Why your annual penetration test is already obsolete
Your annual pentest describes an environment that no longer exists. Here is how continuous offensive security testing closes the gap, and what it takes to run one.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,427 matching stories — in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in
8 Best Prime Day Wearable Deals: Apple, Google, Samsung (2026)
I’ve tested the wearables, tracked the prices, and found the Prime Day deals worth grabbing.
Google's PageBreak AI Agent Finds 500 Flaws in Its Web Apps
The situation illustrates a trend toward using AI and deterministic validation to identify flaws and exploitability, and provide a risk assessment.
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
CISO perspectives on managing vulnerability risks in the age of AI
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management. The post CISO perspectives on managing vulnerability risks in the age of AI appeared first on Microsoft Security Blog.
SOCRadar Alarms in Elastic | Investigate Threats Faster
Investigate SOCRadar Alarms Where Your Analysts Already Work, with SOCRadar and Elastic Your SOC runs on Elastic. Detections, logs, cases and dashboards all live in Kibana, and your analysts have built their muscle memory around it. Then an impersonating domain, a leaked credential or a newly exposed asset shows up in a different console, and […]
Microsoft extends the Outlook naughty step with two more file types
You didn't really want to be sending around .msix and .msixbundle files, did you?
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure SOCRadar's Threat Research Unit (STRU) has documented CyberXero , a Russian-speaking, financially motivated Initial Access Brok
CVE-2026-88779: Citrix NetScaler Zero-Day
CVE-2026-88779: Citrix NetScaler Zero-Day Citrix has patched CVE-2026-88779, a high-severity NetScaler vulnerability that was exploited as a zero-day before fixes became available. The memory overflow affects customer-ma
Why the AI Attack Surface Extends Your Stack
Integrating AI into enterprise applications creates risk across every layer of the stack, not just the model. This post maps the full AI attack surface, shows how a prompt injection can chain into credential theft and cross-tenant data exposure, and explains why isolated scanners miss most of it.
Vector Search Can’t Tell “Yes” From “No”
Learn why vector search can rank contradictory statements as similar, and how hybrid retrieval can help RAG systems identify conflicting information.
Solving CISOs’ Toughest Security Challenges With UpGuard’s Risk Operations Center | UpGuard
Feeling the pressure of leading a security team? Learn how the Risk Operations Center reduces risk and automates compliance to prove your security posture.
Atlassian Jira, Confluence (and more) Arbitrary File Read Vulnerability (CVE-2026-21589)
CVE-2026-21589 is an Arbitrary File Read vulnerability in Atlassian Jira and Confluence (and other Data Center and Server Products) that lets an attacker without a login read specific files on the server. Patch now or apply Atlassian's interim mitigations.
CVE-2026-32557: SQL Injection in WooCommerce Appointments
CVE-2026-32557 betrifft WooCommerce Appointments bis einschließlich 5.3.2. Die Schwachstelle ist ohne Authentifizierung über das Netzwerk erreichbar. The post CVE-2026-32557: SQL Injection in WooCommerce Appointments appeared first on LocateRisk.
CVE-2026-32568: Remote Code Execution in WooCommerce Designer Pro
CVE-2026-32568 betrifft WooCommerce Designer Pro bis einschließlich Version 1.9.33 und ist mit CVSS 9.9 bewertet. The post CVE-2026-32568: Remote Code Execution in WooCommerce Designer Pro appeared first on LocateRisk.
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Frequently Asked Questions About the Atlassian Jira & Confluence Arbitrary File Read Vulnerability (CVE-2026-21589)
CVE-2026-21589 is an Arbitrary File Access vulnerability affecting eight Atlassian Data Center and Server products, letting unauthenticated attackers read specific files without logging in. This FAQ is updated as new details emerge.
From Detonation to Detection: The Sandbox Now Writes the Rules
Understanding what a malware sample does and being able to detect it are two different jobs, and the second one needs a skill many teams are short of. The Group-IB Malware Detonation Platform now produces indicators, Sigma rules, and hunting queries from the behavior it observes.
How Akamai’s ExAR Capabilities Contained a LATAM Supply Chain Attack
Strobes Agentic Pentesting Now Tests Android Apps on Your Own Devices
Strobes Agentic Pentesting now runs Android app pentesting on your own phones and emulators: live crawling, traffic interception, Frida instrumentation, and verified findings.
Biggest data breaches of September 2026
153 million driver's licenses claimed, 23.6 million Gyazo records confirmed. September 2026's biggest breaches, with every number sourced.
Emerging Threat: (CVE-2026-94483) Next.js Server-Side Request Forgery via Image Optimization
A server-side request forgery flaw in Next.js Image Optimization lets an attacker who controls DNS for an allow-listed host make the server fetch from private internal addresses.
Frequently Asked Questions About the Citrix NetScaler Denial Of Service (Memory Overflow) (CVE-2026-88779)
CVE-2026-88779 is a memory overflow vulnerability in Citrix NetScaler ADC and Gateway that can cause a denial of service when SAML authentication is configured. This FAQ is updated as details emerge.
Secure the Grid: What Executive Order 14421 Means for Zero Trust
Turn Scanner Findings into Validated Risk with Synack and Qualys
A year since launching Synack’s integration with Qualys, the partnership now includes broader platform support, more AI-led testing, and a shared presence at Qualys ROCon Americas 2026. The post Turn Scanner Findings into Validated Risk with Synack and Qualys appeared first on Synack.
Unpacking Mir0Auth Attack
A Mir0Auth attack completely bypasses standard detection signals. The victim signs in through legitimate workflows, leaving no proxy landing pages, harvested credentials,...
Caught in 4K: The Gentlemen Files
A Russian-speaking Gentlemen ransomware affiliate called Azazel robbed two dozen victims across six countries, then double-crossed his own gang by publishing the loot on a private leak site and pocketing every dollar. CloudSEK traced 50TB of exposed infrastructure and a live AI-driven attack chain. Read how "Caught in 4K" cracked the operation. Authors : CloudSEK TRIAD
Is AI pentesting as good as a human pentester?
An honest comparison of AI pentesting and human pentesting by a seasoned pentester, including methodology, coverage, findings, and reports.
Emerging Threat: (CVE-2026-84411) MikroTik RouterOS Unauthenticated Root RCE via Web Management
An integer underflow in the MikroTik RouterOS web management service lets an unauthenticated attacker run code as root on the device with a single crafted HTTP request.
Zammad vulnerabilities: Find impacted installations
The Dutch Institute for Vulnerability Disclosure (DIVD) identified (DIVD-2026-00015) two vulnerabilities in Zammad. Here's how to find impacted assets.
CVE-2026-102795: Apache Traffic Server korrigiert betroffenen Versionsbereich
CVE-2026-102795 betrifft Apache Traffic Server in definierten 9.x- und 10.x-Versionen. Der Eintrag ersetzt CVE-2026-41920 und nennt bereinigte Releases. The post CVE-2026-102795: Apache Traffic Server korrigiert betroffenen Versionsbereich appeared first on LocateRisk.
EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage
The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Exposure Assessment
Blog The NetScaler Zero-Day Siege and Pre-Auth RCE Chains: Technical Analysis and Exposure Assessment On September 27, 2026, Citrix published bulletin CTX697096 with eight NetScaler ADC and Gateway vulnerabilities. Two of them, CVE-2026-88771 and CVE-2026-88772, were already being exploited before fixed builds existed. Both give remote code execution to an unauthenticated attacker. CISA added both […] The post The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Ex
How to Detect Data Leakage: A Full Guide to Data Leak Detection | UpGuard
Data leaks are an increasingly critical cybersecurity problem. Learn how to detect and prevent data leakage and compare vendor solutions.
The Complete Guide to Vendor Risk Assessment | UpGuard
Vendor risk assessment in 2026: a 3-step process for teams comparing UpGuard, BitSight, and SecurityScorecard. Scope, evidence, and continuous monitoring.
Employee Offboarding Security Checklist for MSP Tenants: What HR Misses Across Client Tenants
A standard employee offboarding checklist can cover HR tasks while still missing identity and access paths that affect MSP security efforts. Payroll...
What Customers Value in a Penetration Testing Partner: Insights from G2 Reviews
Synack was named a Leader in G2's Fall 2026 Grid® and Enterprise Grid® Reports for Penetration Testing. The reviews show what customers value in a pentesting partner: visibility into testing, access to experts, findings they can fix and verify, and a partner that acts on feedback. The post What Customers Value in a Penetration Testing Partner: Insights from G2 Reviews appeared first on Synack.
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino
Group-IB descubre BraZetsu, un nuevo malware para Windows basado en Python que funciona como un toolkit maestro para Initial Access Brokers y potencia un marketplace clandestino único, mejorado con IA, para comercializar objetivos comprometidos en Iberoamérica y Latinoamérica.
Fortinet FortiMail CVE-2026-104286: Find impacted applicances
Fortinet releases critical patch for FortiMail path traversal flaw (CVE-2026-104286, CVSS 9.8). Here's how to find affected appliances on your network.