Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,047 matching stories — in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Compare the top dark web monitoring solutions in India for 2026 and evaluate their credential monitoring, threat intelligence, dark web coverage and enterprise capabilities. The post Top 7 Dark Web Monitoring Solutions in India (2026) appeared first on Foresiet.
Dark web monitoring is one part of the broader threat-intelligence picture security teams can use to understand how vulnerabilities, exposed credentials, and attack-related information may move through external ecosystems. That visibility is becoming more relevant as Google pauses submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after a significant increase in automated, […]
South Korea bank data breaches have become a high-profile test of how financial institutions should respond when artificial intelligence may be involved in cyberattacks. On October 6, 2026, President Lee Jae Myung said signs had emerged that AI models were used in some recent attacks against banks, while authorities continued investigating breaches of customer information. […]
AI can manipulate hiring screeners and impersonate recruiters. Learn how to verify applicants, protect candidates, and close the gaps in your hiring flow.
One in four fraud victims who lost money say it involved a gift card. The scam doesn’t just cost the victim. It costs every brand whose name was used to make it work. A customer walks into a Target store and buys $2,500 in gift cards. She has been on the phone with someone who […] The post Gift Card Scams and the Brands That Pay the Price appeared first on Allure Security.
The post 12 best OSINT username lookup tools for investigators appeared first on ShadowDragon®.
Investigate SOCRadar Alarms Where Your Analysts Already Work, with SOCRadar and Elastic Your SOC runs on Elastic. Detections, logs, cases and dashboards all live in Kibana, and your analysts have built their muscle memory around it. Then an impersonating domain, a leaked credential or a newly exposed asset shows up in a different console, and […]
By Assaf Morag, Cybersecurity Researcher ClickFix campaigns have become one of the most effective ways to turn a browser session into code execution. The technique is simple: show the victim a fake verification page, place a command on the clipboard, and convince them to paste it into the Windows Run dialog. CrocoRat, a previously undocumented […] The post CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery appeared first on Flare | Identity First Threat Intelligence | Unmatche
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure SOCRadar's Threat Research Unit (STRU) has documented CyberXero , a Russian-speaking, financially motivated Initial Access Brok
As organizations deploy autonomous AI agents, security teams face a significant shift as non-human non-human entities making decisions, invoking tools, and delegating tasks to other agents without human intervention. Security architectures built around human users, static APIs, and distinct endpoints break down when AI agents dynamically collaborate across an environment. As these interactions become more common, securing agent-to-agent communication without blocking adoption will require securi
CVE-2026-88779: Citrix NetScaler Zero-Day Citrix has patched CVE-2026-88779, a high-severity NetScaler vulnerability that was exploited as a zero-day before fixes became available. The memory overflow affects customer-ma
The Brandefense Ransomware Trends Report Q3 2026 analyzes 2,898 confirmed ransomware incidents across 109 active threat groups, covering top operators, sector and country targeting, MITRE ATT&CK techniques, and Q4 forecasts.
DataDome's Agent Trust is named to Fast Company's Next Big Things in Tech, giving businesses real-time control over AI agents by assessing intent, not just identity.
Stop threats before compromise for every customer you serve. Enhanced multi-tenancy for Infoblox Threat Defense™ helps MSSPs deliver stronger, more scalable protection across every customer environment. Count the tenants your security operations center (SOC) carried this time last year. Then count them today. For most managed security service providers (MSSPs), the second number is meaningfully […] The post Deliver Preemptive Security at Scale: Protective DNS for MSSPs appeared first on In
Cyberattaque DGFiP : l’incident révélé en août 2026 a conduit à la consultation et à l’extraction de données concernant 678 000 particuliers et professionnels. Selon la Direction générale des Finances publiques, les accès illégitimes reposaient sur l’usurpation d’identifiants appartenant à un agent de la DGFiP et à un tiers habilité. Les espaces personnels des usagers […]
Understanding what a malware sample does and being able to detect it are two different jobs, and the second one needs a skill many teams are short of. The Group-IB Malware Detonation Platform now produces indicators, Sigma rules, and hunting queries from the behavior it observes.
Every vendor on your shortlist will show you a map. Domains, social accounts, paid ads, app stores, the dark web, a row of icons all lit green. Coverage demos well because a list is easy to lengthen. The post Doppel alternatives, judged on what happens after detection appeared first on Bolster AI.
Affiliate marketing is designed to help brands reach new audiences through publishers and partners who promote their products or services in exchange for commissions. But the model can be abused […]
Compare 7 email security platforms in 2026 on detection, auditable investigation, and response that reaches past the inbox — not just inbox catch rate.
Compare the top 7 security awareness training vendors for 2026, from multi-channel simulation to compliance platforms. Find the right fit for your team.
Quick Answers How does narrative intelligence support risk intelligence teams? Narrative intelligence adds context around the people, networks, and behaviors driving threats, helping teams identify coordinated activity, bot-like amplification, and how narratives are spreading. What signals can help risk teams identify escalation early? Exposed PII, doxxing, increased executive mentions, coordinated amplification, and sudden shifts in […] The post Blackbird.AI at the AIRIP Global Intelligen
CDN bot management can't keep up with AI agents. See why layering a specialist bot and agent trust solution is the new enterprise security default.
The post The best OSINT browser extensions: 10 tools every investigator should know appeared first on ShadowDragon®.
Here are the main stories you missed last week. 1. Cisco: Catalyst SD-WAN Manager CVE-2026-76504 marks the eighth CISA KEV listing for the product this year The headline: On October 1, 2026, CISA added CVE-2026-76504 to the Known Exploited Vulnerabilities catalog following Cisco’s confirmation of active exploitation. The flaw is a CVSS 9.8 hex encoding […] The post Cyber Roundup: Week of September 28 appeared first on CybelAngel.
Brazil voted on October 4 and will vote again on October 25. These are five cybersecurity threats companies with operations, partners, or suppliers in the country should be monitoring between now and the second round, and well beyond. Our data shows a 135% increase in the volume of claimed attacks targeting Brazilian entities between January […] The post 5 Cyber Threats to Watch as Brazil Heads to the Polls appeared first on CybelAngel.
A company appears for sale on an underground forum. An employee password turns up in an old breach. A fresh infostealer log contains a corporate login and an active browser session. Someone posts a ransomware claim naming the company. All four are external exposure signals. But they are not the same kind of threat, and […] The post Dark Web Monitoring vs. Compromised Credential Monitoring: What Each Finds and What Each Misses appeared first on Lunar Cyber.
A counterfeit listing feels like a marketplace problem, so it gets a marketplace vendor. That instinct is why most Red Points shortlists compare the wrong things. The post Red Points competitors and alternatives in 2026 appeared first on Bolster AI.
Compare the best anti-phishing software for enterprises in 2026 and see how leading platforms handle phishing detection, fake domains, email threats, brand impersonation and takedowns. The post 6 Best Anti-Phishing Software for Enterprises in 2026 appeared first on Foresiet.
A Russian-speaking Gentlemen ransomware affiliate called Azazel robbed two dozen victims across six countries, then double-crossed his own gang by publishing the loot on a private leak site and pocketing every dollar. CloudSEK traced 50TB of exposed infrastructure and a live AI-driven attack chain. Read how "Caught in 4K" cracked the operation. Authors : CloudSEK TRIAD
A Facebook post says your bank is giving away free smartwatches: answer a few questions and pick your colour. The page looks right, with the bank's logo, the right Arabic typography, a watch picker and a short order form. It asks for your name and national ID number, then your online-banking login, then a one-time code. The current version never asks for a payment, which removes the usual warning sign.
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.
Passwords are no longer the only credentials security teams need to worry about after an endpoint is compromised. API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can provide direct access to infrastructure, repositories, SaaS applications and AI platforms. Many of these credentials have their own lifecycle, which means resetting an employee […] The post NIST IR 8587: Token Security Is Now a Non-Human Identity Problem appeared first on Lu
What does nine months of unauthorized access to a Pentagon personnel database look like? Approximately 3.05 million unencrypted records containing Social Security numbers, military service details, and personal identifiers, sitting on a file-sharing system that “a small number of unauthorized users” had every one of those nine months to themselves before anyone noticed. Here is […] The post The Pentagon’s DMDC Breach: 7 Things Security Teams Need to Know appeared first on
OverviewRapid7 tracked a set of Linux samples that blend into the software and device conventions of the telecom environments they target. The set spans a newly observed BPFDoor variant, a BPF Rekoobe build seen against South Korean targets, a dropper, and six builds of a Linux implant we track as AVERAT, deployed against Taiwanese appliances. Additionally, we provide source code details of the Rapid7 BPFDoor controller introduced in our April 2026 blog, Stealthy BPFDoor Variants are a Needle Th
Blog The NetScaler Zero-Day Siege and Pre-Auth RCE Chains: Technical Analysis and Exposure Assessment On September 27, 2026, Citrix published bulletin CTX697096 with eight NetScaler ADC and Gateway vulnerabilities. Two of them, CVE-2026-88771 and CVE-2026-88772, were already being exploited before fixed builds existed. Both give remote code execution to an unauthenticated attacker. CISA added both […] The post The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Ex
A GitLab incoming email token published in a README never expires and works at account level. Learn how the attack path works, how to reset the token, and how to audit your repositories.
Two vendors will show you the same dashboard this quarter. Both will fill it with domains, both will call the contents the risk outside your firewall, and both will book the meeting with the same person on your team. Run them side by side against one company, and the findings barely overlap. The post Digital risk protection vs external attack surface management appeared first on Bolster AI.