Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
283 matching stories — in Detection Engineering — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
A WAF can be running, correctly configured, and blocking known attacks while still leaving significant gaps in application security. Limited inspection, outdated WAF rules, exposed APIs, and unpatched software vulnerabilities can create security gaps that attackers may exploit. For enterprises, CDN providers, and security integrators, effective web application protection requires more than baseline OWASP Top […] The post The WAF Blind Spot: What Basic Web Application Protection Can Miss ap
An enterprise environment emits events by the million every hour. During an incident, the responder rarely needs all of them. They need the few hundred that tell the story: the burst of 4625 failures followed by a single 4624 success, the encoded PowerShell spawned by winword.exe, the new service installed at 03:12 on a domain […] The post Log Analysis: From Raw Events to Detections appeared first on SOC Prime.
BeyondTrust has disclosed CVE-2026-102764, a critical vulnerability in Remote Support (RS) that was exploited as a zero-day by a suspected China-nexus cyber espionage actor. The flaw carries a CVSS 4.0 score of 9.3 and can allow an unauthenticated remote attacker to perform arbitrary file operations on a vulnerable appliance. Google Threat Intelligence Group and Mandiant […] The post CVE-2026-102764: Critical BeyondTrust Remote Support Zero-Day Exploited by China-Linked Hackers appeared fi
A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux networking stack and can allow attacker-controlled code running inside a guest VM to disclose host memory, crash the host, and, under demonstrated lab conditions, achieve guest-to-host code […] The post CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape appeared f
The hacker collective Scattered Lapsus$ Hunters has launched a new leak site threatening to release data stolen from Salesforce instances.
This week on The Kettle, we discuss some arrests and how Mythos' mathematical expertise has led to a second exploited bug that no human would have found
Leverage SIEM security monitoring in an endpoint detection and response (EDR) system that provides multi-SIEM and multiplatform flexibility. What Is SIEM Security Monitoring? Security information and event management (SIEM) brings security events, logs, and other telemetry together so organizations can detect threats, investigate activity, monitor compliance, and respond more effectively. Instead of viewing security activity […] The post SIEM Security Monitoring: Turn Security Data Into Ac
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
Old vulnerabilities do not necessarily disappear from attackers’ playbooks. Instead, older CVEs can remain actively exploited years after their initial disclosure, particularly when vulnerable legacy and end-of-life (EOL) systems remain in operation. As artificial intelligence (AI) and automation accelerate vulnerability exploitation, organizations need to identify and protect weaknesses regardless of their age. Atomicorp helps organizations […] The post The Vulnerability Came Back: Why Ol
SentinelOne is now in Anvilogic Federated Search, so analysts can query endpoint activity in place with S1QL or plain language, next to every other source.
Anvilogic's Enterprise Security Graph connects detections, feeds, alerts, and past decisions so AI agents start with your SOC's context instead of from zero.