Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
963 matching stories — announcement, in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Dark web scanner intelligence is becoming increasingly relevant as newly leaked university records provide an unusual look at how Russia has developed a structured pipeline for military cyber and intelligence personnel. Records associated with Bauman Moscow State Technical University’s concealed Department No. 4 reportedly show training spanning cyber operations, reconnaissance, information warfare, and defensive security. […]
The post OSINT Framework: What is a better alternative? appeared first on ShadowDragon®.
By Adrian Cheek, Senior Cybercrime Researcher The standard story about higher education cybersecurity is that it’s target-rich and cyber-poor: a sprawling, underfunded sector where the weakest links are the community colleges and cash-strapped campuses without the budget for a real security program. This study finds the opposite pattern. 45% of the nation’s most research-intensive universities, […] The post 45% of Top American Research Universities Expose Computing Infrastructu
The post Cyberattack Disrupts 15 MW UK Power Plant for Four Days as OT Attack Vector Remains Unknown appeared first on ThreatMon.
A threat intelligence program earns its budget when it changes decisions. Here are the five steps to build one around campaigns instead of isolated indicators.
Zero Trust keeps coming up in board meetings and budget reviews, yet the term still gets stretched in every direction. You’re expected to “implement Zero Trust,” but what that means in practice is often unclear, especially when your environments span cloud workloads, legacy systems, SaaS platforms, remote users, and unmanaged devices. This glossary entry gives […] The post The Zero Trust Security model: A 2026 Guide appeared first on CybelAngel.
Federal agencies are navigating one of the most demanding periods of technology change in recent memory. Cloud adoption, Zero Trust, AI, evolving cyberthreats and rising expectations for digital services are converging as budgets tighten and teams remain lean. Yet modernization is not a one-time initiative or an optional opportunity. It is a continuous cycle of […] The post Modernizing Federal Networks without Compromise appeared first on Infoblox Blog.
The Internet Engineering Task Force (IETF) is the organization where development of the Domain Name System (DNS) protocol takes place. Work takes place within Working Groups that each have a mailing list, and you can see archives on the IETF Datatracker, along with the agenda and presentations from meetings that take place three times a […] The post DNS at IETF 126 appeared first on Infoblox Blog.
Quick AnswersWhat should communications teams look for in a narrative intelligence platform? Communications teams should look for platforms that surface harmful narratives early, show who is amplifying them, and reveal whether public sentiment is organic or part of a coordinated disinformation campaign. How does narrative intelligence help communications teams? Narrative intelligence helps communications teams by […] The post Top Narrative Intelligence Platforms for Communications Teams ap
OpenAI Urges Cyber Defense Against AI Threats OpenAI is calling for a global surge in cyber defense as AI-enabled attacks become more widespread and sophisticated. The call to action raises a practical question for defen
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the initial time of disclosure, the vulnerability had not been assigned a CVE identifier, and PaperCut had not publicly disclosed a CVSS score, vulnerability class, authentication requirements, or the technic
Phishing-as-a-service kits like EvilTokens and Kali365 no longer need a fake login page. See how AiTM proxies and OAuth device code abuse bypass MFA, and what actually stops them.
A company’s own client-facing domain ended up on blocklists, reported by its own security team. Every piece of evidence available said “brand,” and nothing said “owner.” A financial services firm deployed a client-facing tool on a short, memorable domain they had owned for over a year. The page carried their name in the title bar […] The post Whose Domain Is This? appeared first on Allure Security.
A quick probe on the evening of August 26 flagged 62 impersonation threats across social platforms and ad networks. More than a dozen were active scams aimed at her fans and her charities. Dolly Parton died on August 25, 2026. Within hours of the announcement, cybercriminals began running the first fraudulent ads. The pattern is […] The post Dolly Parton’s Death Brought Scammers Within Two Hours appeared first on Allure Security.
Launch is the second stage of the social engineering attack chain: when staged domains, personas, and infrastructure go live. Learn why it's the midpoint, not the start.
TeamPCP Arrests: Two Charged in Australia Over the Supply Chain Campaign That Hit 1,000+ Organizations On 26 August 2026, the Australian Federal Police charged two West Australian men over their alleged roles in a cyberc
Blog Iran-Linked Cyberattack Disrupts UK Power Generation Facility TL;DR / Key Findings Incident: A cyber incident affected a small power generation facility in the United Kingdom in July 2026, with the facility reportedly remaining unavailable for approximately four days. Impact: No consumer outages were reported and the wider UK electricity system was not affected. Attribution: […] The post Iran-Linked Cyberattack Disrupts UK Power Generation Facility appeared first on ThreatMon.
IntroductionDespite modern verification controls, identity theft remains one of the most pervasive threats to both individuals and enterprise organizations. U.S. Federal Trade Commission statistics show over 1 million identity theft reports annually, with related fraud and imposter scams accounting for billions in financial losses each year. While stolen credit cards enable rapid, short-term monetization, Social Security numbers (SSNs) represent a far more permanent and dangerous tier within the
DataDome's hosted MCP server lets AI agents query Trend Reports data directly, in natural language—bringing data insights into the tools your team already uses.
A finance employee in Hong Kong suspected phishing. Then he joined a video call where the CFO and three colleagues were all deepfakes. He authorized $25.6 million in transfers before anyone realized. The employee had good instincts. When an email arrived in January 2024 from someone claiming to be the UK-based chief financial officer of […] The post Whaling Attacks and the Authority Problem appeared first on Allure Security.
A walkthrough of the process of deanonymization By Flare’s Emerging Threats Team For five days in March 2026, a single stolen token let one group poison five software ecosystems including a package downloaded 95 million times a month. The attack started with a misconfigured GitHub Actions workflow, and ended with backdoored code sitting inside CI/CD […] The post Unmasking TeamPCP, King of Software Supply Chain Attacks appeared first on Flare | Identity First Threat Intelligence | Unmatched
Qilin Claims ATF Breach as Agency Confirms "Major Incident" The Qilin Ransomware group listed the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) on its Dark Web leak site on August 26, 2026, the same day the a
One malware campaign, 11,000 compromised devices, two banks with very different outcomes. At the bank with fused defence, fraud succeeded on just 0.027% of compromised devices; nine times less than the market average. Regulators are taking notice too.
Most MDR providers claim compliance readiness. Here's the documentation, certifications, and controls your procurement team should actually verify. The post An MDR Compliance Requirement Guide appeared first on CybelAngel.
From 11 September 2026, CRA reporting obligations require manufacturers to file an early warning within 24 hours of becoming aware that a product is being actively exploited. The regulation measures awareness, not exploitation — and for most organisations, awareness is the part that's not ready.
Executive Summary Key Findings The Investigation Most impersonation work starts with a domain. Somebody registers something a character off from a customer’s name, parks it on hosting with no reputation to lose, and the job is to get it down before enough people find it. That shape is consistent enough that plenty of external threat […] The post 2,700 Malicious URLs, Not One Lookalike Domain appeared first on Bolster AI.
The first in CloudSEK's "Caught in 4K" series, where we pull ransomware operations out of the shadows and show exactly how they work. A misconfigured server opened a window straight into an Aurora ransomware operator's playbook: attacker tools, AI-assisted planning, and a look inside the actual negotiation panel where a victims and the operator settled on payment. In partnership with TRM Labs, we traced that payment on-chain, into a wider laundering network moving money across multiple victims.
By Bill Bradley, Product Marketing Powerful brands elicit a feeling of trust, a promise of service delivered, and an expectation of what you will get. Adversaries take advantage of that powerful connection as a means to collect username and password pairs for account takeover and payment card information for financial fraud. With AI and pre-built […] The post Lookalike Domains are an Identity Problem, Not Just a Domain Problem appeared first on Flare | Identity First Threat Intelligence |
The post Google dorks: the ultimate list of search operators and commands appeared first on ShadowDragon®.
North Korean cyberattacks reveal how trusted identities and workflows create healthcare cybersecurity risk, and how security teams can test them.
Darknet search engine investigations are increasingly used by security teams to monitor claims of newly advertised data leaks across criminal forums and underground marketplaces. One recent example involves an alleged ToledoZoo.org data leak that was posted on the PwnForums cybercrime forum by a user known as “seraphims.” At the time of writing, these claims have […]
CVE volume in 2026 is set to double the 2023 figure, yet only about two percent of published vulnerabilities are ever confirmed exploited. See which CVEs actually mattered this year, and the four filters that replace volume-based triage.
Group-IB Threat Intelligence performed enrichment and APT hunting based on recent public data about the Tortoiseshell APT group, leading to the discovery of new samples sharing similarities with known Tortoiseshell malware and additional operational infrastructure.
Group-IB expone una operación mexicana de PhaaS dirigida a más de 20 instituciones financieras, con capacidades de phishing en tiempo real, vishing con IA y RAT para dispositivos móviles.
Password managers were designed around a simple security model: even if an attacker reaches a server, steals a database, or intercepts encrypted data, strong client-side encryption keeps the stored passwords protected. Modern infostealers attack a different layer of that model by targeting the environment where those secrets become usable. Recent malware increasingly focuses on the […] The post Password Manager Stealers: How Malware Targets 1Password, Bitwarden, LastPass, Dashlane, and Bro
For years, cybersecurity teams have communicated risk through labels such as “High,” “Medium,” and “Low.” Those ratings can help security teams prioritize vulnerabilities, but they often leave CFOs with a more important question unanswered: What does the risk actually mean for the business financially? That question has become harder to ignore as the threat landscape accelerates. Cyble’s 2025 threat predictions, published as the year unfolded, provide a useful illustration. More than 80% of the
Microsoft disclosed that Storm-1175, a financially motivated threat actor linked to China that previously deployed the Medusa ransomware, has shifted to a new ransomware strain called StormEncryptor. The group exploited a vulnerability in the N-central remote monitoring and management tool to deploy StormEncryptor to targeted organizations’ networks. Storm-1175: A Persistent Chinese Ransomware Threat Storm-1175 is […] The post China-Linked Hackers Deploy New StormEncryptor Ransomware
Blog The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 Every year, a large share of breaches starts with an attacker exploiting a vulnerability in software the target is running, and it is now one of the most common ways into a network. What follows depends on where the flaw sits. A vulnerable VPN […] The post The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 appeared first on ThreatMon.
Infostealer credential exposure meets ransomware targeting across Telegram and the dark web. Most targeted attacks don’t begin with a sophisticated zero-day. They begin with a username and a password that an employee doesn’t know has already been stolen. In the Indian pharmaceutical sector, that isn’t a hypothetical, it’s the current state of play. Bolster AI […] The post Two Threat Tracks, One Sector: How the Indian Pharmaceutical Industry Became a Target appeared