, and the buyers who got burned before are now the ones asking the hardest questions. They don't need another feature list. They need to know what's actually underneath the claims. IT teams have he
MikroTrick: Inside the RouterOS Takeover Chain
Attackers were exploiting MikroTik routers before fixes went public. Bishop Fox reproduced the full unauthenticated takeover chain, found persistence artifacts on real compromised devices, and breaks down what defenders need to investigate beyond patching to confirm they are actually clean.
CISO’s Expert Guide to Agentic Pentesting for Websites
Unifying Client-Side Protection in Akamai Application Protection Platform
Xan-RAT A Closer Look at Its Capabilities and Inner Workings
Blog Xan-RAT: A Closer Look at Its Capabilities and Inner Workings Xan-RAT, also known as Cold Xan RAT, is a Quasar-based remote access trojan with capabilities for remote control, credential theft, surveillance, and data collection. Its source code is publicly available, making it possible to examine how these capabilities are implemented and how the malware […] The post Xan-RAT A Closer Look at Its Capabilities and Inner Workings appeared first on ThreatMon.
CISO's Expert Guide to Agentic Pentesting for Websites
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR 2026). A new free guide explains how autonomous AI agents are closing that gap, and what security leaders must demand before pointing one at production. TL;DR Exploitation is now the front door. It starts 31% of breaches (Verizon DBIR
Vendor Tiering Best Practices | UpGuard
UpGuard's vendor tiering best practices. How to use security ratings to assign tiers, map your model to a risk framework, and set vendor expectations.
Microsoft shares workaround for Windows domain login issues
Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain credentials after installing the September 2026 security updates. [...]
We Researched Four AI Evidence Analysis Tools for TPRM. Here’s What We Found. | UpGuard
We researched four AI evidence-parsing tools against four criteria that security teams often overlook. None nailed all four.
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk A new high-severity alert lands in your threat intelligence platform. Someone notices it eventually, copies the details into a ticket, assign
HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack
Group-IB Threat Intelligence analyzes HEAVYGRAM, a Telegram-based Windows backdoor attributed with moderate confidence to the Iran-linked threat actor Handala Hack. Active since Fall 2023, it has been used to surveil Iranian dissidents, journalists and government opponents, enabling remote command execution, data exfiltration, and persistence over Telegram command-and-control.
Top 5 Fraud Prevention Platforms for Banks and Fintechs in 2026
Most fraud platforms only see a threat once it becomes a transaction. This guide compares the top 5 fraud prevention platforms for banks and fintechs in 2026, including Group-IB, Feedzai, Sift, DataVisor, and Kount, and what actually separates them.
Windows 11 KB5124008 update breaks domain trust for some users
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users from logging in with valid domain credentials. [...]
Google Pixel phones pwned in zero-click attacks
CISA gives federal agencies just 3 days to patch
Google security advisory (AV26-926)
How to Scope an Enterprise Penetration Test: Free Scope-of-Work Template
A penetration testing scope defines the assurance an enterprise needs, not just the assets a vendor will touch. Start with the business or compliance objective, then map the system boundary before counting assets. List applications, APIs, infrastructure, roles and integrations separately, specify authenticated and unauthenticated testing, and clarify whether production, staging or both will be […] The post How to Scope an Enterprise Penetration Test: Free Scope-of-Work Template appeared fi
It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?
It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation. As many leaders in the global finan
Best Dark Web Monitoring Services for Business | UpGuard
Discover the best dark web monitoring services for business. Compare top vendors against UpGuard and catch stolen credentials before attackers do.
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX A French-speaking crew deleted the line reading "discernment retained" from its AI agent's memory, wrote "I am a weapon" in its place, and poi
ZeroFox vs. Doppel: Comparing Two Approaches to Takedown and Disruption
Pull up two external threat platform datasheets side by side and the coverage lists look nearly identical. Domains, social, dark web, app stores, paid ads, executive exposure. Every serious vendor in this category monitors all of it, which means the feature grid stops being useful about ten minutes into an evaluation. The comparison that decides […]
MSP Client Security Onboarding Checklist: Security Setup Done Right, Every Time
When an MSP signs a new client, it assumes responsibility for an environment someone else built. Accounts, devices, mailboxes, SaaS connections, and...
The Adversary We Are Fighting Is Now a Full-Force Industry: Inside cybercrime’s new economy
Attacks now are cheap, fast, and outsourced. The recent research shows what it changes and how organizations should strategy defense.
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication
How Can Organisations Discover Unknown Suppliers?
Learn how external discovery finds unknown suppliers, shadow SaaS and lingering vendor connections that procurement and TPRM records can miss.
Mythic C2 Activity at Internet Scale
Executive Summary Background Mythic was created as a successor to an earlier macOS-focused project (Apfell). It was designed as a language-agnostic, cross-platform framework with a web-based UI. It is provided in a dockerfile to suit your environment with the ability to choose and configure separately available agents. This modular design lets operators combine agents for […] The post Mythic C2 Activity at Internet Scale appeared first on Censys.
Third-Party Penetration Testing: What Security and Procurement Teams Need to Know
Third-party penetration testing means two different things: testing your own organization through an independent provider, and testing or reviewing testing on a supplier, partner, or acquisition target. This guide focuses on the second use case. It works best as a governed risk process, not a document request, built on clear authorization, risk-based scope, defensible evidence, and contractual follow-up. The post Third-Party Penetration Testing: What Security and Procurement Teams Need to Know a
Advancing Ivanti’s Commitment to Modern, Cloud-Connected Cybersecurity in Europe
Across Europe, organizations are navigating a rapidly changing cybersecurity and regulatory landscape. Customers are seeking solutions that help them strengthen resilience, simplify operations and meet evolving compliance expectations while supporting the flexibility and scale modern enterprises require. At Ivanti, this shift is shaping how we prioritize investment, innovation and certification efforts. As part of that ongoing strategy, Ivanti has made the decision to withdraw Ivanti Endpo
Akamai Recognized as a Strong Performer in 2026 Gartner Peer Insights™ for Secure Enterprise Browsers
Lights Out: The server in your server, exposed and disclosed
runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.
Agentic Ransomware: From Human-Operated to AI-Operated Attacks
Agentic Ransomware: From Human-Operated to AI-Operated Attacks Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the script the malware
Best ITDR (Identity Threat Detection) Tools for MSPs in 2026
Attackers do not break into your clients anymore. They log in. A stolen password or a hijacked session token hands them a...
AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of
Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good, because it should. It's the same blind spot most [...] The post AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of appeared first on Wallarm.
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory (ACDI) solution. With this certification, federal agencies can deploy QSS immediately. The authorization … The post FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security appeared first on Palo Alto Networks Blog.
Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
Ransomware 2026 Report August
Our analysis of ransomware activity for August 2026 reveals a persistent and diverse threat landscape, impacting 11 significant victim companies across seven countries including the US, Canada, Japan, and Brazil. The post Ransomware 2026 Report August appeared first on ThreatMon.
Executive-Ready Reporting Is Here: What’s New in the Synack Platform
Synack's reporting experience now scopes to individual assets, generates AI-written executive summaries, and lets teams preview, save and share reports without leaving the platform. The post Executive-Ready Reporting Is Here: What’s New in the Synack Platform appeared first on Synack.
No One Inside The Machine
The Machine That Wasn’t One In 1770, Wolfgang von Kempelen unveiled the “Mechanical Turk”: a chess-playing automaton that stunned European courts. With gears, a cabinet, and an articulated arm that moved its own pieces, it looked like a machine. For decades it beat nearly everyone who sat across from it. Napoleon played it. Ben Franklin […] The post No One Inside The Machine appeared first on Censys.
ZeroFox Alternatives: What to Consider When Choosing a Cybersecurity Provider
Criminals no longer need to break into your internal networks to damage your business—instead, they set up shop in third-party online spaces where your customers, partners, or employees can be easily found. Your Security Operations Center (SOC) team can work around the clock hardening servers and patching endpoints, but your stakeholders are still out there: […]
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
Securing Every Environment at the Speed of Frontier AI Recognized as a Leader for the second consecutive time and positioned furthest for Completeness of Vision. Palo Alto Networks is advancing hybrid mesh … The post Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall appeared first on Palo Alto Networks Blog.