Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,225 matching stories — announcement, in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Disrupting abuse starts with being in the room where relevant standards get made. When ZeroFox identifies a phishing site, a fraudulent social media profile, or an impersonation domain targeting one of our clients, the threat doesn’t disappear on its own. Someone has to get it removed. That means working directly with the registrars, hosting providers, […]
Discover how attackers bypassed Microsoft Entra Conditional Access Policies using Nested App Authentication (NAA) flows in this technical vulnerability breakdown. The post Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication appeared first on NetSPI.
Annual penetration tests provide a snapshot in time. Learn why modern applications need continuous security testing to keep pace with change. The post Why Annual Penetration Testing No Longer Matches Modern Application Risk appeared first on Outpost24.
A data breach involving Council of Europe was reported in June 2026. See incident details, impact on staff, and recommended security measures.
A data breach involving Easterly Government Properties was reported in June 2026. See incident details, impact on customers, and recommended security measures.
A data breach involving Nintendo was reported in June 2026. See incident details, impact on customers, and recommended security measures.
An exposed attacker server has revealed FortiBleed’s complete operation—from credential harvesting and GPU-powered cracking to network intrusion and access sales. CloudSEK’s analysis separates verified compromises from inflated claims, uncovering what the attackers actually achieved. Authors :
Every enterprise has bought AI, but many are still waiting for their investment to pay off. Ivanti’s 2026 AI Maturity Report found that only 2% of organizations say they currently have no AI use at all. As the majority of organizations move beyond the AI experimentation stage, the real competitive differentiator is if that AI is providing continuous, business value at scale. Companies deploy chatbots that users ignore. They implement agents nobody trusts and roll out "AI-powered" tools that empl
What Is Outbound Traffic Monitoring? Outbound traffic monitoring is the process of continuously capturing and analyzing traffic exiting the network with the goal of detecting resident threats and unauthorized data transfers. Unlike inbound monitoring, which focuses on identifying and blocking traffic entering the organization’s environment, outbound traffic monitoring focuses on communications initiated by assets that […]
We walk through three eras of cyber attacks and makes a troubling case that LLMs are removing the one constraint that kept attackers slow and detectable.
Intruder now uses AI to build vulnerability checks for newly disclosed threats, giving Enterprise customers faster, broader detection coverage.
Dive into this real-world social engineering assessment where a fake anonymous tip and an adversary-in-the-middle framework tested the limits of an organization's security policies. The post I’m Just Asking Questions: Social Engineering as a Reporter appeared first on NetSPI.
How AI Is Closing the Window Between Disclosure and Exploitation Software vulnerability exploitation is having a moment. A very long moment that nobody can accurately predict the end of, because AI is accelerating how flaws get found and weaponized, shrinking the window from “publicly known” to “actively exploited” from months to days to hours. Let’s […]
Rating vendors is not enough. This patent-pending measurement of supplier connection depth is changing how organizations prioritize supply chain risk.
The "vulnerability AI race" is vendor theater. What AI actually changes for exposure management, and why validation through exploitation beats discovery speed.
BlueKit is turning phishing into a subscription business, offering 87 ready-made kits, automated account takeover and stealthy peer-to-peer infrastructure. CloudSEK’s investigation reveals how this mature PhaaS platform helps even low-skilled criminals target banks, cloud services and global brands. Authors : Gagan Aggarwal
An exposed attacker server revealed the inner workings of Operation Escaneo—a sophisticated campaign targeting Latin American governments and financial institutions. CloudSEK maps its custom tools, exploitation chain, persistence tactics and suspected links to MexicanMafia. Read the full investigation. Authors : Koushik Pal
GetCybr is an AI-powered vCISO and GRC platform built for MSPs and security consultancies delivering compliance services across a growing client book. It leads on architecture; multi-tenant from day one, per-client pricing that scales with how MSPs actually bill, and a self-hosted deployment option with Bring Your Own Model LLM support that no direct competitor […] The post GetCybr Competitors and Alternatives in 2026 appeared first on Consolidated Cyber Risk Management Platform | FortifyD
AI security tools can build an attack, but enterprise security teams in regulated industries need consistency, auditability, and predictable costs before they can trust one. Learn why the surrounding infrastructure is where most AI security vendors are still falling short. The post Beyond the Hype: What Regulated Industries Need to Know Before Trusting AI Security Tooling appeared first on NetSPI.
Once you’ve decided that NetFlow is part of your cyber defense strategy (check our guide on NetFlow in cybersecurity if you need arguments as to why it should be), you may have run into a problem: choosing the right tools. The tool market is anything but straightforward. There are several things you need to know […]
Olivia Brännlund is recognized by The Hacker News at the 2026 Cybersecurity Stars Awards. STOCKHOLM, Sweden – June 15, 2026 – Outpost24, a leading global provider of cybersecurity solutions, today announced its Chief Information Security Officer, Olivia Brännlund, has been named Cybersecurity Woman of the Year in the 2026 Cybersecurity Stars Awards from The Hacker […] The post Outpost24 CISO Olivia Brännlund Named 2026 Cybersecurity Woman of the Year appeared first on Outpost24
Ask three teams what assets exist in your environment, and you’ll get three different answers. Most organizations don’t lack tools. They lack agreement on what actually exists in their environment. Asset, endpoint and cloud data exist — but it’s fragmented, stale and trusted differently by teams across every department and function. The reason for this disconnect? In the AI era, environments are changing faster than legacy discovery is built to handle. Cloud workloads spin up and disappear in mi
RealCISO is a compliance intelligence platform built for MSPs, MSSPs, and vCISO consultancies who need to run security assessments, track compliance maturity, and deliver audit-ready documentation across a growing client book. It handles the structured compliance delivery work well, including framework assessments, maturity tracking, remediation workflows, and client reporting. Its AI reasoning engine, Cleo, adds […] The post RealCISO Competitors and Alternatives in 2026 appeared first on
Cynomi comes up early when MSPs and vCISO consultancies go looking for a platform to structure and scale their security service delivery. For good reason; it automates the workflow of running a security program, maps clients against compliance frameworks, and generates the documentation and reporting that vCISO engagements require. If your primary need is a […] The post Cynomi Competitors and Alternatives in 2026 appeared first on Consolidated Cyber Risk Management Platform | FortifyData.
Infrastructure and Operations (I&O) teams have long operated under a familiar paradox: the faster the business scales, the more pressure I&O absorbs. Every new application deployment, every endpoint added, and every cloud workload spun up generates more complexity, more risk and more tickets. The traditional responses to this pressure — more headcount, more tooling, more scripts, more APIs — have delivered incremental relief at best. Yet, the core structural problem, the underlying archi
ConnectSecure has been recognized on the Tampa Bay Business Journal's Fast 50 list, which highlights the region's fastest-growing companies across seven counties.
MSP Today is covering ConnectSecure's new distribution partnership with TD SYNNEX, which makes its vulnerability and compliance management platform available through TD SYNNEX's global partner network.
PCI DSS v4.0.1 made internal penetration testing more complex, bringing cloud infrastructure, SaaS apps, and build pipelines explicitly into scope. Derek Rush breaks down how to scope a compliant IPT, what to test, and what a QSA-ready deliverable actually looks like in practice.
ConnectSecure's launch of Patch 360, a new patch management solution built for MSPs, is drawing coverage from ChannelE2E, Help Net Security, and MSP Today.
Evaluating third-party risk management software in 2026? This guide breaks down what TPRM tools actually do, where vendor scores fall short, and what supply cha
I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for June 2026For June, Adobe
Source code disclosure vulnerabilities are security weaknesses that allow unauthorized users to access an application’s source code, which may contain sensitive information. Source code is meant to run on the server side and at least the parts that contain sensitive information should be hidden from the public. If it accidentally becomes accessible, it can expose […]
AI is raising the ceiling for skilled researchers and flooding bug bounty programs with polished but inaccurate submissions at the same time. Both things are true, and the reconciling variable is the harness built around the model and the expertise of the person driving it.
Strobes CEO Venu Rao shares his takeaways from Gartner Security & Risk Management Summit 2026: everyone can find vulnerabilities, almost no one has cracked fixing them.
Vulnerability validation proves which scanner findings are real, reachable, and exploitable. Why manual triage fails and how agentic validation scales.
Attack Surface view is now on Cloud and Pro. See the most commonly exposed ports across your targets, the services running on them, and what needs attention, all in one place.
Frontier AI: When exploit timelines collapse, prioritization matters Jill Magda Thu, 06/04/2026 - 13:51 The AI Frontier of Cyber Risk When AI collapses exploit timelines, prioritization matters Vendors and partners drive growth, but they also introduce cyber risk. Attackers often target weak links in your supply chain. Bitsight helps you stay in control at every stage: onboarding, monitoring, and response. Bitsight helps by monitoring over 40M organizations worldwide with the world's l