Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
963 matching stories — announcement, in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Phishing in 2026 is not an email problem with a removal step bolted on; it is a fast-rotating brand-abuse operation. Generative AI has removed the spelling-mistake tells, QR codes carry attacks off the managed desktop onto unmanaged phones, and phishing-as-a-service lets an operator replace a suspended domain in minutes. A program built only on "find it, report it, wait" loses that race by design. This is the operating model that replaces it: continuous discovery, containment before removal, inf
Man-in-the-middle attacks have been a networking concept for decades. The modern version, adversary-in-the-middle phishing, does not intercept traffic on a wire. It sits between the victim and a real login page, captures the session token after MFA completes, and the whole thing starts with a page that looks exactly like a brand the victim trusts. […] The post How Man-in-the-Middle Attacks Evolved to Bypass MFA appeared first on Allure Security.
ThreatMon ThreatMon is proud to announce that it has achieved STAR for AI Level 1 from the Cloud Security Alliance (CSA), marking another milestone in the company’s approach to AI governance, transparency, and trusted AI-driven cybersecurity. The STAR for AI program extends the Cloud Security Alliance’s globally recognized Security, Trust, Assurance and Risk (STAR) framework […] The post ThreatMon Earns CSA STAR for AI Level 1, Reinforcing Its Commitment to AI Governance appear
Analysis of the July 2026 ransomware attack landscape reveals a persistent and diverse threat, with 9 significant victim companies impacted across global operations and 6 distinct ransomware groups actively exploiting vulnerabilities. The post Ransomware 2026 Report July appeared first on ThreatMon.
CloudSEK's research on the LiteLLM supply chain attack, the largest AI supply chain breach of 2026, names the organizations potentially exposed: 2,500+ companies and 434,000 CI/CD pipelines worldwide. The LiteLLM breach began with a compromised Trivy build and cascaded through PyPI into automated CI/CD pipelines, putting cloud credentials, source code repositories, Kubernetes environments and AI infrastructure at risk. Check whether your domain appears in the exposure dataset. Authors :
We started with six domains and a simple question: are these the same thing? They didn’t look like it. Three were selling boots, three were selling sleepwear, and one rendered in German. One had prices two orders of magnitude too high. Two didn’t carry a brand name in the hostname at all. Sixteen characters answered […] The post One Kit, Two Industries: Inside a Fake Shop Platform appeared first on Bolster AI.
The SSO enrollment phishing kit hosts no branded content of its own. It asks Microsoft for your organization's genuine tenant branding at the moment a victim types their address, so every Microsoft 365 tenant with custom branding is a target at no extra cost to the attacker. Nothing brand-specific reaches a certificate log, and the same page broadcasts every credential it steals to everyone who loads it.
We’ve released a new set of features for Lunar Essential, giving security teams more ways to investigate incidents, automate response, and connect Lunar to the tools they already use. Just as importantly, Lunar is built to be easy to adopt. It’s a self-service solution: you can start with the Community tier, see the threats Lunar […] The post Lunar Essential Adds New Incident Response, Automation, and Integration Capabilities appeared first on Lunar Cyber.
Critical Metabase Zero-Day Exploited Metabase has disclosed a critical zero-day SQL injection (SQLi) vulnerability that can allow unauthenticated attackers to gain administrator access to vulnerable instances. The flaw i
Steam Customer Data Exposed in CEVA Logistics Cyberattack A cyberattack on CEVA Logistics, the company that distributes Steam hardware in Europe, may have exposed delivery and order information belonging to some Steam cu
Ransomware stopped being an isolated incident type in 2025. It became the dominant force behind the modern breach landscape, and the ransomware data breach statistics from Cyble's own tracking make the shift impossible to ignore. For organizations facing this growing threat, having a ransomware incident response plan in place is becoming just as important as preventing an attack in the first place. Cyble's Global Cybersecurity Report 2025 documented 5,967 ransomware attacks for the year, a 50% y
Quick Answers A Western proposal of a site in Kenya where Ebola-exposed citizens in African nations could be observed and treated instead of being flown home led to a series of false and manipulated narratives.  Blackbird.AI’s RAV3N Research Team monitored manipulated claims over six months and across multiple platforms, from social media platforms to news […] The post How a Foreign Malign Influence Campaign About Ebola in Kenya Became a Narrative Weapon Targeting the West appea
Here are the main stories you missed last week. 1. N-able: A “god mode” authentication bypass in N-central gave attackers administrative control of every endpoint an MSP manages The headline: N-able disclosed active exploitation of CVE-2026-18577 on August 2, an authentication bypass vulnerability in N-central that allows any unauthenticated attacker to gain full administrative access […] The post Cyber Roundup — Week of August 3rd appeared first on CybelAngel.
Somewhere on the open web today, a real financial adviser is being impersonated. She has 26 years in the industry, a clean regulatory record, a real FINRA CRD number, and a real employer. All of that information is currently being used on a website she does not own, to defraud people she has never met. […]
Cl0p-linked hackers are exploiting PTC Windchill & FlexPLM (CVE-2026-12569). See Foresiet's analysis of 42 leaked victim listings and key defenses. The post Cl0p-Linked Activity Targets PTC Windchill and FlexPLM in Data Theft Campaign appeared first on Foresiet.
A single unauthenticated request can turn a business intelligence platform into a gateway for data theft, credential compromise, and potentially ransomware. That is the risk enterprises now face following the exploitation of a critical Metabase zero-day that can give remote attackers administrator access without requiring valid credentials. ⚠️ Metabase has confirmed that its cloud environment […]
Brazil Fiscal Leak, US Fullz, Telecom Access, Endesa IBANs, and Mexico Fortinet Access SOCRadar Dark Web Team identified several new underground posts involving alleged large-scale data exposure and initial access sales.
Governing the Identities Behind Artificial Intelligence Artificial Intelligence (AI) governance has a dangerous blind spot. Organizations generally govern models, data, use cases, and outputs, and pursue regulatory obligations. Yet many fail to govern the identities that create, train, authorize, modify, deploy, and operate those systems. That gap matters because AI systems hardly ever exist in […]
AI phishing scams are becoming easier to create because vibe coding lets almost anyone build convincing fake websites, login pages, landing pages, and forms with natural-language prompts. Scammers can now clone brand experiences faster, launch more phishing pages, and relaunch campaigns quickly after takedowns. Vibe coding has changed who can build on the internet. Not […] The post Vibe coding just gave every scammer a web dev; Here’s the new AI phishing scams appeared first on Brand
Most of the discussion around EtherRAT and EtherHiding starts with takedown resistance. That makes sense. A domain registrar can suspend a domain, a hosting provider can terminate a server, and a platform can remove an account. An Ethereum smart contract lives inside a very different system. Once malware knows the contract address, it can keep […] The post Telegram Keeps the Customers. Blockchain Takes the Control Plane. appeared first on Lunar Cyber.
During a routine UK cyber evaluation, an AI agent researched real people, created fake identities, and pressured a human maintainer into approving malicious code. Nobody told it to. On July 28, 2026, an AI agent being evaluated by the UK AI Security Institute did something that had been theorized for years but never documented in […] The post The AISI Incident: AI’s First Impersonation Campaign appeared first on Allure Security.
Blog Understanding The Agentic Crime Ecosystem Artificial intelligence is changing cybersecurity in more ways than one. While organizations continue adopting AI assistants to improve productivity, attackers are beginning to use the same technologies to automate reconnaissance, exploit vulnerabilities, and adapt during live operations. The shift is significant because AI is no longer limited to generating […] The post Understanding The Agentic Crime Ecosystem appeared first on ThreatMon.
By Assaf Morag, Cybersecurity Researcher What if the tool you use to run your criminal infrastructure is itself criminal infrastructure, and you are the target? FirewallFalcon Manager is presented as a free open-source Linux server management tool for VPN and proxy services. But, beneath the well-polished GitHub repo and feature-rich shell menus lies a multi-layered […] The post FirewallFalcon Manager: Supply-Chain Backdoors in Underground VPN Infrastructure appeared first on Flare | Ident
Quick Answers How does AI-generated content create narrative risk for real estate organizations and rental platforms? AI makes it easier to create and distribute convincing fake listings, fabricated reviews, and deepfakes of agents and buyers at scale. As that content spreads, it can reinforce damaging perceptions and amplify narratives that an organization does not verify […] The post How AI-Generated Content and Deepfakes Are Creating Narrative Risk for Real Estate and Rental Platforms a
Microsoft has evolved far beyond productivity software. Today, it powers nearly every aspect of modern business — from collaboration and The post Microsoft security challenges: How to protect your business, data and identity appeared first on Kaseya.
Black Hat 2026 key takeaways: Learn how AI deception, multi-channel attacks, and agentic infrastructure disruption are reshaping social engineering defense.
XSS2Shell (CVE-2026-64638) is a critical pre-authentication XSS vulnerability affecting WordPress login pages. This technical analysis explains the five-stage exploitation chain, the conditions required for RCE, mitigation guidance, and why discovering every exposed WordPress instance is essential.
Europe faced a ransomware onslaught in the first half of 2026 that sets a troubling precedent for the remainder of the year. According to Cyble Research and Intelligence Labs (CRIL), the region experienced 866 documented ransomware attacks, 51 confirmed data breach incidents, and 7 initial access sales between January and June 2026. These figures represent not just a volume problem, but a fundamental shift in how threat actors are organizing, targeting, and monetizing their operations within Eur
Artificial intelligence has become a critical business tool, but cybercriminals are finding new ways to exploit the growing demand. A recently uncovered operation shows attackers abusing cloud startup credit programs to obtain free access to premium AI services, including Claude and Gemini, before reselling that access through underground marketplaces. The campaign demonstrates how legitimate cloud […]
► Most cybersecurity threats evolve over time, but few have adapted as successfully as phishing. What began as simple online scams in the 1990s has become one of the most […]
Today, we officially welcome Kentik to Infoblox, and what stood out to me well before the deal closed was how clearly our teams aligned on the problems that matter most. Both companies built their businesses around helping customers solve complex infrastructure and security challenges at scale. Just as important, we share a commitment to technical […] The post Welcoming Kentik: Closing the Gap with Network Truth, Opening the Door to Agentic Operations appeared first on Infoblox Blog.
Firms are facing an epidemic of VIP impersonation and social engineering. Learn why fraud warning banners and pop-ups aren't enough, and how to protect your brand.
Branded gambling scams use a trusted company’s name, logo, colors, or app identity to drive users toward online casinos. Fraudsters often earn affiliate commissions for each sign-up or deposit, while the impersonated brand is left with reputational damage, customer confusion, and potential compliance risk. Somewhere online, your brand may be advertising an online casino you […] The post Branded gambling scams: how your logo ends up selling online casinos appeared first on BrandShield.
Thirty metrics CISOs are commonly advised to track, and a harder question underneath all of them: which ones have ever actually changed a decision. “If you have to forecast, forecast often.”Edgar Fiedler Most cybersecurity metrics programs grow by addition. A new framework arrives, a board member asks a pointed question, an audit flags a gap, […] The post The 30 Best Cybersecurity Metrics to Track appeared first on CybelAngel.
