Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,047 matching stories — in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Learn how the FalconFlank proof of concept claims to exploit CrowdStrike Falcon, its risks, indicators, vendor response, and defensive actions. The post Falcon Flank: Public Privilege-Escalation Claim Against CrowdStrike Falcon appeared first on Foresiet.
What does it take to get arbitrary command execution on an enterprise VPN gateway that thousands of organizations use to protect everything behind it? This week, the answer was two bugs, no credentials, and no user interaction. On September 1, 2026, SonicWall published advisory SNWLID-2026-0016, disclosing two vulnerabilities in its SMA1000 secure remote access appliances […] The post SonicWall SMA1000: 7 Things Security Teams Need to Know appeared first on CybelAngel.
Fusion is a capability you mature into, not a team you hire. Here is the honest maturity path, the metrics that fund it, and the on-ramp that costs no headcount, startable this quarter.
Dark web alerts can help security teams identify whether stolen information from a newly disclosed breach begins circulating among criminal communities. Manchester Airports Group (MAG), which operates Manchester, London Stansted, and East Midlands airports, confirmed on August 27, 2026, that an unauthorised third party obtained customer data connected to airport services. The incident has since […]
Stop measuring security by hours saved. Learn how to reframe cybersecurity as an economic war by measuring the adversary capital destruction rate.
Quick Answers Grand Theft Auto 6 is not a normal product launch. The video game is a global media event with the pressure of a film franchise release, the economics of a platform business, and the emotional volatility of a fan culture that has waited more than a decade for the next release. Rockstar Games […] The post The Top Grand Theft Auto 6 Disinformation Narratives appeared first on Blackbird.AI.
A LinkedIn post about a fake Claude download page sparked a debate: was the attack hosted on the real domain or a fake one? The answer, confirmed by five months of research, is both. And neither version leaves the user with a reliable signal. On August 28, a security engineer named Mikalai Mikhailau published a […] The post “Check the Domain” Is No Longer Advice appeared first on Allure Security.
Supply chain attacks in 2026 are no longer an edge-case risk buried in a vendor questionnaire — they are a primary breach vector that regulators, incident responders, and CISOs now treat as a first-order threat. Verizon's 2026 Data Breach Investigations Report found third-party involvement in 48% of breaches, up 60% year over year, following the 2025 edition, which already recorded a jump from 15% to 30%. Every vendor integration, every open-source dependency, and every managed file transfer too
When a machine gets infected by an infostealer like LummaC2 or Vidar, the malware leaves behind a specific set of output folders. Most threat actors focus on the easy, structured targets: browser cookies, saved passwords pulled from SQLite databases, and crypto wallet extensions. Passwords live in predictable places on an operating system, making them simple […] The post The Token Haystack: Parsing and Verifying Exposed Tokens in Stealer Logs appeared first on Lunar Cyber.
This blog provides a deep-dive into the phishing kit created by Chenlun known as the Outsider Phishing Kit. It is a well established kit in the Chinese community with over 267 ready-made phishing templates targeting over 54 countries worldwide.
Annual vendor audits produce a snapshot; vendor risk is a movie. See why the 364 days between formal assessments is where 48% of third-party breaches actually happen, and how continuous vendor monitoring closes that gap for DORA and NIS2 compliance.
Executive Summary Key Findings 1. The order counters are a publication schedule, not a transaction feed. All 27 changes we recorded landed inside the 00:00 to 06:00 UTC window, exactly once per vendor per day. Across 92 observed daytime intervals, nothing moved at all. Treating these numbers as live trade volume measures a cron job. […] The post Inside a Dark Web Counterfeit Currency Operation appeared first on Bolster AI.
Today, SpecterOps released a new open-source skills marketplace for offensive security research and red team operations. We are proud to have collaborated on this project over the last few weeks and hope more teams will join now that it’s public. The initial release includes plugins for Fortra’s Cobalt Strike and Outflank C2. Get started here: https://github.com/SpecterOps/skills Background I recently reached out to a few red teams we’ve worked with before to discuss developing a public AI
OverviewOn September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution (RCE) on affected appliances.CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. The flaw has a CVSS v3.1 base score
Blog Berlin Government Allegedly Hit by Rhysida Ransomware: 5.79 TB of Data Claimed Stolen TL;DR / Key Findings Threat Actor: Rhysida ransomware group Target Platform/Sector: Public sector and administrative infrastructure of the Berlin State Government Activity Window: August 28, 2026 Alleged Victims & Records: Berlin State Administration (~1.44 million files scanned and classified) Total Disclosed […] The post Berlin Government Allegedly Hit by Rhysida Ransomware appeared first on Th
Threat feeds rely on domain age, but attackers let lookalikes sit dormant for months. Learn how attackers game threat feeds and how state-change monitoring stops them.
Synthetic identity fraud accounts for 80% of new account fraud in the US. Losses reached $2.94 billion in 2025. The reason it grows unchecked is that the person being impersonated often doesn’t exist. In 2023, a federal investigation in Suffolk County, New York, unraveled a fraud ring that had created more than 20 identities and […] The post Synthetic Identity Fraud and the No-Victim Problem appeared first on Allure Security.
By Adrian Cheek, Senior Cybercrime Researcher On August 22, 2026, The Telegraph reported that a small UK power generator had been shut down for four days in July following a cyberattack by hackers linked to Iran. The government confirmed that a small-scale energy generator was affected, said the wider energy system was never at risk, […] The post 427 or 4 Devices?: Measuring Internet-Exposed Industrial Infrastructure in the UK appeared first on Flare | Identity First Threat Intelligence |
Executive travel security is the practice of protecting a named leader in transit across both digital and physical risk, from device and credential compromise to surveillance, theft, and physical harm, before, during, and after each trip. It is one part of a broader corporate travel security program. Here, we’ll focus on the executive layer. An […]
Learn when brand imitation becomes brand impersonation, how AI is changing identity abuse, and what security and brand teams should monitor in 2026. The post When Does Brand Imitation Become Impersonation? appeared first on BrandShield.
Darknet Search Engine intelligence can provide an additional layer of visibility when a major cyber incident affects a critical medical-device manufacturer. Boston Scientific identified a cybersecurity incident on August 25, 2026, that disrupted certain information systems and business applications supporting manufacturing, order processing, and product shipments. The company is investigating the incident with third-party cybersecurity […]
Modern attacks reach targets via SMS, LinkedIn, and voice calls, not just email. Explore Contact, the third stage of the social engineering attack chain.
The $100 million MGM Resorts shutdown began with a phone call. No malware. No exploit. Just a convincing story told to the right person. On September 10, 2023, someone called the IT helpdesk at MGM Resorts International. The caller identified themselves as an employee, referenced details consistent with the employee’s profile on LinkedIn, and asked […] The post Pretexting: The Attack That Starts With a Story appeared first on Allure Security.
The best executive protection companies do more than place guards at the door. They fuse digital threat intelligence, impersonation and PII monitoring, physical security alerting, and rapid takedowns into one program that protects a named leader across both worlds. And the stakes keep rising. Executive security budgets grew 118.9% from 2021 to 2024, and 72% […]
A ransomware disclosure and a credential package we track from an entirely separate source, read side by side, illustrate a pattern our research team sees again and again: the quiet theft of a single login can be the first domino in a breach that ends, months later, on a dark web leak site. Reading time […]
By Adrian Cheek, Senior Cybercrime Researcher Ask an internet-wide scanning index how many satellite mission-control systems are exposed and you can get the answer 1,776. All but 18 of those results turn out to be the same static web page, replicated across cloud edge nodes in every region on earth. The productive question asks which […] The post Finding the Fleet: What SNMP Finds in the Satellite Ground Segment that HTTP Misses appeared first on Flare | Identity First Threat Intelligence
Quick Answers DOWNLOAD: Complimentary Gartner Emerging Market Quadrant for Narrative Intelligence An individual who had just received a cancer diagnosis, searching social media in the spring of 2026, would have encountered within a few scrolls the claim that the disease is caused by parasites, that chemotherapy enriches hospital systems without curing anyone, and that a […] The post Seven Health Narratives Driving a Wave of Health Misinformation appeared first on Blackbird.AI.
Pakistan’s cyber threat landscape throughout 2026 was characterized by a convergence of nation-state cyber espionage, financially motivated cybercrime, hacktivist activity, and large-scale credential exposure. The post Pakistan Cyber Threat Landscape Report 2026 appeared first on ThreatMon.
PaperCut RCE Chain: CVE-2026-82078 Exploited PaperCut disclosed two vulnerabilities in PaperCut NG and PaperCut MF that can be chained into a pre-authentication Remote Code Execution (RCE) path against vulnerable Applica
ServiceNow Patches Multiple CVSS 10.0 Flaws ServiceNow disclosed four vulnerabilities affecting its AI Platform and related Now Platform components on August 27, 2026 . Three received vendor-assigned CVSS v4.0 scores of
When a security team discovers an infostealer infection, the response usually follows a familiar sequence. The team isolates or rebuilds the endpoint, resets the employee’s passwords, revokes browser sessions, reviews MFA, and investigates account activity. That playbook was built around human identities. Modern employee endpoints now hold another class of credentials with equally serious consequences: […] The post The Missing Infostealer Playbook: Rotating the Machine Credentials Attacker
Three actively exploited AI orchestration platforms — LiteLLM, RAGFlow, and Kestra — are giving attackers a single entry point to every model provider credential an organization holds. See the CVE chains, IOCs, and detection rules from Brandefense's INT-2608-e7a5 campaign analysis.
Finnish Kennel Club, Shell Access, UK Iframe, Salt Mobile, and Brazil SERPRO Claims SOCRadar Dark Web Team identified several new underground posts, including an alleged Finnish Kennel Club and Showlink dog-show database
Here are the main stories you missed last week. 1. Cl0p: The gang that hit MOVEit is back, and this time it went through PTC Windchill to reach Shell, GE, Philips, and 40 more The headline: The Cl0p ransomware group listed more than 40 organizations on its leak site as victims of a campaign against […] The post Cyber Roundup — Week of August 24th appeared first on CybelAngel.
Group-IB uncovers BraZetsu, a new Python-based Windows malware that serves as a master toolkit for Initial Access Brokers and powers a unique, AI-enhanced underground marketplace for commercializing compromised Iberian and Latin American targets.
Dark web surveillance can help security teams investigate emerging claims about exposed business data before those claims become overlooked risks. On August 30, 2026, a post attributed to the username DaOnlySpark appeared on the cybercrime forum Pwnforums.st, alleging a database leak involving gotrestle.com. The claim has not been independently verified, and the available forum post […]
The post Iran-Linked Hackers Reportedly Knock UK Power Plant Offline for Four Days appeared first on ThreatMon.
The post OSINT Framework: What is a better alternative? appeared first on ShadowDragon®.
By Adrian Cheek, Senior Cybercrime Researcher The standard story about higher education cybersecurity is that it’s target-rich and cyber-poor: a sprawling, underfunded sector where the weakest links are the community colleges and cash-strapped campuses without the budget for a real security program. This study finds the opposite pattern. 45% of the nation’s most research-intensive universities, […] The post 45% of Top American Research Universities Expose Computing Infrastructu
Zero Trust keeps coming up in board meetings and budget reviews, yet the term still gets stretched in every direction. You’re expected to “implement Zero Trust,” but what that means in practice is often unclear, especially when your environments span cloud workloads, legacy systems, SaaS platforms, remote users, and unmanaged devices. This glossary entry gives […] The post The Zero Trust Security model: A 2026 Guide appeared first on CybelAngel.