The Adversary We Are Fighting Is Now a Full-Force Industry: Inside cybercrime’s new economy
Attacks now are cheap, fast, and outsourced. The recent research shows what it changes and how organizations should strategy defense.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,428 matching stories — in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Ce petit changement dans le moteur de Google risque de créer beaucoup de confusion
Depuis juillet 2026, Google fait passer une partie de ses liens de résultats par une redirection interne, google.com/goto. L'adresse du site visé disparaît derrière un paramètre codé, propre à Google. Le prestataire Nozzle mesure déjà un déploiement proche de la totalité des résultats consultés par les utilisateurs classiques.
Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens
A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic signature that could result in account takeover. Hacktron Team has been credited with discovering and reporting the flaw. "JWT authentication
How Can Organisations Discover Unknown Suppliers?
Learn how external discovery finds unknown suppliers, shadow SaaS and lingering vendor connections that procurement and TPRM records can miss.
CVE-2026-61560: Drei kritische Schwachstellen in GitLab-MCP
Drei kritische Schwachstellen in @zereight/mcp-gitlab betreffen ungeschützte MCP-Endpunkte, Token-Abfluss und DNS-Rebinding. The post CVE-2026-61560: Drei kritische Schwachstellen in GitLab-MCP appeared first on LocateRisk.
Mythic C2 Activity at Internet Scale
Executive Summary Background Mythic was created as a successor to an earlier macOS-focused project (Apfell). It was designed as a language-agnostic, cross-platform framework with a web-based UI. It is provided in a dockerfile to suit your environment with the ability to choose and configure separately available agents. This modular design lets operators combine agents for […] The post Mythic C2 Activity at Internet Scale appeared first on Censys.
KREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens
Cybersecurity researchers have shed light on a previously undocumented Brazilian banking malware operation that delivers a toolkit called KREMLIN. Elastic Security Labs is tracking the activity under the moniker REF9334. Active since at least May 2025, the threat actor has used lures that impersonate a dozen Brazilian banks and install a malicious browser extension on Google Chrome and
Before You Patch. Why Patch Reliability Matters for Confident Deployment
Executive Summary Microsoft’s September 2026 security updates – KB5124008, KB5124012, and KB5123099 have been linked to significant issues, underscoring the operational risks associated with security patching. Five known problems emerged after deployment: domain-joined devices losing their secure trust relationship with the domain, USB audio devices failing to start or producing no sound, host folder shares […]
Third-Party Penetration Testing: What Security and Procurement Teams Need to Know
Third-party penetration testing means two different things: testing your own organization through an independent provider, and testing or reviewing testing on a supplier, partner, or acquisition target. This guide focuses on the second use case. It works best as a governed risk process, not a document request, built on clear authorization, risk-based scope, defensible evidence, and contractual follow-up. The post Third-Party Penetration Testing: What Security and Procurement Teams Need to Know a
Advancing Ivanti’s Commitment to Modern, Cloud-Connected Cybersecurity in Europe
Across Europe, organizations are navigating a rapidly changing cybersecurity and regulatory landscape. Customers are seeking solutions that help them strengthen resilience, simplify operations and meet evolving compliance expectations while supporting the flexibility and scale modern enterprises require. At Ivanti, this shift is shaping how we prioritize investment, innovation and certification efforts. As part of that ongoing strategy, Ivanti has made the decision to withdraw Ivanti Endpo
Investing Together: Wiz Defend and Google Security Operations
Continuing to deepen the integration between Wiz Defend and Google Security Operations, helping teams work faster wherever they choose to investigate
Akamai Recognized as a Strong Performer in 2026 Gartner Peer Insights™ for Secure Enterprise Browsers
Lights Out: The server in your server, exposed and disclosed
runZero discloses critical authentication bypass and privilege escalation flaws in OpenBMC IPMI implementations. Here’s what you need to know.
Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that's designed to steal cloud credentials, configurations from Amazon Web Services (AWS) and Microsoft Azure instances, and infrastructure state files, per F5 Labs. The
Agentic Ransomware: From Human-Operated to AI-Operated Attacks
Agentic Ransomware: From Human-Operated to AI-Operated Attacks Ransomware has always needed a human involved somewhere: an affiliate navigating a network by hand, or at minimum, a person who wrote the script the malware
Emerging Threat: (CVE-2026-76461) Cisco Secure Email Gateway Root RCE via Email Parsing
An SQL injection flaw in the email parsing logic of Cisco AsyncOS lets an unauthenticated attacker send a crafted message and execute commands as root on the appliance.
Best ITDR (Identity Threat Detection) Tools for MSPs in 2026
Attackers do not break into your clients anymore. They log in. A stolen password or a hijacked session token hands them a...
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace
Simplify Threat Intelligence Procurement with SOCRadar and Microsoft Marketplace Your security team has already made the case for external threat intelligence. The budget owner agrees. Then the deal stalls on procurement
AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of
Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good, because it should. It's the same blind spot most [...] The post AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of appeared first on Wallarm.
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory (ACDI) solution. With this certification, federal agencies can deploy QSS immediately. The authorization … The post FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security appeared first on Palo Alto Networks Blog.
Perfect-10 GitLab bug under attack days after patch lands
CISA confirms active exploitation as watchTowr spots miscreants probing internet-facing servers
VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch
VectraRAT: An Undocumented Full-Stack MaaS Built From Scratch SOCRadar's Threat Research Unit ( STRU ) has documented VectraRAT, a Malware-as-a-Service platform built entirely from scratch rather than forked from leaked
CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
Emerging Threat: (CVE-2026-78006) The Events Calendar Remote Code Execution via PHP Object Injection
An unauthenticated PHP object injection flaw in The Events Calendar plugin for WordPress lets attackers execute code on the server through comments submitted on event pages.
Introducing the CyCognito MCP Server: Full Exposure Context, On Demand
Today we're announcing the CyCognito MCP server. It makes your attack surface data available to any AI client that speaks the Model Context Protocol, so you can search assets and issues and pull the full record behind both.
Les hackers de ShinyHunters et Helix détournent les passkeys pour siphonner les comptes Microsoft 365
Sous couvert d’une prétendue mise à jour de passkey, des groupes cybercriminels piègent des salariés, récupèrent leurs sessions Microsoft 365 et fouillent ensuite SharePoint, OneDrive et Exchange à la recherche de données sensibles.
Smish. Click. Drained: Inside the Smishing Triad’s Phishing Cockpit
A deep technical analysis of the Smishing Triad’s JWR phishing kit and Outsider operator cluster, revealing its real-time victim control, encrypted WebSocket communications, multi-stage credential theft, AES-256-CTR implementation, infrastructure, and actionable indicators for defenders.
Ransomware 2026 Report August
Our analysis of ransomware activity for August 2026 reveals a persistent and diverse threat landscape, impacting 11 significant victim companies across seven countries including the US, Canada, Japan, and Brazil. The post Ransomware 2026 Report August appeared first on ThreatMon.
Executive-Ready Reporting Is Here: What’s New in the Synack Platform
Synack's reporting experience now scopes to individual assets, generates AI-written executive summaries, and lets teams preview, save and share reports without leaving the platform. The post Executive-Ready Reporting Is Here: What’s New in the Synack Platform appeared first on Synack.
No One Inside The Machine
The Machine That Wasn’t One In 1770, Wolfgang von Kempelen unveiled the “Mechanical Turk”: a chess-playing automaton that stunned European courts. With gears, a cabinet, and an articulated arm that moved its own pieces, it looked like a machine. For decades it beat nearly everyone who sat across from it. Napoleon played it. Ben Franklin […] The post No One Inside The Machine appeared first on Censys.
Rapid Reaction: GitLab Path Traversal Vulnerability (CVE-2026-85706)
On September 10, 2026, GitLab released versions 19.3.2, 19.2.6, and 19.1.8 for GitLab Community Edition and Enterprise Edition. The release addresses a critical path traversal vulnerability tracked as CVE-2026-85706, affecting the repository commits API. GitLab assigned this issue a CVSS score of 10.0, and watchTowr assesses with a high confidence that this vulnerability will rapidly…
CVE-2026-82329: Unauthenticated Administrative Access in JFrog Artifactory via an Empty Cluster Join Key
A misconfigured cluster join key in JFrog Artifactory's default install lets unauthenticated attackers mint a permanent admin token in one request. Bishop Fox reproduced the full chain, confirmed in-the-wild exploitation, and shares a non-invasive detection check and remediation guidance.
ZeroFox Alternatives: What to Consider When Choosing a Cybersecurity Provider
Criminals no longer need to break into your internal networks to damage your business—instead, they set up shop in third-party online spaces where your customers, partners, or employees can be easily found. Your Security Operations Center (SOC) team can work around the clock hardening servers and patching endpoints, but your stakeholders are still out there: […]
CVE-2026-8778: Nicht authentifizierter Datei-Upload in WooCommerce-Plugin
CVE-2026-8778 betrifft MIPL Grouped Checkout Fields for WooCommerce bis einschließlich 1.2.1. The post CVE-2026-8778: Nicht authentifizierter Datei-Upload in WooCommerce-Plugin appeared first on LocateRisk.
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
Securing Every Environment at the Speed of Frontier AI Recognized as a Leader for the second consecutive time and positioned furthest for Completeness of Vision. Palo Alto Networks is advancing hybrid mesh … The post Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall appeared first on Palo Alto Networks Blog.
CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls
Palo Alto Networks has released security updates for a high-severity buffer overflow vulnerability affecting PAN-OS software. Tracked as CVE-2026-0310, the issue resides in XML processing functionality and can allow an unauthenticated remote attacker to cause a denial-of-service condition on VM-Series firewalls or execute arbitrary code with root privileges on vulnerable PA-Series hardware firewalls. The flaw […] The post CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Seri
Brand Monitoring and Enforcement: Why AI Alone Isn’t Enough
AI-powered brand protection is having a moment. Across the market, new platforms promise fully autonomous detection, real-time campaign clustering, and automated takedowns across domains, social media, messaging apps, and more. The pitch is compelling: faster alerts, less manual work, and AI-native defense built for modern deception. But brand monitoring and enforcement are not the same […]
Introducing AI Assistant for Akamai Web Security Analytics
Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language.
Mind the Config: Detecting and Weaponizing NetScaler CVE-2026-19490
A single unauthenticated request bypasses authentication on NetScaler Gateway and AAA virtual servers. Whether that means a dead-end session, a proxy into the internal network, or root on the appliance depends entirely on configuration. Bishop Fox maps every branch and shares a safe detection tool.
Building custom integrations at AI speed with runZero
Build custom exposure management integrations on your terms. runZero 5.1 lets you leverage your choice of AI to create, adapt, and secure your SecOps data.