Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,230 matching stories — announcement, in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
You know the metric you need for Thursday’s report. You know roughly what it’ll show. And you still can’t get to it without exporting a CSV, cleaning it up in a spreadsheet, or filing a request with whoever owns reporting and waiting your turn. By the time the answer comes back, the week has moved […]
Bishop Fox discovered a privilege escalation vulnerability in Python for Windows affecting versions 3.11.0a3 through 3.15.0b2. A low-privilege user can plant malicious files and wait for a privileged account to run the interpreter, inheriting that account's elevated access. Patches are available.
KI-gestützte IT-Sicherheitsanalyse Wenn die Geschäftsführung kurzfristig eine Einschätzung der IT-Sicherheitslage verlangt, zählt jede Minute. LocateRisk stellt hierfür eine Schnittstelle auf Basis des Model Context Protocol (MCP) bereit. Als derzeit einziger Anbieter im Bereich External Attack Surface Management (EASM) ermöglicht LocateRisk damit eine direkte Machine-to-Machine-Kommunikation zwischen Sicherheitsplattform und künstlicher Intelligenz. Das Ergebnis: ein vollständiges, präsentation
Warehouse workers don’t think about whether their mobile interface runs on a browser. They’re focused on getting the job done. But for operations and IT teams evaluating or upgrading mobile technology in supply chain environments, platform choice matters more than most people realize. Consumer mobile browsers such as Safari, Edge and Chrome are useful tools designed for everyday web use. They help people search, shop, read, collaborate and access web applications from almost anywhere. That versa
Map any fraud campaign against your org chart and one stage of the attack has no owner. The adversary knows exactly which one — and the most expensive fraud cases live there.
How TPRM identifies, tiers, assesses, contracts and monitors vendor risk across the relationship lifecycle, and where continuous evidence helps.
More American titans of artificial intelligence are describing Chinese open-weight models as better for AI safety and security than closed-source models, challenging the long-standing claim by US closed-source AI model developers such as Anthropic that open-source models present a threat to society. “From what I’m seeing, I think open-weight models seem safer to me than closed-weight models,” AI pioneer Andrew Ng, the former head of Google Brain and former chief scientist at Baidu, said at the..
Modern enterprise security is at a pivotal moment where CIOs and CISOs have a clear opportunity to build a cybersecurity architecture for both today’s environment, and for the future. Doing so requires … The post Redefining Network Security for the Frontier AI Era appeared first on Palo Alto Networks Blog.
ThreatMon Awards announced ahead of Black Hat USA recognize ThreatMon’s leadership in Threat Intelligence, Dark Web Monitoring, Cyber Asset Management, AI Governance, and Cybersecurity Innovation. ThreatMon, a leading provider of Cyber Threat Intelligence, Attack Surface Management, and Digital Risk Protection solutions, today announced that it has been named a 2026 Community Choice Winner in five […] The post ThreatMon Named a Five-Time 2026 Community Choice Winner at the Cybersecur
A practical guide to how EASM discovers, validates and monitors internet-facing assets, where it adds value, and where its coverage becomes limited.
EASM, CAASM and CASB solve different shadow IT problems. A practical guide to telling them apart and choosing the right category for your gap.
An attacker hijacked the keyv and cacheable npm packages on August 4, 2026, shipping a credential stealer with valid provenance. Here's how to respond.
Four-day virtual program delivers practical training on CIS IG1 Safeguards and awards co-branded certification TAMPA, Fla., July 23, 2026 — With AI accelerating the pace and complexity of cyber threats, organizations must prioritize strong cyber hygiene. To help meet that need, ConnectSecure, a leading provider of vulnerability and compliance management solutions, is launching a new training program developed in partnership with the Center for Internet Security, Inc. (CIS). The Essential Cyber H
Five CVEs defined July 2026, ranked by what attackers actually exploited, not CVSS: an AD FS zero-day, twin SharePoint RCEs, a May patch that became a July KEV deadline, and the month's highest score that nobody touched.
The two changes that moved our AI security agents furthest this year had nothing to do with the model. Here is how tooling as code and structured scratchpads reshaped how the agents act, and how they prove a finding is real.
CloudSEK researchers uncovered an exposed server linked to a Russian-speaking initial access broker, revealing months of operations targeting internet-facing infrastructure across multiple sectors. The investigation connects credential theft, Active Directory compromise, and access sales to ransomware groups, while also uncovering surveillance activity targeting Ukrainian defence and aerospace organizations. Authors : CloudSEK TRIAD
Heading to DoDIIS? Visit runZero at booth #1237 to learn how our uncredentialed asset discovery simplifies federal network assessments and compliance.
Running a pentest through an AI model can cost a few cents per asset or a few thousand dollars, depending entirely on which phase you spend it on. In this post I provide a quick walkthrough of all five phases.
Blog Baltas Eksen Seçme Değerlendirme Eğitim ve Org. Tic. A.Ş. (“Baltas”), a Turkish HR and executive assessment provider, officially disclosed a personal data breach to Türkiye’s Personal Data Protection Authority (KVKK). Shortly after, a threat actor surfaced on an underground forum claiming responsibility for the breach and asserting that data belonging to more than 750 […] The post From One Vendor to Hundreds of Organizations: What a Turkish HR Provider Breach Reveals
The critical RufRoot vulnerability gave unauthenticated attackers a path from an exposed MCP endpoint to shell access, stolen AI provider keys and poisoned agent memory. Paul Mote explains why the incident should change how security teams define, test and recover their AI attack surface. The post RufRoot Exposed the Hidden AI Agent Attack Surface appeared first on Synack.
runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.
What Is DarkSword? DarkSword is a commercial iOS exploit chain, six chained vulnerabilities spanning iOS 18.4 through 18.7, that leaked publicly via a GitHub repository (ghh-jb/DarkSword) and now runs in the hands of at least seven, and probably eight, unrelated operators. The most recently identified operator is a Chinese-speaking actor running well over a hundred […] The post DarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster appeared first on
Frontier AI models are raising the ceiling for skilled attackers and lowering the bar for everyone else. Leaders from Vista Equity, Cisco, and Bishop Fox share what that shift looks like in practice, how the existing security stack needs to change, and how long defenders will stay at a disadvantage.
AI agent security for MSPs is the practice of discovering, scoping, monitoring, and controlling the AI agents that operate inside client environments...
Blog When TeamPCP emerged in late 2025, few recognized the threat actor that would eventually compromise over 1,000 organizations. What distinguishes this financially motivated cybercrime group isn’t cutting-edge technology but strategic evolution a calculated shift from opportunistic cloud exploitation to coordinated supply chain attacks that fundamentally challenged conventional security assumptions. From Cloud Mining to Supply […] The post TeamPCP: How a Cloud Exploitation Group E
MAI-Cyber-1-Flash il suo primo modello di intelligenza artificiale specializzato nella cybersecurity Accanto nasce Project Perception un nuovo sistema di sicurezza agentico.
Executive Summary Introduction On July 22, 2026, ReliaQuest reported observations of a threat actor exploiting CVE-2026-12569, a critical remote code execution (RCE, 9.8) vulnerability affecting product lifecycle management software PTC Windchill and FlexPLM. This CVE was disclosed on June 17, 2026, and according to the Ransom-ISAC, it’s likely that this vulnerability was exploited in early […] The post A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product a
Craig Rosewarne, Managing Director of Wolfpack Information Risk, explains why continuous, AI-enabled validation, paired with human-verified exploitability, gives security leaders a real-time view of what's actually at risk. The post Guest Blog: The Annual Pentest Is No Longer Enough appeared first on Synack.
JetBrains disclosed that certain versions of TeamCity On-Premises are affected by a RCE vulnerability exploitable via the server's agent polling protocol.
A deepfake of your CFO is live on Instagram, telling followers to move money into a crypto wallet. Every minute it stays up, more people see it and act on it, and the scam keeps paying out. Your team can confirm the video is fake almost immediately, but a verdict doesn’t pull it off the […]
If Microsoft Defender quarantines BrowserModifier:Win32/MediaArena on one of your endpoints, the alert reads like a win. Our SOC data says treat it as a live persistence incident instead. In the case we timed, the payload finished writing its persistence 21 seconds into execution. Quarantine didn’t complete until 29 seconds. By the time the alert fired, […] The post MediaArena malvertising: why a quarantine isn’t the end of the incident appeared first on Heimdal Security Blog.
Managed cyber-fraud protection is the most overlooked growth line in the MSSP playbook, and most of the capability is already sitting in your SOC.
Dive into a covert Linux XMRig campaign exploiting trusted access, weaponizing PAM to create forensic smokescreens, and deploying self-unlinking payloads.
A tax-season malware campaign is impersonating the Income Tax Department, sending fake penalty notices over WhatsApp. Victims who tap "Download Documents" install malware capable of harvesting OTPs and banking credentials. The advisory also covers a wider ecosystem of refund SMS fraud, cloned e-Filing portals, and fake e-PAN emails targeting Indian taxpayers this season. Authors : Shobhit Mishra
Europe regulates AI through risk tiers and conformity checks. America accelerates AI through deregulation and infrastructure speed. Both models ask different questions but land on the same gap: neither tells you whether a live AI system actually holds up against real attacks. Enterprise AI security depends on evidence, not paperwork or policy. Continuous, human-validated offensive testing is the layer that both regulatory philosophies are missing and that every organization operating across bord
The data leaked included Microsoft Teams messages, passwords and private keys
Fast gets even faster: redefining security for the AI era and doubling down on our multicloud commit