Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
963 matching stories — announcement, in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Threat intelligence is becoming more powerful and more accessible than ever. As the industry evolves, so do the questions surrounding how intelligence should be collected, shared, and used responsibly. That’s why we’ve completed our annual update to Flare Policy on Ethical Use of Threat Intelligence. This policy describes the principles that guide how we collect, […] The post Strengthening Our Commitment to Responsible Threat Intelligence appeared first on Flare | Identity First Threat Int
K-12 and higher education institutions face constant cyberattacks due to limited IT resources. Here are five cybersecurity priorities they should act on now to reduce risk. The post Five cybersecurity priorities every school needs to get right appeared first on Kaseya.
This blog is part of a series of Blackbird.AI RAV3N Research posts about manipulated narratives impacting the 2026 World Cup. Read more: Quick Answers DOWNLOAD: Complimentary Gartner Emerging Market Quadrant for Narrative Intelligence Months before the tournament began, one nation’s football team gave the net ticket revenue from a qualifying match to humanitarian relief. The […] The post How Generosity Became one of the Biggest Stories of the World Cup’s Final Weeks appeared fi
GoDaddy recently launched the Agent Name Service registry (the ANS), which provides a directory of registered AI agents. Other registries such as GLAMA, Smithery, and the MCP registry (a list of servers providing interfaces for AI agents) have already been providing directories for agent discovery. And at least 2 proposals for DNS-based agent name registration […]
Cyberthreat Intelligence is not a feed bolted on the side, it is the operational impetus behind strengthened security. And that change in role has earned the market its first dedicated industry evaluation.
AI assistants are becoming a new path to phishing sites, fake stores, and brand impersonation scams. As consumers rely on AI for shopping advice and trusted links, a phishing site can reach a potential victim through an AI-generated recommendation before a brand even knows the threat exists. A phishing site is a fraudulent website designed […] The post The Next Phishing Site May Be Recommended by AI appeared first on BrandShield.
A single compromised support platform can expose far more than internal IT systems—it can put sensitive tax documents, financial records, and client information into the hands of cybercriminals. Once attackers obtain these files, organizations face the possibility of ransomware, account takeover, identity fraud, regulatory penalties, and significant financial losses. 🚨 The recent reports involving the […]
Group-IB uncovers HOLLOWGRAPH, a Windows malware that abuses Microsoft Graph API to exfiltrate files and receive commands from the attacker using Microsoft 365 calendar events, and DNS tunneling to refresh credentials used in C2 communication.
Looking for account takeover prevention methods? Discover the steps to preventing all levels of ATO fraud, how to detect attacks, & how to mitigate risks.
A guest books a real hotel on a real platform, and two days before check-in gets a message through the platform's own chat: the card needs re-verifying, click here to keep the reservation. The message is genuine in every technical sense. It comes from the hotel's real account, quotes the real booking, and lands exactly when a real payment-confirmation message would. The only fake thing is the link. Attackers compromise the hotel's account (usually with a ClickFix fake-CAPTCHA lure that installs
Summary: Genetic testing company 23andMe has agreed to pay $18 million to settle litigation stemming from its 2023 data breach, one of the most significant privacy incidents involving consumer DNA services. The settlement highlights the growing risks associated with credential-based attacks, sensitive personal information exposure, and the long-term consequences of compromised genetic data. 🛡️ As […]
WIRTE is a Hamas-linked cyber espionage group that leverages phishing, PowerShell malware, and cloud-based command-and-control infrastructure to conduct long-term intelligence operations across the Middle East.
Phishing in 2026 is bigger, faster, and much harder to catch, and the second-quarter data confirms it. The APWG recorded 1,069,681 phishing attacks in Q2 2026, up 10.1% on Q1, and June's 425,808 was its highest monthly count since April 2023. Microsoft detected about 7.6 billion email-based phishing threats in Q2, down from 8.3 billion in Q1 after it disrupted the Tycoon2FA phishing service. Credential theft is still the point of almost every campaign (94–96% of Microsoft's payload attacks in ea
Most security teams still prioritize vulnerabilities using CVSS alone—but attackers don't. Learn why combining CVSS, EPSS, CISA KEV, and threat intelligence provides a smarter, risk-based approach to vulnerability prioritization.
Can PII be removed from the dark web? Not the same way it comes off a public data broker site. When an executive’s home address shows up on a people-finder site, you submit an opt-out, the listing comes down, and you monitor for its return. The dark web doesn’t offer anything like this. It’s decentralized […]
Cybercriminals are constantly adapting their techniques to bypass traditional security controls, making dark web monitoring an essential component of modern cyber defense. Rather than attacking passwords directly, sophisticated threat groups increasingly target authentication workflows, trusted applications, and identity platforms to gain persistent access to valuable corporate data. One of the latest examples involves the notorious […]
EU exposes Russia-linked cyber campaign targeting member states as Australia warns of widespread attacks on content management systems. The post The week in breach news appeared first on Kaseya.
PhishEye analysed a live SharePoint credential-phishing chain built on Cloudflare Workers. A Cloudflare-fronted lure (turnervault[.]net) impersonates SharePoint Online with a targeted "shared document" and a fake "I'm not a robot" check. The checkbox runs a one-line atob() redirect to a *.workers.dev second stage that is a cloaked JavaScript loader: it shows "Preparing your secure document…", polls a /lp/ endpoint, and only renders the credential form for a valid victim session, looping forever
Every Acquisition Inherits More Than Assets When organizations evaluate an acquisition, they invest significant time validating the target company’s financial health, legal obligations, operational maturity, and growth potential. They examine: Revenue and profitability Customer contracts Intellectual property Regulatory compliance Technology infrastructure Outstanding liabilities Increasingly, cybersecurity has become another critical workstream during due diligence. However, many […
See how JADEPFUFFER executed the first documented LLM ransomware attack, and how organizations can reduce the risk of machine-speed attacks. The post JADEPUFFER: How an Agentic Ransomware Attack Unfolded appeared first on Outpost24.
Tomorrowland 2026 sold out fast, and scammers moved faster. CloudSEK uncovered a dozen fake ticket shops and travel sites mimicking the festival, complete with countdown timers and fake "biometric checks." Some sites harvest identity data and payments; others quietly earn commissions. Read the full breakdown of how each scam works. Authors : Shobhit Mishra
BrandShield Resolve is now available on AWS Marketplace, giving security teams a faster way to deploy domain and phishing protection inside their existing AWS environment. Here's what that means for procurement, deployment, and response. The post BrandShield Listed on AWS Marketplace appeared first on BrandShield.
AI has made phishing sites faster and cheaper to create than ever before, driving a surge in brand impersonation attacks. Discover how security teams can detect and remove AI-generated phishing sites before they reach customers. The post AI Phishing Sites: How Scammers Clone Brands in Minutes (2026) appeared first on BrandShield.
The market for data broker removal runs the full range, from free do-it-yourself opt-out guides to consumer subscriptions like DeleteMe to enterprise platforms built for corporate security teams. For an individual cleaning up their own digital footprint, almost any of these can help. For a security team responsible for protecting executives, their families, and a […]
The dark web is no longer just a marketplace for stolen credentials; it has grown far beyond that point and now affects nearly every phase of the cyberattack lifecycle. Markets that once traded only compromised accounts now also sell ransomware services, initial network access, exploit kits, phishing infrastructure, and even AI-powered attack tools. What used to be a place for selling stolen data has become the operational backbone of modern cybercrime. The first half of 2026 alone is indicative
Enhanced platform brings continuous attack surface visibility, expert-led testing, flexible budget control and improved reporting into one risk-led AppSec program. The post Outpost24 Raises the Bar for Adaptive Application Security with Next-Gen CyberFlex appeared first on Outpost24.
Cyber Insurance Has Changed Not long ago, obtaining cyber insurance was a relatively straightforward process. Organizations completed an application, answered questions about their security controls, and received coverage. Today, the process looks very different. Cyberattacks have become more frequent, more sophisticated, and more costly. In response, cyber insurance providers have tightened underwriting standards, increased scrutiny, […]
117 domains were registered exploiting the Fable 5 and Mythos 5 ban – targeting Claude, Fable, and Mythos brands via phishing, crypto scams, and fake legal recruitment. See BforeAI's full threat breakdown.
IBM’s 2025 Cost of a Data Breach Report found that 97% of organizations that experienced an artificial intelligence (AI)-related security incident lacked proper access controls on AI systems. The same report highlighted that 63% of organizations lacked governance policies to manage AI or prevent shadow AI. Despite those statistics, AI is now deeply embedded in […] The post 5 Biggest Challenges of AI in Cybersecurity appeared first on Outpost24.
Dive into Part II of the Fake Tax Notice Campaign analysis. Learn how Silver Fox uses a signed app to deploy fileless ValleyRAT malware with full IoCs. The post Behind the Fake Tax Notice — Part II: ValleyRAT Unmasked appeared first on Foresiet.
A deep dive into the multi-country phishing network targeting Indian taxpayers with fake tax notices. Learn how the scam operates and how to stay safe. The post Fake Tax Notice Phishing: How the Cross-Border Scam Network Operates appeared first on Foresiet.
