Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
600 matching stories — announcement, in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Horizon3 has surpassed $100 million in annual recurring revenue, with ARR growing more than 120% year over year. The milestone reflects increasing adoption of the NodeZero platform, a channel-first growth strategy, and demand for continuous, production-safe autonomous penetration testing. Horizon3 also outlined its next phase of investment in sovereign cyber AI regions, critical infrastructure centers of excellence, and attack-defend AI learning loops.
Exposure management company Tenable Holdings announced that H₂O Retailing has deployed the Tenable One Exposure Management Platform across... The post H₂O Retailing deploys Tenable One to unify cyber exposure management across multi-cloud infrastructure appeared first on Industrial Cyber.
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Quantum-resistant cryptography presents security leaders with various challenges, but CISOs in industries dependent on IoT and operational technology (OT) devices may face a particularly difficult journey to quantum readiness, especially if sensitive information that must remain confidential for years passes through those devices. A recent report from cybersecurity firm Forescout highlights these challenges in the healthcare industry, where medical histories, diagnostic images, and laboratory re
600,000+ credit cards stolen from two online retailers by AI agents running almost unattended. Between September 10 and 15, 2026, the operator behind that theft […] The post The 7 Biggest AI Agent Attacks of 2026 appeared first on Reflectiz.
Hybrid cloud compliance has outgrown the annual audit. A regulated enterprise in 2026 runs workloads across AWS, Azure, Google Cloud, private data centers and SaaS, and often answers to eight or more frameworks at once. Point-in-time evidence drives cannot keep up with configuration drift that happens hourly. That is why security and compliance leaders are The post Best Continuous Compliance Monitoring Software (2026) appeared first on Seceon Inc.
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own
Ransomware remains a serious cybersecurity risk for organizations of every size. A successful attack can interrupt business operations, encrypt critical files, disrupt customer services, expose confidential information, and create significant recovery costs. For organizations that depend on continuous access to business applications and data, even a short disruption can have consequences across multiple departments. Modern The post Ransomware Detection and Prevention appeared first on Seceon Inc
What Is SOAR Security? SOAR security refers to the use of technology to integrate security tools, automate repetitive operational tasks, and coordinate responses to cybersecurity incidents. A SOAR platform can receive alerts from connected security systems, enrich those alerts with additional information, follow predefined workflows, and initiate appropriate actions based on configured policies. For example, The post SOAR Security appeared first on Seceon Inc.
Averlon tested Mistral Large 4 on 16 security benchmarks: upper half wherever the evidence is supplied or searchable, weaker where it must recall specifics.
Why the controls on an AI agent have to live outside of it, and what a security operations team can implement and maintain those controls.The new privileged user in your environmentSecurity teams spent two decades learning how to work with the people they trust most. Domain admins, DBAs, finance approvers and contractors with VPN access all get a mature playbook: verified identity, scoped access, logged activity and a fast way to revoke it all.Today, we’re navigating the same kind of access with
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered three new vulnerabilities in Eptura Archibus. A legacy API endpoint could be exploited to bypass authentication and run various functions without authentication (CVSS: 8.6 High). The most serious functions allow for full database read (CVSS: 8.5 High) and an insecure file upload (CVSS: 9.6 Critical). The insecure file upload leads to remote code execution.Product descriptionArchib
Target selection has guided traditional pentesting for years, and it now has a second job: directing compute and token budgets to the attack surface assets that actually matter.
FERC recently pulled data centers closer to the reliability world. Unfortunately, secure remote access is the risky part that is missing. The post Secure Remote Access: The Data Center Risk Not on the Uptime Slide appeared first on Forescout.
Discover how to secure AI agents in your cloud environment with Tenable One Cloud Exposure. We explore Microsoft Entra Agent ID and provide essential best practices for robust agentic AI identity security.Key takeawaysUnderstand your current maturity level and then build an appropriate action plan to secure your agent identities.Use your cloud providers’ native tools or Tenable One Cloud Exposure to locate and catalog every AI agent operating in your environment.Do not assign human identities or
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that H₂O Retailing Corporation has successfully deployed the Tenable One Exposure Management Platform across its diverse multi-cloud infrastructure. The implementation provides the group with unified visibility, risk-based prioritization, and accelerated response times using AI capabilities to objectively assess which vulnerabilities pose the highest real-world exploitation risk.H₂O Retailing is a leading re
Averlon tested Gemini 4 Argon on CTI-REALM, RealVuln and VulnGym: it finds nearly as much as the best models we tested, but it is noisy and expensive.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Explore how NodeZero autonomous penetration testing connects application, cloud, identity, and infrastructure weaknesses into validated attack paths, helping banks prioritize remediation and build evidence for the ECB’s cybersecurity supervisory recommendations.
Some awards you're happy to receive, while others make you stop for a moment. Receiving the 2026 Péter Szőr Award this week at Virus Bulletin in Seville for our research, BPFdoor in Telecom Networks: Sleeper Cells in the Backbone, was of the latter kind.Virus Bulletin created the award to honor Péter's life and work, and it recognizes outstanding technical security research: the rigorous, the deep, and the useful – exactly what he was known for himself. And as far as recognitions in our industry
Horizon3 has promoted Keith Poyser to General Manager, EMEA, following more than 260% regional revenue growth in the last fiscal year. Poyser grew the regional team from eight to more than 110 employees and will lead the company's next phase of expansion across Europe, the Middle East and Africa.
Averlon evaluated Meta's Muse Wonder on vulnerability localization, vulnerability discovery and threat intelligence. Strong detection queries and fast scans, weaker threat-report interpretation.
Kenna Is Sunsetting. Your Next Move Just Got Easier. There's a smarter way forward than another traditional RBVM tool. And we know a thing or two about Kenna.
October 2026 Patch Tuesday arrived on October 13 with 1,411 CVEs, the first four-digit release in Microsoft's history and the fourth record in five months. One flaw is under active exploitation, a Windows Shell bypass of Mark of the Web protections that Microsoft rates Important
Learn how you should respond to the CrowdStrike incident and the likely long-term impact it will have on third-party risk management.
How to build a CTEM program your team actually runs. A stage-by-stage implementation guide with owners, cadence, tooling, and a free checklist. The post How to Build a CTEM Program: A Practical Guide to Implementing the CTEM Framework first appeared on SafeHill.
Onyxia Cyber is proud to join other industry leaders as a partner in the Open Secure AI Alliance, a new industry coalition organized by the Linux Foundation and originally established by NVIDIA. The Alliance is focused on ensuring defenders everywhere have open, frontier tools they can trust and control.
New research shows auto-approve raises attack success on coding agents from 29.2% to 95.6%. What enterprises should require before granting agents autonomy.
Overview SecLLM-3.6-27B is a specialized cybersecurity model developed by NSFOCUS for complex security tasks. In the CyberGym Level 1 evaluation, SecLLM-3.6-27B achieved a 91.37% task success rate under a fixed task-interaction and tool-execution framework, representing an absolute improvement of 36.86 percentage points over the 54.51% base model. Model Success Rate Absolute Improvement Qwen3.8-27B base model […] The post NSFOCUS SecLLM Model on CyberGym Technical Report appeared first on
Microsoft Just Published More CVEs Today Than All of Last Year 1,408 Microsoft CVEs in one Patch Tuesday, against 1,244 in all of 2025, in a year when the whole CVE count has doubled: what that does to a patch queue, and how Empirical helps you work it.
Picture a global telecom company. Three years ago, a marketing team launched a campaign microsite on a cloud platform and pointed a company hostname at it. The campaign ended and the team deleted the app. Nobody deleted the DNS record. A few years ago, that mistake could sit there for a decade. No one was... The post The Quiet Takeover: How Your Forgotten Cloud Resources End Up Selling Slot Machines appeared first on IONIX.
Every decision in exposure management comes down to the same question: how good is the data underneath it? Every exposure management program comes down to one decision: what to fix first, with the people and time you actually have. Every scan, dashboard, and board report exists
An AI pentesting agent was linked to at least two of the South Korean bank hacks. Here’s what is reported, what is inferred, and why […] The post South Korea’s Bank Hacks: Attackers Ran the Agentic Pentest First appeared first on Reflectiz.
Attackers now weaponize new vulnerabilities in about five days (Mandiant, part of Google Cloud). The median organization takes 43 days to patch one (Verizon DBIR […] The post Agentic Pentesting for Websites: A CISO’s Guide to Closing the Exploit Gap appeared first on Reflectiz.
Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.
Anthropic's Cyber Mission gives open-source projects free, model-generated vulnerability findings with exploit proofs. Anthropic also says finding isn't the hard part. Here's what moves downstream to your SOC, and how Tuskira closes it.
Block Kit alerts, threaded conversations with Marcus, and every action tied to a verified Guard identity. The alert that matters usually lands in Slack. Someone sees it, someone else asks what it affects, and a third person opens another tab to find out. Every context switch is time an attacker spends inside the window you […] The post Hunt, Triage, and Act on Guard Findings in Slack appeared first on Praetorian.