Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,578 matching stories — in Cloud-Native Application Protection (CNAPP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.
Executive Summary: Drop catch domains create a significant security risk when expired domains are re-registered and used as attack infrastructure. Organizations often accumulate domains through campaigns, old product names, and acquisitions, but when one lapses, a third party can inherit the trust, traffic, email history, and connections it still carries. This blog explains how drop […] The post Drop Catch Domains: What They Are, Why They Matter, and How to Act appeared first on CheckRed.
Celebrate five years of SentinelOne ThreatOps! Discover how a 2020 sketch evolved into a global movement training 19,000+ defenders ahead of OneCon 2026.
Learn how Fidelis Halo® CNAPP brings cloud, workload, and container context together to help security teams prioritize vulnerabilities by risk. The post Risk-Based Vulnerability Prioritization with Fidelis Halo® CNAPP appeared first on Fidelis Security.
For many small and midsize Canadian defense contractors, meeting CPCSC requirements raises an important resourcing question: does compliance justify hiring a full-time specialist? The work typically requires ongoing attention to cybersecurity controls, evidence, documentation, and remediation, but maintaining all of those responsibilities in-house can add considerable cost to a growing organization. A full-time hire is […] The post Do You Need a Full-Time Compliance Hire to Meet CPCSC Requ
Canada’s defense supply chain is changing quickly. With the Canadian Program for Cyber Security Certification (CPCSC) now appearing in select Department of National Defence and Public Services and Procurement Canada contracts, suppliers handling Specified Information must demonstrate their security posture rather than simply describe it. Most teams begin tracking that work in spreadsheets, and at […] The post CPCSC Compliance: When to Move Off Spreadsheets (and What to Replace Them With) a
Update, September 30, 2026: The Department of War suspended CMMC Phase II, the mandate that would have required third-party (C3PAO) Level 2 certification starting November 10, 2026. The 60-day Reform Task Force has now submitted its recommendations on the future of the program, which have not been made public. Self-assessment requirements, SPRS scoring, annual affirmations, […] The post CMMC Level 2 Requirements: What Compliance Software Can (and Can’t) Automate appeared first on Car
In a security data lake, a detection can be correct and still never finish. How two months of PySpark tuning became 34 rules that cut runtime up to 60%.
Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains. The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek.
Manufacturing has veto power on the factory floor. Plant managers and control engineers can stop any IT initiative that introduces an unacceptable risk.1 And everyone from the plant floor to the 50th floor knows that, no matter how exciting a technology may be, it doesn’t make sense to implement if it puts production uptime at risk.
In today’s cybersecurity news… Attackers hijack three top level domains to obtain Google certificates Unnamed attackers “compromised three country-code top-level domain (ccTLD) registries and obtained unauthorized HTTPS certificates covering several […] The post Cybersecurity News: Top level domain theft, Yandex attacked, Cisco Nexus flaws appeared first on CISO Series.
In my last article, I described the SOC Triangle, the longstanding trade-off among quality, consistency and cost efficiency in security operations. AI is starting to loosen that constraint by enabling certain kinds of work with greater depth and consistency, without requiring a linear increase in headcount. That raises the next question I hear from security leaders. Where should we start? For resource-constrained teams, the answer matters. Most already understand what good security looks like. T
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero
Broadcom has addressed CVE-2026-59346, a critical integer-overflow vulnerability affecting VMware Workstation and VMware Fusion. The flaw carries a CVSS score of 9.3 and can allow an attacker with administrative privileges inside a virtual machine to cross the virtualization boundary and execute code on the underlying host. The issue resides in VMware’s VMXNET3 virtual network adapter […] The post CVE-2026-59346: Critical VMware Workstation and Fusion Flaw Enables Guest-to-Host Code Execut
Agentic AI is the breakthrough of the moment, in security as everywhere else: agents that are threat-aware, active, and proactive in investigation. But it is also the technology behind a recent documented autonomous AI intrusion. Both facts are true, and the distance between them is what this article is about.
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools. The post Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own appeared first on SecurityWeek.
Palo Alto Networks’ Unit 42 identified an Iranian state-aligned cyber threat campaign, dubbed Blinder Tunnel, targeting Iraqi critical... The post Unit 42 links Blinder Tunnel campaign to Iranian state-aligned threat actor targeting aviation, telecommunications appeared first on Industrial Cyber.
“CS” in a text most often means “Case Sensitive,” “Common Sense,” “Can’t Stop,” or “Customer Service,” depending on who sent it and where. In gaming it usually means Counter-Strike or creep score, and in tech and security circles it can stand for Computer Science or Cybersecurity. Short forms make messaging fast, but they also create […]
Three systems asserted a condition and none of them checked whether it still held. A registry reported a package was attested. An evaluation harness reported a model was offline. An assistant reported a package would work.
Hope is not a strategy. Neither is nostalgia. Mark Carney, Prime Minister of Canada   Business leaders cannot respond to AI-era cyber risk by longing for a simpler technology stack, slower decision-making … The post The Mango Strategy: A CEO’s Guide to AI Cybersecurity appeared first on Palo Alto Networks Blog.
The 2027 Alternatives Outlook: Rising Allocations and a Higher Bar for GPs Off ranjeesh Thu, 10/08/2026 - 18:12 The 2027 Alternatives Outlook: Rising Allocations and a Higher Bar for GPs Americas and EMEA:Tuesday, 27th October 2026, 3:00pm GMT | 11:00am ETAsia Pacific:Wednesday 28th October 2026, 1:00pm HKT/SGT | 2:00pm JST | 2:00pm KST | 4:00pm AEDT | 10.30am IST Join and Kirkland & Ellis, Reuters Insights and SS&C Intralinks for a live discussion about the alternatives outlook fo
Learn how security teams prioritize vulnerabilities using exploitability, asset criticality, exposure, threat intelligence, and attack paths. The post Risk Prioritization: How Security Teams Decide What to Fix First appeared first on Fidelis Security.
Executive Summary A supply-chain attack targeting npm developers has been active since August 2023, distributing eight malicious packages that collectively received over 40,767 downloads. Discovered by CloudSEK and Checkmarx, the campaign — dubbed MALFEX — delivers three distinct malware families to Windows systems: the Overlord RAT, the “movinlike” Node.js credential stealer, and rotating downloader payloads. […] The post Malicious npm Campaign “MALFEX”
Market leadership comes down to two things: the vision to anticipate and solve customer problems and proven engineering execution. Across AI Security, Network Security, SASE, and critical infrastructure protection the industry’s top … The post Driven by Innovation: Our Latest Analyst Wins and Product Momentum in Network & AI Security appeared first on Palo Alto Networks Blog.
For operational technology teams, patching is rarely just a technical decision. Maintenance windows, vendor requirements, legacy systems, safety considerations, and operational dependencies can all affect when remediation can occur. That creates an important security question for federal civilian organizations that operate or oversee energy, water, and other critical infrastructure: How can teams reduce exposure associated […] The post Contain OT Risk While Remediation Moves Forward appear
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration from various South Korea-based financial firms,
You click a link, and a web page appears in less than a second. But what actually happens in between? More than five billion people go online every day, yet very few know how the internet works or where their data is exposed along the way. Understanding how the internet works is the first step […]
The cybersecurity firm said the attacker was likely a Chinese speaker and financially motivated, but did not attribute the attacks to a named individual or group.
SKU stands for Stock Keeping Unit. It is a unique alphanumeric code a business assigns to each distinct product it sells or stores, so it can track inventory, sales, and movement with precision. If you have ever looked at a price tag, a shelf label, or an online product listing and noticed a short string […]
