Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,428 matching stories — in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
As AI adoption shifts from experimental tools to the business core, enterprises are deploying AI agents and assistants across every department. Developers are accelerating software delivery with Claude Code and business functions … The post Prisma AIRS - Unified Data Protection for Claude appeared first on Palo Alto Networks Blog.
Synack Red Team researcher Malcolm Stagg takes the stage at Black Hat USA 2026 on August 6 to present three years of independent research on a new class of network infrastructure attacks. Here's who he is and why the talk belongs on your calendar. The post From DARPA to Black Hat: An SRT Researcher’s Next Chapter appeared first on Synack.
To hear both sides of the build vs buy debate around AI pentesting solutions, we spoke with Dow's cyber engineering team lead Dan Lacher and Synack's CTO Mark Kuhr. From Dow's perspective, Synack served as a force multiplier for a small internal red team. Meanwhile, building the Synack Autonomous Red Agent (Sara) from scratch definitely had some trial and error. The post Build vs. Buy AI Pentesting: Why Dow Chose to Partner With Synack appeared first on Synack.
You know the metric you need for Thursday’s report. You know roughly what it’ll show. And you still can’t get to it without exporting a CSV, cleaning it up in a spreadsheet, or filing a request with whoever owns reporting and waiting your turn. By the time the answer comes back, the week has moved […]
Bishop Fox discovered a privilege escalation vulnerability in Python for Windows affecting versions 3.11.0a3 through 3.15.0b2. A low-privilege user can plant malicious files and wait for a privileged account to run the interpreter, inheriting that account's elevated access. Patches are available.
KI-gestützte IT-Sicherheitsanalyse Wenn die Geschäftsführung kurzfristig eine Einschätzung der IT-Sicherheitslage verlangt, zählt jede Minute. LocateRisk stellt hierfür eine Schnittstelle auf Basis des Model Context Protocol (MCP) bereit. Als derzeit einziger Anbieter im Bereich External Attack Surface Management (EASM) ermöglicht LocateRisk damit eine direkte Machine-to-Machine-Kommunikation zwischen Sicherheitsplattform und künstlicher Intelligenz. Das Ergebnis: ein vollständiges, präsentation
Warehouse workers don’t think about whether their mobile interface runs on a browser. They’re focused on getting the job done. But for operations and IT teams evaluating or upgrading mobile technology in supply chain environments, platform choice matters more than most people realize. Consumer mobile browsers such as Safari, Edge and Chrome are useful tools designed for everyday web use. They help people search, shop, read, collaborate and access web applications from almost anywhere. That versa
Map any fraud campaign against your org chart and one stage of the attack has no owner. The adversary knows exactly which one — and the most expensive fraud cases live there.
How TPRM identifies, tiers, assesses, contracts and monitors vendor risk across the relationship lifecycle, and where continuous evidence helps.
More American titans of artificial intelligence are describing Chinese open-weight models as better for AI safety and security than closed-source models, challenging the long-standing claim by US closed-source AI model developers such as Anthropic that open-source models present a threat to society. “From what I’m seeing, I think open-weight models seem safer to me than closed-weight models,” AI pioneer Andrew Ng, the former head of Google Brain and former chief scientist at Baidu, said at the..
Modern enterprise security is at a pivotal moment where CIOs and CISOs have a clear opportunity to build a cybersecurity architecture for both today’s environment, and for the future. Doing so requires … The post Redefining Network Security for the Frontier AI Era appeared first on Palo Alto Networks Blog.
ThreatMon Awards announced ahead of Black Hat USA recognize ThreatMon’s leadership in Threat Intelligence, Dark Web Monitoring, Cyber Asset Management, AI Governance, and Cybersecurity Innovation. ThreatMon, a leading provider of Cyber Threat Intelligence, Attack Surface Management, and Digital Risk Protection solutions, today announced that it has been named a 2026 Community Choice Winner in five […] The post ThreatMon Named a Five-Time 2026 Community Choice Winner at the Cybersecur
A practical guide to how EASM discovers, validates and monitors internet-facing assets, where it adds value, and where its coverage becomes limited.
EASM, CAASM and CASB solve different shadow IT problems. A practical guide to telling them apart and choosing the right category for your gap.
An attacker hijacked the keyv and cacheable npm packages on August 4, 2026, shipping a credential stealer with valid provenance. Here's how to respond.
Eine kritische Schwachstelle (CVE-2026-41452) in Krayin CRM 2.2.4 erlaubt unauthentifizierten Angreifern die komplette Übernahme des Admin-Kontos. The post CVE-2026-41452: Kritische Lücke in Krayin CRM ermöglicht Kontoübernahme appeared first on LocateRisk.
CVE-2026-42533 is a critical heap buffer overflow in the NGINX script engine reached through the map directive, with weaponized public exploit code that defeats ASLR. A plain-English advisory, a tested non-destructive Nuclei detection template, and the two-window version trap that makes naive scanners clear every mainline 1.31.x host as patched. The post CVE-2026-42533: NGINX map Directive Heap Buffer Overflow – Advisory + Nuclei Detection first appeared on Sn1perSecurity.
CVE-2026-42945, known as NGINX Rift, is a critical heap buffer overflow in ngx_http_rewrite_module reachable from a single unauthenticated request, with exploitation reported in the wild. A plain-English advisory, a tested non-destructive Nuclei detection template, a configuration audit template for the pattern nginx -t will not warn you about, and why upgrading to 1.30.1 leaves you exposed. The post CVE-2026-42945 (NGINX Rift): Heap Buffer Overflow in the Rewrite Module – Advisory + Nuclei Dete
Four-day virtual program delivers practical training on CIS IG1 Safeguards and awards co-branded certification TAMPA, Fla., July 23, 2026 — With AI accelerating the pace and complexity of cyber threats, organizations must prioritize strong cyber hygiene. To help meet that need, ConnectSecure, a leading provider of vulnerability and compliance management solutions, is launching a new training program developed in partnership with the Center for Internet Security, Inc. (CIS). The Essential Cyber H
Security teams do not need another threat feed. Instead, they need to know which threats matter to their organization, what’s coming, and what they should do next. That distinction has never been … The post Introducing Unit 42 Threat Intelligence: Know What Matters, Understand the Adversary, and Act Faster appeared first on Palo Alto Networks Blog.
We’re excited to introduce ZeroFox HNTR Executive Protection, and we can’t wait to put it in front of the teams who protect leaders. Executives get targeted everywhere at once. Consider how a fake profile spreads on social media, a home address can go up for sale on a data broker site, or a hostile crowd […]
Five CVEs defined July 2026, ranked by what attackers actually exploited, not CVSS: an AD FS zero-day, twin SharePoint RCEs, a May patch that became a July KEV deadline, and the month's highest score that nobody touched.
The two changes that moved our AI security agents furthest this year had nothing to do with the model. Here is how tooling as code and structured scratchpads reshaped how the agents act, and how they prove a finding is real.
CloudSEK researchers uncovered an exposed server linked to a Russian-speaking initial access broker, revealing months of operations targeting internet-facing infrastructure across multiple sectors. The investigation connects credential theft, Active Directory compromise, and access sales to ransomware groups, while also uncovering surveillance activity targeting Ukrainian defence and aerospace organizations. Authors : CloudSEK TRIAD
Heading to DoDIIS? Visit runZero at booth #1237 to learn how our uncredentialed asset discovery simplifies federal network assessments and compliance.
Running a pentest through an AI model can cost a few cents per asset or a few thousand dollars, depending entirely on which phase you spend it on. In this post I provide a quick walkthrough of all five phases.
Blog Baltas Eksen Seçme Değerlendirme Eğitim ve Org. Tic. A.Ş. (“Baltas”), a Turkish HR and executive assessment provider, officially disclosed a personal data breach to Türkiye’s Personal Data Protection Authority (KVKK). Shortly after, a threat actor surfaced on an underground forum claiming responsibility for the breach and asserting that data belonging to more than 750 […] The post From One Vendor to Hundreds of Organizations: What a Turkish HR Provider Breach Reveals
The critical RufRoot vulnerability gave unauthenticated attackers a path from an exposed MCP endpoint to shell access, stolen AI provider keys and poisoned agent memory. Paul Mote explains why the incident should change how security teams define, test and recover their AI attack surface. The post RufRoot Exposed the Hidden AI Agent Attack Surface appeared first on Synack.
runZero 5.1 takes on the heavy lifting across five key areas, enabling you to unmask and remediate exposures with less friction and more speed.
CVE-2026-61511 is a critical unauthenticated RCE in vBulletin 5.x and 6.x, caused by eval injection in the runMaths() template handler. A plain-English advisory, a tested non-destructive Nuclei detection template, the 6.x patch-level trap that hides unpatched hosts, and how to find vulnerable vBulletin at scale with Sn1per. The post CVE-2026-61511: Pre-Auth Remote Code Execution in vBulletin (runMaths) – Advisory + Nuclei Detection first appeared on Sn1perSecurity.
Today we’re announcing Censys Investigator in closed beta: an AI-powered threat investigation feature that automates pivoting, infrastructure mapping, and host profiling. Give it a network observable (single, bulk list, or intel report), and it runs the investigation in parallel across Censys’ internet-wide intelligence, then returns ranked, evidence-backed findings. The key here: it operates on top […] The post Introducing Censys Investigator: Run Every Lead Like You’ve Got Hours ap
What Is DarkSword? DarkSword is a commercial iOS exploit chain, six chained vulnerabilities spanning iOS 18.4 through 18.7, that leaked publicly via a GitHub repository (ghh-jb/DarkSword) and now runs in the hands of at least seven, and probably eight, unrelated operators. The most recently identified operator is a Chinese-speaking actor running well over a hundred […] The post DarkSword's Panel Sprawl: How One Body Hash Unravels a Six-Panel, Two-Codebase Operator Cluster appeared first on
Frontier AI models are raising the ceiling for skilled attackers and lowering the bar for everyone else. Leaders from Vista Equity, Cisco, and Bishop Fox share what that shift looks like in practice, how the existing security stack needs to change, and how long defenders will stay at a disadvantage.
AI agent security for MSPs is the practice of discovering, scoping, monitoring, and controlling the AI agents that operate inside client environments...
Blog When TeamPCP emerged in late 2025, few recognized the threat actor that would eventually compromise over 1,000 organizations. What distinguishes this financially motivated cybercrime group isn’t cutting-edge technology but strategic evolution a calculated shift from opportunistic cloud exploitation to coordinated supply chain attacks that fundamentally challenged conventional security assumptions. From Cloud Mining to Supply […] The post TeamPCP: How a Cloud Exploitation Group E
MAI-Cyber-1-Flash il suo primo modello di intelligenza artificiale specializzato nella cybersecurity Accanto nasce Project Perception un nuovo sistema di sicurezza agentico.
Executive Summary Introduction On July 22, 2026, ReliaQuest reported observations of a threat actor exploiting CVE-2026-12569, a critical remote code execution (RCE, 9.8) vulnerability affecting product lifecycle management software PTC Windchill and FlexPLM. This CVE was disclosed on June 17, 2026, and according to the Ransom-ISAC, it’s likely that this vulnerability was exploited in early […] The post A Chill in the Air: Cl0p Targets Windchill, Another Enterprise Software Product a