Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,050 matching stories — in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A finance employee joined a video call with his CFO and colleagues — every face was synthetic. The deepfake video call attack that moved $25.6 million in 15 transfers, and the five-control verification protocol that stops it even when the impersonation is perfect.
A bodyguard protects an executive who is standing in front of them. Executive travel security protects the whole trip: the itinerary, the route, the destination, and the digital exposure that reaches an executive long before they land. Most corporate programs already have the physical piece handled. The gap tends to be intelligence, specifically the digital […]
Customer Support Scams happen when criminals impersonate a legitimate company’s support team to trick customers into sharing information, sending money, installing software, or visiting fraudulent websites. These scams can damage customers directly while leaving the impersonated brand dealing with lost trust, complaints, and reputational fallout. Most frequently, these scams target less tech-savvy users, or the […] The post Customer Support Scams: How to Protect Your Customers appeared fir
Every credential dump, every underground marketplace listing, every phishing campaign that feels personal starts with the same thing: a lightweight piece of malware sitting quietly on someone’s device, harvesting everything the browser has saved. In January 2026, security researcher Jeremiah Fowler discovered an unprotected database containing 149 million unique login-password pairs, including 48 million Gmail […] The post Infostealers: The Malware Behind the Credential Economy appea
Threat actors are using autonomous AI agents to launch social engineering attacks at scale. Learn how Doppel’s agentic defense catches them at machine speed.
Quick Answers How do narrative attacks and disinformation affect retail brands? Narrative attacks can turn a single incident or corporate decision into a negative perception of a retailer. As they spread, they can weaken trust, influence purchasing behavior, and damage brand reputation. How do narrative attacks intensify during peak retail shopping seasons? During peak shopping […] The post Retailers Are Facing a New Kind of Brand Attack: Narrative Attacks appeared first on Blackbird.AI.
Manual brand impersonation takedowns fail because attackers move faster than ticket-based abuse reports can resolve — phishing pages and fake executive profiles often do their damage within hours of going live, while manual removal can take days. A managed takedown program pairs continuous, verified monitoring with pre-authorized removal (in-certain cases), cutting the exposure window from days to hours. This matters most for consulting and professional services firms, where a spoofed domain or
Operation ASTERIX overviewRapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the campaign's development; recovered p
Here are the main stories you missed last week. 1. Metabase: A CVSS 10.0 zero-day in the password reset endpoint gave unauthenticated attackers admin access to every database the platform had ever connected to The headline: Metabase disclosed CVE-2026-72898 on August 6, a maximum-severity SQL injection vulnerability in the publicly accessible /api/session/reset_password endpoint that allows […] The post Cyber Roundup — Week of August 10th appeared first on CybelAngel.
In March 2026, a threat actor group called TeamPCP compromised the CI/CD pipeline of Trivy, one of the most widely used open source vulnerability scanners in the industry. This access was used to steal the publishing credentials of LiteLLM, another very popular open source AI proxy gateway. Five months later the consequences of that single […] The post The LiteLLM Supply Chain Attack: How a Poisoned Scanner Exposed 2,000+ Organizations’ AI and Cloud Credentials appeared first on Cybe
Gopan Sivasankaran is Rapid7's Regional Director, Middle East & Africa.Across Egypt, Nigeria, and Kenya, organizations are expanding their use of cloud infrastructure, artificial intelligence, digital services, and connected operations. But more technology does not automatically create stronger security operations; many security teams are not short on data, but rather on time, context, and specialist capacity.As environments expand, the challenge is no longer finding another security product. It
AmnesiaStealer looks at first like another entry in the growing market for macOS infostealers. A victim lands on a counterfeit GitHub download page, follows a ClickFix instruction, pastes a command into Terminal, and launches malware that grabs passwords, Keychain data, browser profiles, Apple Notes, Telegram sessions, documents, and cryptocurrency-related data. Microsoft documented the same broader […] The post From Cookie Theft to Browser Leasing: What AmnesiaStealer Is Really Signaling
Italy RDWeb Access, GBCSA Data Sale, SCHUFA Claim, and FLY Firebase Exposure SOCRadar Dark Web Team identified several new underground posts involving alleged initial access sales and large-scale data exposure. The findi
Beacon CRM data breach has drawn attention after reports indicated that customer information was exposed following the compromise of an Amazon Web Services (AWS) access key. According to publicly available reporting from GB Hackers, the exposed credentials allowed unauthorized access to cloud resources, resulting in customer data being accessible to an attacker. At the time […]
A single HR assessment vendor breach exposed psychometric profiles and interview recordings for executives across eleven organizations. See why people data vendors sit outside standard TPRM scope, and what closing that blind spot requires.
Search interest in “AI scams” has surged in 2026, rising far faster than several established scam-related searches in a five-year Google Trends comparison. The trend does not prove AI scams are now the most common form of fraud, but it shows that AI has become a major part of how people understand and search for […] The post AI Scams Are Surging: What Google Searches Reveal in 2026 appeared first on BrandShield.
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of the summer with the new http malleable profiles, MCP functionality and linux multi fetch payloads (mor
See why artificially low click rates in security awareness training create dangerous overconfidence and expose enterprises to AI vibe-phishing attacks.
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.
How Infoblox uses its own DNS security platform to govern access to generative AI services across the enterprise What Problem Are We Solving? The rapid growth of AI, generative AI and chatbot platforms has created new security and governance challenges. While these tools can improve productivity, unmanaged access introduces risks including data leakage, intellectual property […] The post Using Infoblox Threat Defense™ to Control AI Access appeared first on Infoblox Blog.
The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026. According to Cyble Research and Intelligence Labs (CRIL), North and South America combined experienced 2,188 documented ransomware attacks between January and June 2026. That single figure — 2,188 attacks — represents more than 57% of the 3,836 ransomware incidents CRIL tracked worldwide, making the Americas the undisputed center of gravity for global ransomware operations. But the Americas
From Blackwater to Cyber-Privateers: When States Outsource Force On August 12, 2026, President Donald Trump signed a National Security Presidential Memorandum titled " Expanding Capabilities to Combat Transnational Cyber
In our explainer on why threat actors moved part of their business to Telegram, we covered the structural story: what changed in 2024, why it created an intelligence gap for security teams, and what’s moved to these channels in general (stolen credentials, compromised session tokens, malware configuration files). It’s worth a read if you’re just […] The post The Dark Web Telegram Channels Attackers Are Actually Using in 2026 appeared first on CybelAngel.
As cyberthreats continue to evolve, so does the need to inspire and equip the next generation of cybersecurity professionals. At Cyber Battle Australia, students did more than compete, they stepped into a real-world cybersecurity environment designed to challenge their thinking, sharpen their skills and open doors to future careers. The Capture the Flag (CTF) style […] The post Infoblox Supports the Next Generation of Cyber Talent at Cyber Battle Australia appeared first on Infoblox Blog.
Search for a Roblox executor, Minecraft mod, or game cheat and the security story appears familiar. A player downloads a fake tool, malware runs, and the attacker steals a Discord account, browser cookies, passwords, or cryptocurrency. Recent campaigns reveal a more interesting system underneath that sequence. The newest game-focused stealers increasingly inspect the victim after […] The post Roblox, Minecraft, and Game-Cheat Stealers: How Fake Executors Turn Gamers Into High-Value Identit
A new alleged cyberattack claim involving Carhartt highlights a growing problem for organizations holding millions of customer and employee records: once sensitive information leaves corporate systems, defenders can lose visibility into where it goes next. The ShinyHunters hacking group reportedly claims it compromised Carhartt and stole more than 50 GB of compressed data, allegedly containing […]
See why unifying digital risk protection, email security, and human risk management under one threat intelligence platform eliminates security blind spots.
An old domain is not always old trust. Dropcatch activity gives previously registered domains a second life, sometimes under very different ownership. Infoblox Threat Intel | Dropcatch series | Part 1 of 3 Executive Summary Every day, tens of thousands of domain names expire and become available for registration. Some fade away and are never […] The post Drop Something? Don’t Worry, Someone Caught it appeared first on Infoblox Blog.
Read the full TAG Infosphere analyst report: Why CISOs Must Focus on Narrative Attacks, from Ed Amoroso and Wasim Khaled Quick Answers For most of the past decade, the mandate of a chief information security officer was clear: Defend the organization’s technical network, the data, and the connected systems. What customers—and the public—believed about the […] The post TAG Infosphere Report: Why Narrative Attacks Are Now a CISO’s Responsibility appeared first on Blackbird.AI.
LiteLLM Supply Chain Attack: Inside the AI Breach That Exposed 2,500+ Companies Key Takeaways The LiteLLM breach planted credential-stealing code in two PyPI releases, v1.82.7 and v1.82.8 , live for roughly 40 minutes on
More than a quarter of stolen funds are gone within fifteen minutes of the fraudulent transfer. That number ends the case-file era — and points to where the time can be won back.
The ransomware ecosystem has fragmented past the point where group-based playbooks work: 146 active groups, 61 new since April 2025, and a 4.9-month average lifespan. Here's why attribution is becoming less useful as a defensive input—and what behavioural detection and pre-attack intelligence look like instead.
Executive Summary Key Findings The Investigation Our team recently wrapped a stretch of work for a customer, a large US insurance and employee benefits provider, and one number from it has stayed with me since. Between August 2025 and May 2026, adversary-in-the-middle phishing made up 34% of every takedown we ran for them. A third […] The post It Passed Every Check. It Was Still the Attack. appeared first on Bolster AI.
By Adrian Cheek, Senior Cybercrime Researcher Publicly exposed EV charging infrastructure remains an unresolved cybersecurity problem. Security practitioner Ken Munro has spent years taking apart the machines that charge electric cars. When asked what actually kept him up at night, he did not point to any one broken device. He pointed at all of them […] The post Plugged In and Exposed: The Growing Cybersecurity Threat to EV Charging Infrastructure appeared first on Flare | Identity First T
Log into ZeroFox analytics and you’ll find dashboards waiting. But you don’t work by org chart. You work by intent: what am I trying to get done right now? That’s how the Essentials suite is built. That’s how the Essentials suite is built. Every dashboard is tagged to an intent, a job, not a department. […]
Blog The Rise of Ransomware in July 2026: What Companies Need to Know Ransomware did not slow down in July 2026. If anything, the threat landscape became more fragmented, more targeted, and harder to predict. ThreatMon’s latest ransomware research identified activity linked to six distinct ransomware groups, affecting organizations across multiple countries and industries. The […] The post The Rise of Ransomware in July 2026: What Companies Need to Know appeared first on ThreatMon.
Data breach monitoring has spent years getting better at discovery. Security teams search breach dumps, stealer logs, paste sites, ransomware leak sites, Telegram channels, dark-web markets, and other criminal sources for corporate email addresses, credentials, personal data, and company secrets. The scope of stolen authentication material has expanded far beyond passwords. Browser cookies, authentication tokens, […] The post The Real Unit of Data Breach Monitoring Is the Access Path appea
Cyber threat monitoring is the continuous process of identifying, analyzing, and responding to indicators that attackers may be targeting an organization, its infrastructure, employees, or digital assets. For modern enterprises, this means looking beyond traditional endpoint alerts and vulnerability scans to understand how emerging ransomware campaigns could translate into real-world exposure. The reported Gunra ransomware […]