Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
856 matching stories — in Data Loss Prevention — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft's Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy crypto coin, and a corporate apology that wasn't from Microsoft either. Meanwhile, UK losses from hacked email and social media accounts have rocketed by 417%, as scammers pose as your friends to flog you tickets to gigs that don't exist. Plus, Hack The Box's Christine Bartlett joins us for a featured interview to ask what happens when AI agents joi
Introducing Google Cloud DNS monitoring and management in ManageEngine OpUtils IP Address Manager. This new capability enables administrators to monitor and manage Google Cloud DNS zones, DNS records, and routing policies alongside their on-premises DNS infrastructure from a single, centralized console.Here's how OpUtils simplifies Google Cloud DNS... The post Introducing Google Cloud DNS management in OpUtils appeared first on ManageEngine Blog.
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect
Patch management problems can remain hidden until an incident exposes them. By then, the question shifts from how do we fix this? to how do we explain this?This audit helps surface those gaps before that conversation happens. Work through each question with the people who own the answers. A no or we don’t know is useful information. It tells you... The post The Patch Management Audit: 14 questions to ask before the next CVE drops appeared first on ManageEngine Blog.
Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post 3 lessons from frontier AI vulnerability research appeared first on Microsoft Security Blog.
An agent's identity tells you who asked for the file. Only the data can tell you what left with it.Almost every organization now has a written policy for what its AI agents can touch. In Delinea's 2026 Identity Security Report, covered by Help Net Security, 99.7% of IT and security leaders said they had a formal policy governing the data AI tools and agents could access. Most of them also reported or suspected that an AI tool or agent had reached sensitive data beyond what its task required
AI adoption made the alert queue louder, and the alerts about sensitive data leaving got harder to hear.AI-related security alerts grew 685% between February and June 2026. The figure comes from Intezer, an AI SOC vendor that reviewed roughly 16.9 million enterprise alerts and published its findings in The Hacker News. The Cloud Security Alliance analyzed the research in a September research note and reached a sober conclusion. Legacy detection logic can't tell routine AI use apart from ris
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Generative AI (GenAI) is moving quickly into banking. According to a 2025 survey by McKinsey, 52% of financial institutions surveyed already consider GenAI a priority, while another 39% are interested but have not yet made it a top priority.As adoption grows, banks need to think carefully about what AI agents can access, which identities it uses,... The post Generative AI in Banking: Balancing innovation, risk, and operational readiness appeared first on ManageEngine Blog.
Learn how Datadog evaluated Agent-based host vulnerability scanning, compared detection results, and preserved coverage and audit reporting during the migration.
AgentSkope Marketplace: AI Agents the Easy Way 56% of SOC and NOC teams are considering agents as a way to help with the capacity pressure in their team, and yet, among those who have started deploying them only 9% consider them to be highly integrated. Managing agents has become a new workload in itself at […]
A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DVRs and other network-connected hardware. The malware was seen exploiting flaws including command inj
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Nine months of quiet access starts with files nobody knew were sitting there.For roughly nine months, a small number of unauthorized users had access to files on a Defense Manpower Data Center (DMDC) server holding unencrypted Social Security numbers. According to the breach notification letter reviewed by Military Times, that access ran from October 2025 until DMDC found a vulnerability in its file-sharing system on July 16, 2026. A Department of War official told CNN the breach affects 2.76 mi
How Anthropic's Safeguards team tells attackers from defenders when both use the same techniques, and what security teams should prepare for as AI agents take on more of the attack. The post Anthropic’s approach to stopping GenAI attacks appeared first on Jazz.
A Mir0Auth attack completely bypasses standard detection signals. The victim signs in through legitimate workflows, leaving no proxy landing pages, harvested credentials,...
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
A standard employee offboarding checklist can cover HR tasks while still missing identity and access paths that affect MSP security efforts. Payroll...
Introducing Cortex XCOR: AI-Driven Observability that Delivers Autonomous Response with AI SRE I’ve been tackling the observability problem for more than a decade, since before it was coined observability. From building internal … The post Observability’s AI Moment appeared first on Palo Alto Networks Blog.
Preparing a client update. Reviewing open incidents. Figuring out which account needs attention first. For MSPs, each task often starts with gathering...
Netskope Threat Labs analyzed a crypto-stealing operation that drains victims’ cryptocurrency exchange accounts. An Aotera/Tedy loader injects a Vidar-class stealer into a Windows process, which then launches Chrome or Edge and injects its scripts into the pages the victim opens. The operation is built with a malware builder whose loader telemetry records date back to […]
Western Canada Lottery Corporation replaced a fragmented, multi-ISP retail network with Netskope One SASE across 5,000 retail lottery sites, cutting multi-million dollar circuit costs, eliminating VPN, and gaining real-time visibility and governance over AI usage.
We are thrilled to announce that KDDI Corporation, a long-standing NextWave partner of Palo Alto Networks and a Managed Security Service Provider (MSSP) with whom we have built a strong partnership, has … The post “SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust appeared first on Palo Alto Networks Blog.
