Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
963 matching stories — announcement, in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
CenterPoint Energy data breach reporting in September 2026 began with an online claim and then became a confirmed cybersecurity incident. CenterPoint Energy said it first became aware of a third-party post claiming to possess customer information, then determined that an unauthorized third party had obtained personal information relating to some customers through an external-facing system. […]
Affiliate marketing is designed to help brands reach new audiences through publishers and partners who promote their products or services in exchange for commissions. But the model can be abused […]
Compare 7 email security platforms in 2026 on detection, auditable investigation, and response that reaches past the inbox — not just inbox catch rate.
Compare the top 7 security awareness training vendors for 2026, from multi-channel simulation to compliance platforms. Find the right fit for your team.
Inside BigBear 2.0's live phishing panel, MFA-bypass workflow, affiliate model, and the case for measuring takedown speed over alert volume.
Quick Answers How does narrative intelligence support risk intelligence teams? Narrative intelligence adds context around the people, networks, and behaviors driving threats, helping teams identify coordinated activity, bot-like amplification, and how narratives are spreading. What signals can help risk teams identify escalation early? Exposed PII, doxxing, increased executive mentions, coordinated amplification, and sudden shifts in […] The post Blackbird.AI at the AIRIP Global Intelligen
CDN bot management can't keep up with AI agents. See why layering a specialist bot and agent trust solution is the new enterprise security default.
Brecha de datos por un agente de IA es la descripción de un incidente que ha abierto un nuevo debate en España sobre la automatización de los ciberataques. La Agencia Española de Protección de Datos (AEPD) informó en septiembre de 2026 de la primera notificación que ha recibido en la que una organización atribuye distintas […]
The post The best OSINT browser extensions: 10 tools every investigator should know appeared first on ShadowDragon®.
Here are the main stories you missed last week. 1. Cisco: Catalyst SD-WAN Manager CVE-2026-76504 marks the eighth CISA KEV listing for the product this year The headline: On October 1, 2026, CISA added CVE-2026-76504 to the Known Exploited Vulnerabilities catalog following Cisco’s confirmation of active exploitation. The flaw is a CVSS 9.8 hex encoding […] The post Cyber Roundup: Week of September 28 appeared first on CybelAngel.
Brazil voted on October 4 and will vote again on October 25. These are five cybersecurity threats companies with operations, partners, or suppliers in the country should be monitoring between now and the second round, and well beyond. Our data shows a 135% increase in the volume of claimed attacks targeting Brazilian entities between January […] The post 5 Cyber Threats to Watch as Brazil Heads to the Polls appeared first on CybelAngel.
A company appears for sale on an underground forum. An employee password turns up in an old breach. A fresh infostealer log contains a corporate login and an active browser session. Someone posts a ransomware claim naming the company. All four are external exposure signals. But they are not the same kind of threat, and […] The post Dark Web Monitoring vs. Compromised Credential Monitoring: What Each Finds and What Each Misses appeared first on Lunar Cyber.
A counterfeit listing feels like a marketplace problem, so it gets a marketplace vendor. That instinct is why most Red Points shortlists compare the wrong things. The post Red Points competitors and alternatives in 2026 appeared first on Bolster AI.
IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale SOCRadar Dark Web Team identified several new underground posts, including an alleged IQUALIF-based French
Revolut data breach reporting in September 2026 showed how sensitive customer information can be exposed without a reported compromise of the company’s core systems. Revolut said an unauthorized third party used a legitimate government agency email domain to submit fraudulent requests for information. The incident highlights a different security failure: trusted communications can still be […]
Compare the best anti-phishing software for enterprises in 2026 and see how leading platforms handle phishing detection, fake domains, email threats, brand impersonation and takedowns. The post 6 Best Anti-Phishing Software for Enterprises in 2026 appeared first on Foresiet.
A Russian-speaking Gentlemen ransomware affiliate called Azazel robbed two dozen victims across six countries, then double-crossed his own gang by publishing the loot on a private leak site and pocketing every dollar. CloudSEK traced 50TB of exposed infrastructure and a live AI-driven attack chain. Read how "Caught in 4K" cracked the operation. Authors : CloudSEK TRIAD
A Facebook post says your bank is giving away free smartwatches: answer a few questions and pick your colour. The page looks right, with the bank's logo, the right Arabic typography, a watch picker and a short order form. It asks for your name and national ID number, then your online-banking login, then a one-time code. The current version never asks for a payment, which removes the usual warning sign.
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.
Passwords are no longer the only credentials security teams need to worry about after an endpoint is compromised. API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can provide direct access to infrastructure, repositories, SaaS applications and AI platforms. Many of these credentials have their own lifecycle, which means resetting an employee […] The post NIST IR 8587: Token Security Is Now a Non-Human Identity Problem appeared first on Lu
What does nine months of unauthorized access to a Pentagon personnel database look like? Approximately 3.05 million unencrypted records containing Social Security numbers, military service details, and personal identifiers, sitting on a file-sharing system that “a small number of unauthorized users” had every one of those nine months to themselves before anyone noticed. Here is […] The post The Pentagon’s DMDC Breach: 7 Things Security Teams Need to Know appeared first on
OverviewRapid7 tracked a set of Linux samples that blend into the software and device conventions of the telecom environments they target. The set spans a newly observed BPFDoor variant, a BPF Rekoobe build seen against South Korean targets, a dropper, and six builds of a Linux implant we track as AVERAT, deployed against Taiwanese appliances. Additionally, we provide source code details of the Rapid7 BPFDoor controller introduced in our April 2026 blog, Stealthy BPFDoor Variants are a Needle Th
Blog The NetScaler Zero-Day Siege and Pre-Auth RCE Chains: Technical Analysis and Exposure Assessment On September 27, 2026, Citrix published bulletin CTX697096 with eight NetScaler ADC and Gateway vulnerabilities. Two of them, CVE-2026-88771 and CVE-2026-88772, were already being exploited before fixed builds existed. Both give remote code execution to an unauthenticated attacker. CISA added both […] The post The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Ex
FortiMail Zero-Day Under Active Exploitation Fortinet has confirmed that CVE-2026-104286, a critical path traversal flaw in FortiMail, is being exploited in zero-day attacks, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on the same day the advisory went live. Fixed builds are not yet available for most affected branches, so the primary […]
A GitLab incoming email token published in a README never expires and works at account level. Learn how the attack path works, how to reset the token, and how to audit your repositories.
Two vendors will show you the same dashboard this quarter. Both will fill it with domains, both will call the contents the risk outside your firewall, and both will book the meeting with the same person on your team. Run them side by side against one company, and the findings barely overlap. The post Digital risk protection vs external attack surface management appeared first on Bolster AI.
Group-IB descubre BraZetsu, un nuevo malware para Windows basado en Python que funciona como un toolkit maestro para Initial Access Brokers y potencia un marketplace clandestino único, mejorado con IA, para comercializar objetivos comprometidos en Iberoamérica y Latinoamérica.
Focused, reliable partnerships are the surest path to enduring growth. At Infoblox, we align with our channel partners around the customers we serve, the capabilities we build and the outcomes we deliver by investing in technical expertise, executive alignment and repeatable go-to-market motions. The 2026 Infoblox Americas Partner Award winners, announced at our Partner Advisory Board […] The post Celebrating the Partners Driving Customer Impact and Growth across the Americas appeared firs
DataDome's AI Key Takeaways turns security data into real-time summaries: a security view for analysts, a business view for execs. One source of truth.
Quick Answers What is TrustOps? Gartner® defines TrustOps, or trust operations, as a holistic approach to enhancing organizational trustworthiness and transparency while mitigating risks from disinformation and harmful associations. It includes policies and practices to verify and certify content authenticity and detect and debunk false or misleading content. What is a Trust Operations Council? A […] The post What is a TrustOps Council and Why Does It Matter to Your Team? appeared first on
TeamViewer Fixes Five Remote Access Flaws TeamViewer has patched five high-severity vulnerabilities in its Full Client and Host applications for Windows, Linux, and macOS. The flaws include local privilege escalation, po
By Assaf Morag, Cybersecurity Researcher A 2,200-word tutorial titled “Complete Guide to Carding in Spain (2026)” appeared on the Carder Market forum in April 2026. It is exactly what it sounds like: a beginner’s playbook for credit card fraud targeting the Spanish market, complete with entry fees, expected returns, and step-by-step operational workflows (we are […] The post What a Spanish Carding Tutorial Reveals About How Fraudsters Actually Think appeared first on Flar
As AI takes on more of the enrichment, correlation, and initial assessment inside the SOC, roles, skills, and KPIs still require deliberate redesign. Security leaders need to decide where automation is dependable, where human judgment should remain decisive, and how teams should be measured when alert handling is no longer the center of the operating modelThe Gartner® report, The Roles Required for the AI-Enabled Security Operations Center (SOC), examines the roles and capabilities Gartner expec
Milk Dragon, also known as NaiLong is an Adversary-in-the-Middle (AiTM) phishing kit active since October 2025. Unlike conventional phishing tactics that rely on fear and urgency, Milk Dragon lures victims with big discounts on consumer goods distributed via Facebook and TikTok marketplace advertisements.
Citrix fixed two actively exploited NetScaler zero-day flaws, but a patch does not remove an attacker already inside. Seven steps from patch to closure.
Imposter scams are now the most reported fraud category in the United States. The federal rule designed to punish them has produced a dozen enforcement actions and $70 million in consumer redress. In November 2024, a federal court temporarily halted a company called Superior Servicing and froze its assets at the FTC’s request. The company […] The post The FTC Impersonation Rule After Two Years of Enforcement appeared first on Allure Security.
A trusted organization recently watched its own name become the bait for a sophisticated fraud campaign. Scammers cloned its brand, created fake profiles of its executives, and launched counterfeit donation pages, all designed to target the people who trust the organization most. This is what fundraising scams look like today: coordinated impersonation campaigns that exploit […]