Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,047 matching stories — in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
ShinyHunters says it breached Clop's ransomware leak site and holds the keys to its Tor onion service. Here's what that means for every organisation still listed on it.
Dark web search is increasingly relevant to organizations assessing whether stolen information is already circulating among cybercriminals. The September 22, 2026 ShinyHunters claim that it breached FBI systems using an alleged Oracle PeopleSoft zero-day illustrates why defenders need to distinguish attacker claims from verified compromise, while also monitoring for downstream exposure. BleepingComputer reports that ShinyHunters […]
Device code phishing sends victims to a real Microsoft sign-in page, then steals the resulting token. Learn how it works and how to defend against it.
How Infoblox uses its own DNS Forward Proxy to ensure consistent, centralized protection of on-premises DNS traffic across the enterprise What Problem Are We Solving? Organizations often struggle to ensure that DNS queries originating from on-premises environments are consistently routed through security services such as Infoblox Threat Defense™. Without a standardized approach, gaps in coverage […] The post Infoblox on Infoblox: How DNS Forward Proxy (DFP) Gives Us Unified Security and Vi
Berlin Data Leak: What Rhysida Published, and What Is Still Unresolved This post consolidates what has been confirmed by the State of Berlin, what remains the threat actor's own claim, and what the published file listing
ShinyHunters defaced the Clop ransomware gang’s dark web leak site on 18 September 2026, replacing it with a Pokémon and a message reading “THIS SITE HAS BEEN PWN3D BY SHINYHUNTERS”. By the weekend the banner said “DOMAIN SEIZED BY SHINYHUNTERS”. The group told Reuters it now had wide-ranging control of Clop’s infrastructure, summing it up […] The post ShinyHunters: 8 Things We Know About the Group That Hacked Clop appeared first on CybelAngel.
The email contains no malicious URL, no weaponized attachment, and nothing for a security filter to flag. Just a phone number and an invoice for a subscription the recipient never purchased. It arrives looking like a billing issue. An email from what appears to be Norton, or Geek Squad, or PayPal, referencing a charge the […] The post Callback Phishing: The Attack With No Link to Click appeared first on Allure Security.
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures Since 2009, the Democratic People’s Republic of Korea (DPRK) has fully integrated cyber operations into its national strategy, leveraging state-ne
Last week someone clicked an HBO Max ad on Reddit and installed an infostealer on their own machine. The ad ran through Reddit’s real ad system. Attackers had taken over the HBO Max advertising account and used it to push hundreds of legitimate-looking promos, all pointing at a page dressed up as HBO Max that […]
Malicious automated traffic grew 9x in 12 months, and it's moving deeper into customer journeys. Learn more in DataDome's State of Bot & Agent Security Report.
Malicious automated traffic is growing 9x faster than human traffic. See what else the data reveals in the 2026 State of Bot & Agent Security Report.
August 2026: GTA VI Leak, Keyv & Carhartt Breaches August 2026 brought a wide mix of cyber incidents, from large-scale data breaches affecting millions of people to software supply chain attacks targeting developers and
Flare-ups between US intelligence agencies and private-sector defenders have long been a characteristic of the cybersecurity landscape, with the balance swinging between deep collaboration and friction. The goal of CISOs has typically been to get adversaries out of networks as quickly as possible to contain liabilities, while government responders want to remain longer in compromised systems to watch the adversary and gather intelligence. “A CISO will say, ‘Get them out of my network right now,’
The most costly executive impersonation cases rarely begin with anything technically impressive, which is part of why they are so hard to argue about internally. Adaptive Security's analysis of executive impersonation attacks records that in 2024, Arup lost $25 million after attackers used a deepfake of the chief financial officer to convince a finance employee […] The post How to Shut Down Executive Impersonation Across Social Platforms appeared first on Bolster AI.
Learn how phishing takedown services detect, verify and remove fake websites, malicious domains and other online threats impersonating your brand. The post Phishing Takedown Services | How They Work & What to Look For appeared first on Foresiet.
Every security budget meeting this year circles the same question: what’s actually changed, and what’s just vendors selling fear? While teams argue over whether to license Codex or Claude for internal use, the adversary stopped waiting for that decision. The threat actors our legacy risk models were designed to detect, who operate with limited budgets, strict rate limits, and detectable commercial tools, […] The post Your Threat Model Just Got a Free Upgrade: Why Open-Weight AI
A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardware-compatibility program signs the driver, scored zero detections on VirusTotal when researchers
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware. The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek.
Spotted a lookalike domain spoofing your brand? Use this 60-minute response playbook to preserve evidence, assess risk, and start disrupting the infrastructure.
Booking.com phishing pages can borrow more than a travel platform's logo. It can reproduce the sequence of a real booking: the property, the stay, the guest's details, and the final payment step. The domain is different, but the surrounding experience tells the visitor to keep going.
Here is everything that happened last week. 1. Cisco: ISE CVE-2026-76460 CVSS 10.0 authentication bypass under active exploitation The headline: On September 16, 2026, Cisco released emergency patches for CVE-2026-76460, a CVSS 10.0 authentication bypass in Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC). CISA added the vulnerability to the Known Exploited Vulnerabilities […] The post Cyber Roundup: Week of September 14 appeared first on CybelAngel.
Quick Answers DOWNLOAD: Complimentary Gartner Emerging Market Quadrant for Narrative Intelligence A K-pop performer, a minor at the time, accused the head of their record label of harassment. The label removed the performer from their group. The contract binding them to the company stayed in force. Fans of the group responded with a boycott, and […] The post How a K-Pop Controversy Led to Narrative Manipulation appeared first on Blackbird.AI.
Mario Platt spent part of last year eliminating a team. As CISO for online password management service LastPass, he shut down the company’s dedicated vulnerability management function in late 2025, folding its responsibilities directly into IT and product security. AI and business intelligence tools now handle the triage and analysis that once required a standing group of specialists. It’s a concrete example of a trend that’s largely lived in the abstract: security work reorganizing itself aroun
There is a category of closed tickets I have learned to distrust, and it is the brand impersonation case that ends with a confirmed removal and nothing else attached to it. The page is gone, the evidence is archived, the alert queue is one item shorter, and the operation behind that page has lost almost […] The post Why Brand Impersonation Keeps Coming Back After a Takedown appeared first on Bolster AI.
New research shows compromised non-human identity now drives more breaches than phishing. See why service accounts, API keys, and AI agents are the entry point most identity programmes still cannot see.
Dark web search is providing a different view of the latest conflict between two major cybercrime groups after ShinyHunters reportedly compromised and defaced the Clop ransomware operation’s leak site. The incident is unusual because the attacker and target are both established players in the cybercrime ecosystem, turning an extortion model back against the group that […]
Blog 1,067 Victims in 30 Days: Inside August 2026’s Global Ransomware Wave A US federal law enforcement agency. A $10 billion wealth management firm. A children’s school system. A Turkish hospital. In August 2026 alone, ThreatMon tracked 1,067 ransomware victims worldwide and dug into 11 of the most damaging cases by hand. The data provides […] The post 1,067 Victims in 30 Days: Inside August 2026’s Global Ransomware Wave appeared first on ThreatMon.
CloudSEK researchers uncovered GHAPPIER, a previously unreported loader operation spanning at least 65 public repositories, 73 infected files and 22 accounts. The investigation began with a compromised legitimate npm package whose malicious release carried valid provenance through trusted publishing. The report maps the wider infrastructure, links parts of the activity to the PolinRider campaign, and details indicators, attack flow and defensive actions. Authors : Vikas Kundu
Phishing texts pointed at hostnames like revolut.com.93810.app, where the bank's name sits left of the registrable domain. DNS enumeration and wildcard certificate search each found about half the campaign; together they found 37 hostnames, 23 still live, running since July on DDoS-Guard infrastructure. crt.sh has none of the certificates.
By Adrian Cheek, Senior Cybercrime Researcher What Passive DNS Discloses About the Systems Behind the Cameras Automated license plate readers and AI-assisted video surveillance have moved from a handful of pilot deployments to tens of thousands of installations across US towns, business parks and residential streets. Anyone can see the cameras, but the cloud platform […] The post 77% of Flock Safety’s Public DNS Namespace is Development Infrastructure appeared first on Flare | Identi
Scattered Spider keeps turning help desk trust into initial access. See what changed through 2026 and how to harden resets, MFA, and frontline decisions.
QUICK ANSWERS What is the SINET16 Innovator Honoree Innovation Award? SINET selects 16 emerging cybersecurity companies each year after evaluating hundreds of companies worldwide. The program recognizes innovative technologies that address cybersecurity threats, including narrative attacks that Blackbird.AI helps organizations detect and investigate. More than 100 industry experts participate in the judging process. They assess […] The post SINET Awards Blackbird.AI Its Second SINET16 Hono
A live card harvester puts the brand in a subdomain of a domain the attacker already owns, behind a wildcard certificate that never carries the brand into a CT log. Permutation engines, CT monitoring, title search and screenshot comparison each miss it for a different reason.
Continuous Attack Surface Management helps security teams discover unknown assets, identify exposures, and continuously monitor a changing digital attack surface. The post What Is Continuous Attack Surface Management (CASM)? appeared first on Foresiet.
Blog Top API Security Vulnerabilities: Risks and Mitigation Strategies Application Programming Interfaces (APIs) have become a core part of modern digital environments, connecting microservices, mobile applications, cloud infrastructure, and automated workflows. They allow developers to integrate systems more efficiently, reduce development effort, and speed up the delivery of new applications and services. At the same […] The post Top API Security Vulnerabilities: Risks and Mitigation Str
Predictive threat intelligence helps security teams identify emerging risks earlier by combining threat data, attacker behavior, and exposure context. The post What Is Predictive Threat Intelligence? How It Helps Identify Threats Earlier appeared first on Foresiet.
Exploits targeting internet-facing web applications were the leading initial access vector for the sixth consecutive year in 2025, according to Mandiant’s M-Trends 2026 report. Web shells are central to how those exploits are sustained — threat groups deployed them in 35% of incidents in Q4 2024, more than triple the rate of the previous quarter. […] The post Web Shells: How Attackers Use Them and How to Detect Them appeared first on CybelAngel.
An attacker breached a marketing platform and sent phishing emails from a hardware wallet maker's genuine domain to 347,000 subscribers. Every technical control that checks for forgery passed, because nothing was forged.
Dark web scanner intelligence can add useful context to the latest SparroWocky campaign, but it cannot replace endpoint, identity, network, or incident-response controls. ESET reports that the China-aligned espionage group FamousSparrow has used a newly identified C++ backdoor against government organizations in Latin America since at least August 2025. The activity was observed in Argentina, […]
A group we named Bizmakers recently launched dozens of small-business websites. Each one hid a set of credential and one-time-passcode theft pages on innocent-looking subdomains. This story starts with a florist Ivy Glen Florist of Louisville, Kentucky, to be exact. Their site has a home page, an About page, a Bouquets page, a Weddings page, […] The post Bizmakers: Phishing Behind Fake Small Businesses appeared first on Allure Security.