Seven FatFs bugs, one very large blast radius
One small component, massive blast radius. Explore seven new FatFs vulnerabilities discovered via AI that impact RTOS platforms, IoT devices, and firmware.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,427 matching stories — in Attack Surface Management (ASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Is Doxxing Illegal? A State-by-State Breakdown for Security Teams
Is Doxxing Illegal? Yes, doxxing is illegal in many circumstances, but the answer depends on three things: what information was shared, the intent behind sharing it, and what state you’re in. There is no single federal law that bans doxxing by name. Instead, the United States regulates it through a patchwork of state statutes, federal […]
Overview of Content Published in June
Here is an overview of content I published in June: Blog posts: Update: base64dump.py Version 0.0.30 SANS ISC Diary entries: Microsoft’s Coreutils for Windows Evil MSI Background: BASE64 Statistical Analysis YARA-X 1.18.0 and 1.19.0 Release
Phishing in the Balkans: Fake Traffic Fines, Real Losses
This blog documents Group-IB’s research into an SMS phishing campaign targeting Serbian road users through the impersonation of Serbia's state road authority, and how it can be linked to both Darcula and Phoenix PhaaS platforms with victims across the globe.
ThingsRecon named a European Leader in the ECSO Cyberhive Matrix 2026
Supply Chain Intelligence platform earns top marks for user experience and European compliance readiness in ECSO's independent industry evaluation.
Top CVEs of June 2026: 5 Critical Flaws to Patch Now
Five CVEs defined June 2026: Check Point VPN bypass, Splunk pre-auth RCE, Windows HTTP.sys kernel RCE, LiteLLM AI-gateway RCE, and Defender BlueHammer. How to fix each.
Introducing our Free plan: making security accessible for the 99%
Professional security tooling, free forever. Intruder's new free plan is built for lean teams who face enterprise risks on a fraction of the budget.
Infosec professionals sour on automated pentesting tools
Why EDR Alone Falls Short for MSPs and Why You Need MDR
For most of the last decade, endpoint detection and response was the standard answer to the question: how do we stop threats...
What the Fiserv Breach Tells Us About Third-Party Blind Spots in FinTech
The Fiserv breach took days to trace. 40,000 employees, legacy tech, and a supply chain nobody fully mapped. Here's what that tells us.
Wright-Ryan Construction data breach exposes Social Security numbers and passports | UpGuard
A data breach involving Wright-Ryan Construction was reported in June 2026. See incident details, impact on customers, and recommended security measures.
Kentucky Mountain Health Alliance data breach: what happened and what's at risk | UpGuard
A data breach involving KENTUCKY MOUNTAIN HEALTH ALLIANCE was reported in June 2026. See incident details, impact on customers, and recommended security measures.
Hunter Associates data breach exposes Social Security numbers and account details | UpGuard
A data breach involving Hunter Associates was reported in June 2026. See incident details, impact on customers, and recommended security measures.
Top 8 Data Breaches and Exposures of June 2026
The 8 confirmed data breaches of June 2026, from a 24-billion-record credential dump to ShinyHunters' PeopleSoft and Klue OAuth campaigns. What happened and how to defend.
How Agentic AI Enables Autonomous Threat Response at Machine Speed
Why do 40% of alerts received by security teams today go completely uninvestigated? It’s not due to a lack of concern but instead caused by shortening attack windows and compounded by overwhelming tech sprawl. Today’s security teams are operating in a threat landscape defined by escalating attacks, tighter budgets and mounting alert fatigue. Organizations process an average of 960 security alerts per day, and large enterprises handle more than 3,000 daily alerts across roughly 30 tools. That add
Intelligence That Acts: How the TIP Category Is Catching up to the Way Security Teams Work
For years, the threat intelligence platform (TIP) category rewarded data collection. The more feeds you ingested, the more indicators you normalized, the more dashboards you built, the better you scored. But ask any security team and they’ll tell you, they don’t need piles of data. TIPs in 2026 need to deliver intelligence that changes what […]
AI Decline? Confidence in Autonomous Penetration Testing Falls
Less than one in ten of cybersecurity pros trust AI testing tools to find vulnerabilities, with over three-quarters say their AI vulnerability scanning tools missed critical flaws
Intigriti Bug Bytes #237 - June 2026 🚀
Hi hackers, Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at scale And so much more! Let's dive in! Using AI the smart way: interview with Cristian Zot (CristiVlad25) Cristian Zot, better known as @CristiVlad25, needs little introduction. An activ…
Disrupting the Phish-Hunters: Inside a Coordinated Impersonation of the Brand Protection Industry
TL;DR ZeroFox’s Signals Research Program has uncovered a sustained domain impersonation operation aimed squarely at the brand protection and threat intelligence industry. Seventy-three correlated domains, registered between July 2025 and June 2026, impersonate ZeroFox and at least four peer vendors (Corsearch (including its Incopro brand), Red Points, MarkScan, and Group-IB) alongside a long tail of […]
Millenium: A RAT Rewritten, A Threat Multiplied
Group-IB analyzes Millenium RAT version 4.*, a remote access trojan that has undergone an architectural shift from .NET to native C++, while continuing to leverage the Telegram Bot API for command and control, requiring no dedicated server infrastructure. This blog also profiles the developer “ShinyEnigma”, and threat actor cluster “Y2K Operators” responsible for active Millenium RAT exploitation campaigns. Over 62,000 compromised endpoints across more than 160 countries have been identified, wi
AI Finds Vulnerabilities. Security Experts Find Impact.
AI got a security consultant 80% of the way through a real web application assessment. The other 20% was where the actual security work happened. This walkthrough shows where AI delivered, where it produced confident but impossible explanations, and why human judgment still drives real findings.
The FinTech Supply Chain Nobody Audits
FinTech's third-party supply chain is growing faster than compliance can track. Here's what stablecoin infrastructure is adding to the exposure.
Brace Before The Impact: 7 Signals Your Organization Needs A Cybersecurity Services Retainer
Incident response plans aren't enough if the response can't activate when it matters. Discover seven signs your organization may need a cybersecurity services retainer to strengthen readiness, resilience, and incident response capabilities.
THE 5060 SIEGE - Industrialized Attacks Against the SIP Telephony Ecosystem
Uncover how an 18-day honeypot captured 15 million automated attacks targeting telephony ecosystems in the "Copy of SIP Honeypot Report.pdf". Download the full report to expose active VoIP fraud networks and access 277,632 recovered attacker passwords. Authors : Vikas Kundu
Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication
Discover how attackers bypassed Microsoft Entra Conditional Access Policies using Nested App Authentication (NAA) flows in this technical vulnerability breakdown. The post Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication appeared first on NetSPI.
Why Annual Penetration Testing No Longer Matches Modern Application Risk
Annual penetration tests provide a snapshot in time. Learn why modern applications need continuous security testing to keep pace with change. The post Why Annual Penetration Testing No Longer Matches Modern Application Risk appeared first on Outpost24.
Inside the FortiBleed Open Directory: A Technical Analysis of What the Attacker Left Behind
An exposed attacker server has revealed FortiBleed’s complete operation—from credential harvesting and GPU-powered cracking to network intrusion and access sales. CloudSEK’s analysis separates verified compromises from inflated claims, uncovering what the attackers actually achieved. Authors :
The Invisible IT Department: How to Deliver Friction-Free Experiences with Agentic AI
Every enterprise has bought AI, but many are still waiting for their investment to pay off. Ivanti’s 2026 AI Maturity Report found that only 2% of organizations say they currently have no AI use at all. As the majority of organizations move beyond the AI experimentation stage, the real competitive differentiator is if that AI is providing continuous, business value at scale. Companies deploy chatbots that users ignore. They implement agents nobody trusts and roll out "AI-powered" tools that empl
Outbound Traffic Monitoring: Techniques, Tools, and Best Practices
What Is Outbound Traffic Monitoring? Outbound traffic monitoring is the process of continuously capturing and analyzing traffic exiting the network with the goal of detecting resident threats and unauthorized data transfers. Unlike inbound monitoring, which focuses on identifying and blocking traffic entering the organization’s environment, outbound traffic monitoring focuses on communications initiated by assets that […]
The Smash-and-Grab Era
We walk through three eras of cyber attacks and makes a troubling case that LLMs are removing the one constraint that kept attackers slow and detectable.
AI-driven vulnerability management: broader, faster coverage against new threats
Intruder now uses AI to build vulnerability checks for newly disclosed threats, giving Enterprise customers faster, broader detection coverage.
I’m Just Asking Questions: Social Engineering as a Reporter
Dive into this real-world social engineering assessment where a fake anonymous tip and an adversary-in-the-middle framework tested the limits of an organization's security policies. The post I’m Just Asking Questions: Social Engineering as a Reporter appeared first on NetSPI.
The "vulnerability AI race" is a myth. Here's what actually changes for your exposure program.
The "vulnerability AI race" is vendor theater. What AI actually changes for exposure management, and why validation through exploitation beats discovery speed.
Bluekit Phishing as a Service (PhaaS)
BlueKit is turning phishing into a subscription business, offering 87 ready-made kits, automated account takeover and stealthy peer-to-peer infrastructure. CloudSEK’s investigation reveals how this mature PhaaS platform helps even low-skilled criminals target banks, cloud services and global brands. Authors : Gagan Aggarwal
GetCybr Competitors and Alternatives in 2026
GetCybr is an AI-powered vCISO and GRC platform built for MSPs and security consultancies delivering compliance services across a growing client book. It leads on architecture; multi-tenant from day one, per-client pricing that scales with how MSPs actually bill, and a self-hosted deployment option with Bring Your Own Model LLM support that no direct competitor […] The post GetCybr Competitors and Alternatives in 2026 appeared first on Consolidated Cyber Risk Management Platform | FortifyD
Beyond the Hype: What Regulated Industries Need to Know Before Trusting AI Security Tooling
AI security tools can build an attack, but enterprise security teams in regulated industries need consistency, auditability, and predictable costs before they can trust one. Learn why the surrounding infrastructure is where most AI security vendors are still falling short. The post Beyond the Hype: What Regulated Industries Need to Know Before Trusting AI Security Tooling appeared first on NetSPI.
A Crash, Not a Shell: SolarWinds Serv-U CVE-2026-28318
A single unauthenticated request can kill SolarWinds Serv-U, and the heap corruption underneath it looked like it could be more. Bishop Fox chased three separate roads to remote code execution and hit a wall on every one. Here is what we found, why it matters, and how to detect exposure safely.
10+ Netflow Security Tools: Analyzers, Collectors, and More
Once you’ve decided that NetFlow is part of your cyber defense strategy (check our guide on NetFlow in cybersecurity if you need arguments as to why it should be), you may have run into a problem: choosing the right tools. The tool market is anything but straightforward. There are several things you need to know […]
Outpost24 CISO Olivia Brännlund Named 2026 Cybersecurity Woman of the Year
Olivia Brännlund is recognized by The Hacker News at the 2026 Cybersecurity Stars Awards. STOCKHOLM, Sweden – June 15, 2026 – Outpost24, a leading global provider of cybersecurity solutions, today announced its Chief Information Security Officer, Olivia Brännlund, has been named Cybersecurity Woman of the Year in the 2026 Cybersecurity Stars Awards from The Hacker […] The post Outpost24 CISO Olivia Brännlund Named 2026 Cybersecurity Woman of the Year appeared first on Outpost24