Microsoft Outlook to block MSIX attachments starting November
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. [...]
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
825 matching stories — announcement, in Data Loss Prevention — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Broadcom VMware security advisory (AV26-1008)
AI agent access: Why identity alone can't make data security complete
An agent's identity tells you who asked for the file. Only the data can tell you what left with it.Almost every organization now has a written policy for what its AI agents can touch. In Delinea's 2026 Identity Security Report, covered by Help Net Security, 99.7% of IT and security leaders said they had a formal policy governing the data AI tools and agents could access. Most of them also reported or suspected that an AI tool or agent had reached sensitive data beyond what its task required
AI alert noise: Why autonomous DLP must read content and context
AI adoption made the alert queue louder, and the alerts about sensitive data leaving got harder to hear.AI-related security alerts grew 685% between February and June 2026. The figure comes from Intezer, an AI SOC vendor that reviewed roughly 16.9 million enterprise alerts and published its findings in The Hacker News. The Cloud Security Alliance analyzed the research in a September research note and reached a sober conclusion. Legacy detection logic can't tell routine AI use apart from ris
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Generative AI in Banking: Balancing innovation, risk, and operational readiness
Generative AI (GenAI) is moving quickly into banking. According to a 2025 survey by McKinsey, 52% of financial institutions surveyed already consider GenAI a priority, while another 39% are interested but have not yet made it a top priority.As adoption grows, banks need to think carefully about what AI agents can access, which identities it uses,... The post Generative AI in Banking: Balancing innovation, risk, and operational readiness appeared first on ManageEngine Blog.
Data Classification Levels: How to Tier Your Files and Decide Which Ones Need Per-File Encryption
A four-tier data classification model and the controls each tier needs, from basic permissions to per-file encryption.
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
How we replaced our host vulnerability scanner with the Datadog Agent
Learn how Datadog evaluated Agent-based host vulnerability scanning, compared detection results, and preserved coverage and audit reporting during the migration.
Who's watching the AI? Why monitoring tools have to monitor AI agents, too
For years, using AI meant typing a question and waiting for a response. AI was a tool that sat still until you poked it. That's changed fast.AI today doesn't wait for a prompt. It acts autonomously. It can open a support ticket, restart a stuck service, or push a refund through, often with no human involved. This raises a question almost nobody... The post Who's watching the AI? Why monitoring tools have to monitor AI agents, too appeared first on ManageEngine Blog.
The cybersecurity problem hiding in your later list
Let's be honest: Every IT team has that one thing.That ancient server that nobody wants to touch somehow still runs. That vulnerability that has been sitting in the remediation queue because there were more critical issues to handle, and then there's the active service account that was created for a temporary project three years ago. Or perhaps... The post The cybersecurity problem hiding in your later list appeared first on ManageEngine Blog.
'BigDiskBuster' Leaves Microsoft Defender Running While Blocking Updates
Not quite an EDR-killer, but the proof-of-concept cyber technique creates a silent virus detection gap while service runs normally, no exploit required.
CISO perspectives on managing vulnerability risks in the age of AI
Learn how CISOs can mitigate cybersecurity risks and increase resilience in the age of AI-powered vulnerability management. The post CISO perspectives on managing vulnerability risks in the age of AI appeared first on Microsoft Security Blog.
Best Data Access Control Software for Enterprises in 2026
Data access control software decides who can open which files. Compare identity, data, policy, and file-layer tools, and where each stops.
AgentSkope Marketplace: AI Agents the Easy Way
AgentSkope Marketplace: AI Agents the Easy Way 56% of SOC and NOC teams are considering agents as a way to help with the capacity pressure in their team, and yet, among those who have started deploying them only 9% consider them to be highly integrated. Managing agents has become a new workload in itself at […]
New Linux malware turns vulnerable IoT devices into proxy nodes
A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DVRs and other network-connected hardware. The malware was seen exploiting flaws including command inj
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
Protecting Patient Trust: How NHS Leaders Can Enforce Policy Automatically
"We are appalled that this happened. Unauthorised access to court files is completely unacceptable."
EAR Compliance for Dual-Use Technology: What Exporters Must Do to Protect Files After Transmission
EAR's deemed export rule makes file protection an export control requirement the moment a non-US person touches controlled technical data.
Pentagon breach: unencrypted SSNs sat in a file share for 9 months
Nine months of quiet access starts with files nobody knew were sitting there.For roughly nine months, a small number of unauthorized users had access to files on a Defense Manpower Data Center (DMDC) server holding unencrypted Social Security numbers. According to the breach notification letter reviewed by Military Times, that access ran from October 2025 until DMDC found a vulnerability in its file-sharing system on July 16, 2026. A Department of War official told CNN the breach affects 2.76 mi
Anthropic’s approach to stopping GenAI attacks
How Anthropic's Safeguards team tells attackers from defenders when both use the same techniques, and what security teams should prepare for as AI agents take on more of the attack. The post Anthropic’s approach to stopping GenAI attacks appeared first on Jazz.
Unpacking Mir0Auth Attack
A Mir0Auth attack completely bypasses standard detection signals. The victim signs in through legitimate workflows, leaving no proxy landing pages, harvested credentials,...
Process and route critical security logs to Exabeam with Observability Pipelines
Learn how Observability Pipelines Packs reduce security log volume before data reaches Exabeam while preserving parser compatibility.
Fortra Patches Critical Vulnerabilities in BoKS
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
N0n ransomware: what you need to know
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
Fortinet security advisory (AV26-989)
Employee Offboarding Security Checklist for MSP Tenants: What HR Misses Across Client Tenants
A standard employee offboarding checklist can cover HR tasks while still missing identity and access paths that affect MSP security efforts. Payroll...
The first 72 hours of a ransomware attack: Why restored isn’t recovered
Restoring servers isn’t the same as recovering the business. Plan ransomware recovery and use AI-assisted investigation to detect attacks sooner.
Fortra security advisory (AV26-987)
Observability’s AI Moment
Introducing Cortex XCOR: AI-Driven Observability that Delivers Autonomous Response with AI SRE I’ve been tackling the observability problem for more than a decade, since before it was coined observability. From building internal … The post Observability’s AI Moment appeared first on Palo Alto Networks Blog.
Your Guardz data, now in Claude
Preparing a client update. Reviewing open incidents. Figuring out which account needs attention first. For MSPs, each task often starts with gathering...
$100k in Crypto Drained by the Underground Operation
Netskope Threat Labs analyzed a crypto-stealing operation that drains victims’ cryptocurrency exchange accounts. An Aotera/Tedy loader injects a Vidar-class stealer into a Windows process, which then launches Chrome or Edge and injects its scripts into the pages the victim opens. The operation is built with a malware builder whose loader telemetry records date back to […]
Securing the Jackpot: How Western Canada Lottery Corporation Is Modernizing 5,000 Retail Sites with Netskope SASE
Western Canada Lottery Corporation replaced a fragmented, multi-ISP retail network with Netskope One SASE across 5,000 retail lottery sites, cutting multi-million dollar circuit costs, eliminating VPN, and gaining real-time visibility and governance over AI usage.
“SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust
We are thrilled to announce that KDDI Corporation, a long-standing NextWave partner of Palo Alto Networks and a Managed Security Service Provider (MSSP) with whom we have built a strong partnership, has … The post “SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust appeared first on Palo Alto Networks Blog.
7 best DLP solutions in 2026: Top software compared
How the hell did we make DLP cool?
Jazz was named a Gartner Cool Vendor in Data Security. The post How the hell did we make DLP cool? appeared first on Jazz.