Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
69 matching stories — release, in Cyber Asset Attack Surface Management (CAASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
metasploit-framework 6.5.7
forward-netbox v3.0.6
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more than the roughly 70,000 CVEs released in 2015 and earlier, going back to 1999. CVE Disclosure: 2026 year to date has already exceeded the full 2025 total by 64% (as of October 12). (Source: Ivanti Vulnerability KB) Exploitation: 2026 year to date has exceeded the full 2025
Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as
Microsoft Patch Tuesday – October 2026
forward-netbox v3.0.5
cpacket-corelight 0.3.0
cpacket-corelight 0.2.0
metasploit-framework 6.5.6
cpacket-corelight 0.1.0
Emerging Threats Now Available to All Customers | JupiterOne | JupiterOne
Emerging Threats ranks the CVEs that just escalated, with a tier and Threat Brief for each.
oomnitza-connector v2026.09.2: 2026.09.2 release
oomnitza-connector v2026.09.1: 2026.09.1 release
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix for a sixth 2026 zero-day. None of this is theoretical — all six are on CISA's Known Exploited Vulnerabilities catalog today, and two carry active nation-state attribution. Before we get into today's release, here's what defenders should already have handled — or should e