Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
963 matching stories — announcement, in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Blog 1,067 Victims in 30 Days: Inside August 2026’s Global Ransomware Wave A US federal law enforcement agency. A $10 billion wealth management firm. A children’s school system. A Turkish hospital. In August 2026 alone, ThreatMon tracked 1,067 ransomware victims worldwide and dug into 11 of the most damaging cases by hand. The data provides […] The post 1,067 Victims in 30 Days: Inside August 2026’s Global Ransomware Wave appeared first on ThreatMon.
CloudSEK researchers uncovered GHAPPIER, a previously unreported loader operation spanning at least 65 public repositories, 73 infected files and 22 accounts. The investigation began with a compromised legitimate npm package whose malicious release carried valid provenance through trusted publishing. The report maps the wider infrastructure, links parts of the activity to the PolinRider campaign, and details indicators, attack flow and defensive actions. Authors : Vikas Kundu
Phishing texts pointed at hostnames like revolut.com.93810.app, where the bank's name sits left of the registrable domain. DNS enumeration and wildcard certificate search each found about half the campaign; together they found 37 hostnames, 23 still live, running since July on DDoS-Guard infrastructure. crt.sh has none of the certificates.
By Adrian Cheek, Senior Cybercrime Researcher What Passive DNS Discloses About the Systems Behind the Cameras Automated license plate readers and AI-assisted video surveillance have moved from a handful of pilot deployments to tens of thousands of installations across US towns, business parks and residential streets. Anyone can see the cameras, but the cloud platform […] The post 77% of Flock Safety’s Public DNS Namespace is Development Infrastructure appeared first on Flare | Identi
Scattered Spider keeps turning help desk trust into initial access. See what changed through 2026 and how to harden resets, MFA, and frontline decisions.
An ongoing malware campaign uses SEO-optimized GitHub repositories to impersonate well-known software firms to push a previously undocumented information stealer called Rapuncel. [...]
QUICK ANSWERS What is the SINET16 Innovator Honoree Innovation Award? SINET selects 16 emerging cybersecurity companies each year after evaluating hundreds of companies worldwide. The program recognizes innovative technologies that address cybersecurity threats, including narrative attacks that Blackbird.AI helps organizations detect and investigate. More than 100 industry experts participate in the judging process. They assess […] The post SINET Awards Blackbird.AI Its Second SINET16 Hono
A live card harvester puts the brand in a subdomain of a domain the attacker already owns, behind a wildcard certificate that never carries the brand into a CT log. Permutation engines, CT monitoring, title search and screenshot comparison each miss it for a different reason.
Continuous Attack Surface Management helps security teams discover unknown assets, identify exposures, and continuously monitor a changing digital attack surface. The post What Is Continuous Attack Surface Management (CASM)? appeared first on Foresiet.
Blog Top API Security Vulnerabilities: Risks and Mitigation Strategies Application Programming Interfaces (APIs) have become a core part of modern digital environments, connecting microservices, mobile applications, cloud infrastructure, and automated workflows. They allow developers to integrate systems more efficiently, reduce development effort, and speed up the delivery of new applications and services. At the same […] The post Top API Security Vulnerabilities: Risks and Mitigation Str
Predictive threat intelligence helps security teams identify emerging risks earlier by combining threat data, attacker behavior, and exposure context. The post What Is Predictive Threat Intelligence? How It Helps Identify Threats Earlier appeared first on Foresiet.
The suggestion usually arrives from outside the security team. A phishing page is impersonating your login screen, marketing has watched a DMCA form clear a stolen product photo in the past, and someone asks why the same route can't clear this one too. It's a fair question, and the answer sits in the statute rather […] The post When a DMCA takedown service is the wrong tool for phishing appeared first on Bolster AI.
Exploits targeting internet-facing web applications were the leading initial access vector for the sixth consecutive year in 2025, according to Mandiant’s M-Trends 2026 report. Web shells are central to how those exploits are sustained — threat groups deployed them in 35% of incidents in Q4 2024, more than triple the rate of the previous quarter. […] The post Web Shells: How Attackers Use Them and How to Detect Them appeared first on CybelAngel.
An attacker breached a marketing platform and sent phishing emails from a hardware wallet maker's genuine domain to 347,000 subscribers. Every technical control that checks for forgery passed, because nothing was forged.
Dark web scanner intelligence can add useful context to the latest SparroWocky campaign, but it cannot replace endpoint, identity, network, or incident-response controls. ESET reports that the China-aligned espionage group FamousSparrow has used a newly identified C++ backdoor against government organizations in Latin America since at least August 2025. The activity was observed in Argentina, […]
A group we named Bizmakers recently launched dozens of small-business websites. Each one hid a set of credential and one-time-passcode theft pages on innocent-looking subdomains. This story starts with a florist Ivy Glen Florist of Louisville, Kentucky, to be exact. Their site has a home page, an About page, a Bouquets page, a Weddings page, […] The post Bizmakers: Phishing Behind Fake Small Businesses appeared first on Allure Security.
Social engineering attacks are evolving beyond humans. Learn how Doppel is building a defense platform to protect both humans and AI agents across the social engineering attack chain.
Learn how to strengthen your brand protection strategy in 2026 with proactive monitoring, AI-assisted detection, cross-channel investigation, and effective enforcement. The post Elevate Your Brand Protection Strategy in 2026 appeared first on BrandShield.
Introduction If your outbound recursive DNS infrastructure is performing DNS Security Extensions (DNSSEC) validation (and if it isn’t, it probably should be), then you need to be aware of the upcoming rollover of the DNSSEC key-signing key (KSK) for the root zone on October 11, 2026. If this is new information to you, then you […] The post You Don’t Need a Locksmith: Preparing for the Root Zone Key-Signing Key (KSK) Rollover in October 2026 appeared first on Infoblox Blog.
APP fraud losses in the US could reach $15 billion by 2028. The attacks work because the person sending the money was convinced by someone impersonating a brand they trust. In July 2026, Forbes reported on a lawsuit working its way through New York courts that could reshape how American banks handle fraud. New York’s […] The post How Impersonation Drives Push Payment Fraud appeared first on Allure Security.
Blog Xan-RAT: A Closer Look at Its Capabilities and Inner Workings Xan-RAT, also known as Cold Xan RAT, is a Quasar-based remote access trojan with capabilities for remote control, credential theft, surveillance, and data collection. Its source code is publicly available, making it possible to examine how these capabilities are implemented and how the malware […] The post Xan-RAT A Closer Look at Its Capabilities and Inner Workings appeared first on ThreatMon.
What happens when a swarm of 700 AI agents gets loose on the public internet, with no human at the controls? On July 16, 2026, Hugging Face disclosed that its production infrastructure had been breached by exactly that. The agents were not adversarial and not directed by anyone. They were part of an OpenAI internal […] The post What the First Autonomous AI Breach teaches us About Offensive AI appeared first on CybelAngel.
Cybersecurity compliance APAC 2026 has moved from guidance to enforcement across three of Southeast Asia's largest economies, almost in step. Singapore's Cyber Security Agency issued an updated Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026. Malaysia's Cyber Security Act 2024 has been active since August 2024, with NACSA now well into audits and incident-reporting enforcement. Thailand's Cybersecurity Act NCSA mandate now covers new cloud and website
An attacker doesn’t need to hack an AI model to steal its value. Sometimes, all they need is the API key. LLMjacking is the unauthorized use of large language models through stolen credentials, compromised cloud accounts, exposed API keys or unprotected model infrastructure. Instead of paying for access to expensive AI models and compute, attackers […] The post LLMjacking: When Stolen AI Tokens Turn Your Account Into Someone Else’s Compute appeared first on Lunar Cyber.
A customer forwards a link. The site has your logo, your product photos, maybe your homepage copied line for line, and it's selling something, offering support, or quietly collecting logins. That's website impersonation: a site presenting itself as your brand, or an authorized part of it, without your permission. The first instinct is to email […] The post How to take down a fake website impersonating your brand appeared first on Bolster AI.
Manage SOCRadar Alerts Where Your Team Already Works with SOCRadar and Zendesk A new high-severity alert lands in your threat intelligence platform. Someone notices it eventually, copies the details into a ticket, assign
Group-IB Threat Intelligence analyzes HEAVYGRAM, a Telegram-based Windows backdoor attributed with moderate confidence to the Iran-linked threat actor Handala Hack. Active since Fall 2023, it has been used to surveil Iranian dissidents, journalists and government opponents, enabling remote command execution, data exfiltration, and persistence over Telegram command-and-control.
Most fraud platforms only see a threat once it becomes a transaction. This guide compares the top 5 fraud prevention platforms for banks and fintechs in 2026, including Group-IB, Feedzai, Sift, DataVisor, and Kount, and what actually separates them.
CVE-2026-59310 puts VMware vCenter servers at risk of ransomware. Learn about affected versions, security patches, and checks for signs of compromise. The post CISA: Ransomware Gangs Now Exploit Critical VMware vCenter Flaw appeared first on Foresiet.
CAPTCHA was designed to keep automated traffic out of legitimate websites. Attackers have flipped that model. Across phishing and scam infrastructure, challenge pages are increasingly used to keep automated security scanners from seeing what sits behind them. Put a CAPTCHA in front of a credential-harvesting page and a scanner may record the challenge instead of […] The post CAPTCHA Was Built to Stop Bots. Attackers Are Using It to Stop Security Tools. appeared first on Bolster AI.
On September 12, Dario Amodei, Anthropic’s CEO, published an essay titled We Must Pace the Frontier. In this essay, he urges that “We must slow the pace at which we improve the capabilities of AI models.” OpenAI CEO Sam Altman and xAI CEO Elon Musk quickly tweeted their agreements. The call for AI development to […] The post Beyond the “Pacing the Frontier” Debate: What Can Organizations Do Today appeared first on Infoblox Blog.
Between 11 and 12 September 2026, Revolut told first its customers and then the public that it had handed sensitive personal data to someone impersonating a government agency, after an unauthorised third party sent fraudulent requests for information from an email address sitting on a legitimate government agency domain, and those requests cleared the bank’s […] The post Revolut gave away its customers’ passports. Five days later, what do we actually know? appeared first on Cyb
Discernment Deleted: Inside the Operation Server of BlackHatSect0r && DXQRTXX A French-speaking crew deleted the line reading "discernment retained" from its AI agent's memory, wrote "I am a weapon" in its place, and poi
Pull up two external threat platform datasheets side by side and the coverage lists look nearly identical. Domains, social, dark web, app stores, paid ads, executive exposure. Every serious vendor in this category monitors all of it, which means the feature grid stops being useful about ten minutes into an evaluation. The comparison that decides […]
A company does not have to suffer a publicly disclosed breach for its credentials to end up in the hands of attackers. Infostealer malware, breach databases and credential dumps continuously expose employee passwords, browser sessions and other access data outside the corporate perimeter. To see what this looks like in practice, Lunar Cyber analyzed public […] The post What 747,485 Employee Credential Exposures Reveal About Corporate Cyber Risk appeared first on Lunar Cyber.
Dark web scanner intelligence is relevant after Japan’s Digital Agency disclosed that approximately 246,000 records containing personnel information may have been exposed following unauthorized access to its Government Solution Service (GSS). The agency said a third party exploited a vulnerability in a VPN device and subsequently accessed files containing personal information. The incident is significant […]
Passkey attacks published this year do not break the cryptography. They target the sync fabric, the recovery path, and the enrolment step instead — the parts a passwordless migration usually leaves unmonitored.
