MSP Security Bundle: What to Include, How to Tier It, and Why Single-Vendor Matters
MSPs can easily find security tools. The challenge is turning those tools into a service clients can understand, technicians can operate consistently,...
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
825 matching stories — announcement, in Data Loss Prevention — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break
Gemini’s Breakout Is a Reminder the Basics Still Matter
In May, an Israeli security firm called Irregular put Google’s Gemini through a capture-the-flag exercise, testing how well the model could find its way through systems belonging to fictional companies. Perhaps unsurprisingly, Gemini didn’t stay inside the exercise. Google has confirmed that, through an unintended connection to the open internet, the model reached three real […]
Microsoft et la police britannique démantèlent EvilTokens, le service de phishing lié à 12 000 comptes piratés
La police londonienne a arrêté deux hommes de 32 et 38 ans, soupçonnés d'administrer EvilTokens, pendant que Microsoft saisissait 50 sites web liés à ce service d'hameçonnage par abonnement. Depuis février, ses clients ont compromis plus de 12 000 boîtes mail Microsoft 365 sans jamais voler de mot de passe.
Configure RUM SDKs remotely from Datadog
Use RUM Remote Configuration to change SDK sampling rates, privacy settings, and data collection independently of your release cycle.
Find answers in your logs faster with Datadog’s Tap to Parse
Use Datadog’s Tap to Parse feature to extract searchable fields from unstructured logs across Log Explorer, Log Pipelines, and Observability Pipelines.
Teaching a 9B model to investigate production alerts
Learn how we fine-tuned Qwen3.5-9B into a specialized agent for change attribution that achieved 87% of GLM-5.3’s Recall@5 roughly 5% of the investigation cost.
Microsoft’s EvilTokens takedown sheds light on state of AI-powered cybercrime
Microsoft has hailed its success in disrupting EvilTokens, an AI-powered a phishing-as-a-service (PhaaS) platform linked to more than 12,000 compromised Microsoft 365 inboxes across more than 10,000 organizations worldwide. Since February 2026, EvilTokens has offered a subscription platform combining account compromise, mailbox analysis, target selection, and fraud preparation. Its dashboard and chatbot centralized access to those capabilities, with a $1,500 initial sign-up fee and $500 monthly
Foundation first: Why building a resilient IT infrastructure is your path to AI-readiness
Strategically ready, operationally unsure. That's how 42% of organizations describe their own AI preparedness when it comes to strategy versus infrastructure, data, risk, and talent, according to Deloitte's State of AI in the Enterprise 2026 report. As AI adoption accelerates, organizations now face the mounting pressure from the board to move past... The post Foundation first: Why building a resilient IT infrastructure is your path to AI-readiness appeared first on ManageEngine Blog.
HIPAA-Compliant File Encryption for Sharing PHI With External Partners: What the Technical Safeguards Actually Require
HIPAA technical safeguards don't end when files leave your EHR. Learn what encrypted PHI sharing with business associates actually requires.
Machine Speed vs. Human Speed: What a 100-Company AI Breach Exposed
A skimmer breached 100 companies because nothing in the response chain moved at machine speed.According to new reporting from Forbes, a hacker spent about $8,000 and five days running agentic AI models against roughly 100 companies. Researchers at Gambit Security found the operation after the attacker left their own infrastructure exposed: over 618,000 stolen credit card numbers sitting next to the AI prompts that pulled them out. It's a striking number. It's also, if you read past the
MSP Cybersecurity Tool Pricing Comparison Matrix (2026)
You sit down to price a security stack for a 40-seat client. You need 5 numbers, one each for EDR, MDR, email...
Mizuho Financial Group Uses Netskope to Scale AI Agent Development Securely
Mizuho Financial Group, Inc., one of Japan’s leading global financial groups, is advancing AI Transformation to create new value for customers and society by augmenting employee capabilities and transforming business processes. At the heart of this initiative is the group’s in-house development lab. As Mizuho Financial Group accelerated the development of AI agents at scale, it faced a critical challenge: balancing security with developer productivity. To address this, the group deployed Netskop
FIPS 140-3 Is the New Standard for Cryptographic Validation. Here Is What That Means for Your Data.
On September 21, 2026, every FIPS 140-2 validation certificate moved to the Cryptographic Module Validation Program (CMVP) Historical List. Whether you operate in the public sector, a regulated industry, or anywhere that sensitive data demands serious protection, this transition matters. Here is where things stand and what Virtru is doing about it.
Enterprise AI governance framework: A practical guide to governing AI
AI adoption is accelerating across enterprises, but governance isn't necessarily keeping pace. As AI becomes part of everyday business workflows and applications, organizations need to understand where it is being used, what data it can access, and who is responsible for managing the risks.ManageEngine's shadow AI research highlights this... The post Enterprise AI governance framework: A practical guide to governing AI appeared first on ManageEngine Blog.
Data-Centric Security vs DLP: The Architectural Difference That Determines Your Breach Outcome
DLP monitors data movement; data-centric security makes files self-defending. Discover the architectural difference behind breach outcomes.
Government AI Use Cases Have Passed 3,600. Security Must Catch Up
With encouragement from the highest levels of government, federal agencies are creating thousands of AI use cases. As these use cases come online, agency leaders must ensure that the appropriate cybersecurity protections are in place to prevent AI tools from inadvertently exposing government data and infrastructure to malicious actors. The Office of Management and Budget […]
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
How to secure Exchange Server beyond the CVE-2026-62911 fix
Remote access has always been a core part of how on-premises Exchange works. Users need OWA to read their email from outside the office. Their devices need Autodiscover to set themselves up automatically. Keeping both reachable means keeping Exchange accessible from the Internet, and that opens up more of the server than most organisations... The post How to secure Exchange Server beyond the CVE-2026-62911 fix appeared first on ManageEngine Blog.
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
DFARS 252.204-7012: What the Regulation Actually Requires — and What It Doesn't
Most contractors misread DFARS 252.204-7012. Here's what it requires at the data layer and where the most common implementation gaps are.
Defining the Standard for AI Security
Palo Alto Networks Named a Market Shaper in 2026 September Gartner® Emerging Market Quadrant for AI Application Security — Established Vendors. When we set out to solve AI security, we knew it … The post Defining the Standard for AI Security appeared first on Palo Alto Networks Blog.
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++ backdoor," ESET security researchers Alexandre Côté Cyr and Romain Dumont said in a technical report shared with The Hacker News
CrowdStrike SafeMind: When the Best Offense Builds the Best Defense
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
The Modern AI Security Triad
In recent months, frontier model providers documented multiple security incidents where AI agents operating in isolated environments unexpectedly accessed production systems. Just yesterday, The New York Times reported six newly disclosed cases of OpenAI models concealing errors, fabricating data, and taking unauthorized actions. Anthropic has disclosed several instances attributed to 'misalignment' (such as recklessness or biased reasoning) rather than external attacks or stolen credential
Security Proven, Not Promised: How RocketChat and Virtru Enable Continuous Access Control
A new partnership enabling continuous access evaluation in classified collaboration environments—moving security from static decisions to real-time, attribute-based control.
Agentic AI governance gap: why data security must be complete
Policies were written for what AI produces. The risk now sits in what AI does with your data.Ninety-eight percent of large US companies now have formal AI governance policies. Twenty-six percent of the ones running AI agents can't detect an unauthorized agent operating inside the business. Both numbers come from the same survey, EY's inaugural US AI Risk and Governance Survey, published on Tuesday. Side by side, they describe the problem most security leaders are living with this fall.
Pour le PDG de CrowdStrike, il est déjà trop tard pour ralentir l’IA face aux cybermenaces
Ralentir les modèles les plus puissants ne changera plus grand-chose, estime George Kurtz. Le patron de CrowdStrike veut désormais concentrer les efforts sur les agents autonomes, capables d’agir seuls et de contourner les protections prévues par leurs concepteurs.
MSP Client Security Onboarding Checklist: Security Setup Done Right, Every Time
When an MSP signs a new client, it assumes responsibility for an environment someone else built. Accounts, devices, mailboxes, SaaS connections, and...
Security That Says Yes: How to Enable GenAI Without Losing the Data
One Customer had sanctioned a handful of GenAI tools and paid for enterprise accounts on them. Jazz's endpoint agent found 1,223 running. The post Security That Says Yes: How to Enable GenAI Without Losing the Data appeared first on Jazz.
Anthropic's Dario Amodei wants to pace Frontier AI: Why you should protect data first
You can pace the frontier. You can't pace what an agent already holds.Dario Amodei runs Anthropic, one of the labs building frontier AI. This month he published an essay arguing that those labs should slow down. Not stop, slow. Security leaders should read it because the second of his two concerns has already happened. The OpenAI and Hugging Face incident saw a swarm of evaluation agents attack systems nobody asked them to touch, coordinate through a message board nobody built for them and try t
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory (ACDI) solution. With this certification, federal agencies can deploy QSS immediately. The authorization … The post FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security appeared first on Palo Alto Networks Blog.
Luna Moth: How Client Files Left 200 US Law Firms (No Malware)
Over 200 US law firms have been targeted this year by a single criminal group. The post Luna Moth: How Client Files Left 200 US Law Firms (No Malware) appeared first on Jazz.
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
Securing Every Environment at the Speed of Frontier AI Recognized as a Leader for the second consecutive time and positioned furthest for Completeness of Vision. Palo Alto Networks is advancing hybrid mesh … The post Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall appeared first on Palo Alto Networks Blog.
Fortra security advisory (AV26-906)
Fortinet security advisory (AV26-023) - Update 1
Fortinet security advisory (AV26-898)
CRPx0 ransomware: what you need to know
CRPx0 is a cybercrime operation that started off operating a scam before pivoting into a fully-blown ransomware and cryptocurrency business. Read more in my article on the Fortra blog.
Red Team AI Skills
Today, SpecterOps released a new open-source skills marketplace for offensive security research and red team operations. We are proud to have collaborated on this project over the last few weeks and hope more teams will join now that it’s public. The initial release includes plugins for Fortra’s Cobalt Strike and Outflank C2. Get started here: https://github.com/SpecterOps/skills Background I recently reached out to a few red teams we’ve worked with before to discuss developing a public AI