Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,050 matching stories — in Digital Risk Protection (DRP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Dive into a covert Linux XMRig campaign exploiting trusted access, weaponizing PAM to create forensic smokescreens, and deploying self-unlinking payloads.
A tax-season malware campaign is impersonating the Income Tax Department, sending fake penalty notices over WhatsApp. Victims who tap "Download Documents" install malware capable of harvesting OTPs and banking credentials. The advisory also covers a wider ecosystem of refund SMS fraud, cloned e-Filing portals, and fake e-PAN emails targeting Indian taxpayers this season. Authors : Shobhit Mishra
Netcraft built its name on one thing done exceptionally well: finding phishing sites and getting them taken down. Decades of registrar relationships and a 33-minute median takedown time back that reputation up. So why do teams search for Netcraft alternatives at all? Usually because their problem outgrew the tool. Phishing is no longer a standalone […] The post Netcraft Alternatives: 6 Strong Competitors to Weigh in 2026 appeared first on Bolster AI.
No more deciding what to simulate, when, or how often. AI Managed Service lets security teams set the goals, and Doppel's agentic AI runs the entire program.
OverviewOn July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unauthenticated vulnerability affecting all versions of TeamCity On-Premises. The issue is classified as deserialization of untrusted data and has a CVSS score of 9.8. An unauthenticated remote attacker with HTTP(S) access to a TeamCity server can exploit the agent polling protocol to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity serv
What cybersecurity awareness training covers in 2026, how to build a program that changes behavior, and how to measure whether it's working.
We’re packing up for Las Vegas to take over at BSides LV, Black Hat USA, and DEF CON! Don’t miss out on our DEF CON kickoff with an exclusive dual-session evening: join offensive security expert Jason Haddix and Anthropic’s Rob Bair for a candid breakdown of AI guardrails, and then test your dark web monitoring […] The post Flare’s Heading to Hacker Week 2026 appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime.
The post Native WhatsApp capture, without the workarounds – A Case Study appeared first on Deepview.
Counterfeit viral toys can appear almost as quickly as the trends they copy. When a toy explodes on TikTok or social media, counterfeiters can use fake stores, marketplace listings, copied product images, and lookalike domains to meet demand before many buyers know what is genuine. Counterfeit viral toys are unauthorized copies of trending toys that […] The post Viral Today, Counterfeited Tomorrow: The Squishy Dumpling Playbook appeared first on BrandShield.
The scenario is all too familiar for any cybersecurity professional: It’s late in the day, and a critical zero-day vulnerability is disclosed. When this happens, CISOs from every industry immediately turn to their Security Operations Centers (SOC) with the single most important, and often most difficult, question: "Are we exposed?”Answering questions like these when zero-days drop tends to trigger a frantic, high-stress fire drill. Analysts scramble to cross-reference outdated Configuration Mana
Unit 42 (Palo Alto Networks) identified 15+ Chrome utility extensions — game emulators, password managers, productivity tools, CSS inspectors, markdown converters — that embed an identical commercial bandwidth-sharing SDK. The SDK turns the browser into a covert web-scraping proxy: it injects hidden credentialless iframes into active tabs, converts pages to Markdown in the background, and forwards the content to five AWS Lambda backends and a persistent WebSocket controlled by the SDK provider.
Eight months before SpaceX filed its S-1, scammers were already building fake investment portals impersonating the company, Elon Musk, Fidelity, and Robinhood. By the time the IPO arrived, the campaign had reached 15 countries across five continents. When SpaceX filed its S-1 in May 2026 ahead of a Nasdaq listing targeting a valuation of approximately […] The post The SpaceX IPO Became a Brand Impersonation Event appeared first on Allure Security.
Say hello to Scout AI. Your data knows which alert types spiked this week. It knows your takedown acceptance rate this quarter, and exactly why escalations jumped between two dates last month. It knows all of this, right now. It just won’t tell you without effort: write the query, pull the export, or file a […]
Microsoft outage disrupts Azure and Microsoft 365 as OpenAI’s test models escape containment, raising new fears of autonomous cyberattacks. The post The week in breach news appeared first on Kaseya.
Finding compromised data is only useful while the organization can still act on it. A credential discovered days after it appeared may explain an incident. A credential detected and delivered within minutes can help prevent one. That distinction makes collection latency and alert delivery central to effective breach monitoring. Real time starts at the source […] The post Real-Time Breach Monitoring Means Reaching the Response System in Time appeared first on Lunar Cyber.
When Every Minute Counts: Using Infostealer Forensics to Respond to a Data Breach Most organizations discover a data breach after credentials have already been exposed. A password appears in a dark web marketplace, an employee reports suspicious activity, or a security team receives an alert about compromised accounts. By that point, the question has shifted […] The post When Every Minute Counts: Using Infostealer Forensics to Respond to a Data Breach appeared first on Lunar Cyber.
Organizations today face increasingly sophisticated cyberattacks that abuse trusted infrastructure instead of suspicious domains. One recent example involves the PhantomEnigma malware campaign, where attackers compromise legitimate government websites to distribute malicious payloads. This tactic makes attacks significantly harder to detect because users naturally trust official government domains. Effective dark web monitoring enables organizations to identify […]
OverviewOn July 22, 2026, Check Point published a security advisory for CVE-2026-16232, an authentication bypass in the SmartConsole login process affecting Security Management Server and Multi-Domain Security Management Server (MDS). By leveraging CVE-2026-16232, an unauthenticated attacker can obtain an application login token, use this token to log in through SmartConsole with full administrator privileges, and modify the security policy or security configuration. Exploitation requires networ
See 15 real social engineering attack examples across email, voice, text, and the web, plus the red flags that catch them before damage is done.
This blog is part of a series of Blackbird.AI RAV3N Research posts about manipulated narratives impacting the 2026 World Cup. Read more: Argentina lost the 2026 World Cup final. Spain won 1-0 in extra time at the New York New Jersey Stadium, and Enzo Fernández was sent off before the end. The next day, a […] The post 2026 World Cup: Argentina and Messi Victims of 5 Distinct Narrative Attacks appeared first on Blackbird.AI.
A Fortune 100 retailer found a subdomain they’d forgotten they owned. It wasn’t just exposed. It had already been taken over by an attacker. And their existing attack surface tool had never surfaced it. That story stuck with me because I hear a version of it constantly. Security teams start with alerts or known vulnerabilities. […] The post Seeing What Attackers See: External Attack Surface Management Changes the Exposure Game appeared first on Infoblox Blog.
BlackFile has demanded seven-figure ransoms from retail and hospitality companies since February 2026. Its attack chain contains no malware, no exploit, and no email. Every stage is impersonation. When Palo Alto Networks’ Unit 42 and the Retail & Hospitality ISAC published a joint advisory on April 24, 2026, the threat group it described was unusual […] The post BlackFile: Extortion Without a Single Phishing Email appeared first on Allure Security.
Organizations typically discover only 62% of their external attack surface, leaving forgotten assets, shadow IT, and third-party infrastructure exposed to attackers. Learn why visibility matters and how continuous EASM reduces cyber risk.
On July 27, 2026, Apple released security updates for iOS 26.6 and iPadOS 26.6, fixing vulnerabilities across several components — Accessibility, Kernel, Libnotify, and WebKit. Among them is CVE-2026-64739, a stack-based buffer overflow in Libnotify/notifyd found and reported to Apple by ThreatBook XGPT. Apple's advisory credits Feng XUE and XGPT of ThreatBook. The same flaw also affects tvOS, watchOS, visionOS, and macOS — see Affected Scope below. There is no evidence of in-the-wild exploitati
TeamPCP is a financially motivated cybercrime group that emerged in late 2025. Its initial activity focused on exposed cloud infrastructure, which it exploited to deploy ransomware and conduct unauthorized cryptocurrency mining. The post TeamPCP Threat Actor Report appeared first on ThreatMon.
Someone goes looking for a popular pair of sneakers. They spot a great deal in an ad, click it, check out, and feel good about the purchase. Everything looks official. A couple of weeks later, the shoes still haven’t arrived. They never will. Almost everyone has a version of that story, either their own or […] The post The Fraud Funnel: How Modern Scams Find Their Victims appeared first on Bolster AI.
Why Fuzed Identity Intelligence is Becoming Essential to Enterprise Security For years, enterprises have treated a digital identity as an internal construct. An employee had a corporate email address, a directory account, assigned devices, application entitlements, and a set of credentials. Security teams protected those assets through Identity and Access Management (IAM) solutions, Multi-Factor Authentication […]
By Assaf Morag, Cybersecurity Researcher Most phishing kits steal passwords. Kali365 does something more dangerous: it tricks victims into authenticating on a genuine Microsoft page, completing MFA themselves, and unknowingly handing an attacker-controlled session the resulting access tokens. No credentials are intercepted. No fake login page is required. The victim does everything right and still […] The post Kali365: The Phishing-as-a-Service Operation Expanding Beyond Microsoft 365 appe
With evolving AI threats, traditional defences are no longer enough  Email has long been a point of vulnerability for businesses, but the scale and sophistication of attacks are evolving, posing The post Email security under NIS2 appeared first on Kaseya.
A question every business should be asking is: How quickly can we get back to business if something goes wrong?  Downtime is expensive, and in The post Cyber resilience in the age of NIS2: Why backup is no longer just an IT function appeared first on Kaseya.
You may have heard your peers say, “Cybercrime has become industrialized.” But did you have any proof? We do. Cyble Research and Intelligence Labs (CRIL) closed out its tracking for the first half of 2026 with a deep analysis of the Global Threat Landscape spanning ransomware, initial access brokers, data breaches and leaks, nation-state espionage, and hacktivism, among others. One of the most striking analyses that puts the threat landscape severity in perspective was the number of distinct thr
Most business email compromise (BEC) attacks start with stolen credentials, not a malicious email. Group-IB uses threat intelligence to detect compromised accounts before attackers log in — predicting BEC before it starts.
Organizations rely on PDF readers every day to process invoices, contracts, reports, and customer documentation. But when a trusted application contains a privilege escalation vulnerability, the consequences can extend far beyond a single compromised workstation. A successful attack can become the first step toward ransomware deployment, credential theft, lateral movement, and costly business disruption. 🚨 […]
Security teams have spent decades treating malware delivery as a movement problem. An attacker places a malicious file on a server, transfers it across the network, and persuades a user or system to execute it. Defenders inspect the hosting domain, the download URL, the network payload, the file hash, the digital signature, and the executable […] The post The Malware Factory Has Moved Into the Browser appeared first on Lunar Cyber.
Your brand protection strategies probably are not failing on intent. They are failing on timing. You have a trademark filing. You have a registrar account. You have someone in legal who sends takedown requests. What you likely don’t have is a way to find a cloned login page, a fake storefront, or a deepfaked video […] The post 12 Top Brand Protection Strategies for 2026: Combat Evolving Digital Threats appeared first on Bolster AI.
By Flare Product  In the mid-2010s, endpoint security reached a breaking point. Malware volume grew nearly eightfold between 2010 and 2016. Ransomware campaigns like WannaCry and NotPetya exploited the gap between detection and manual response with devastating efficiency. The industry’s answer was EDR: push automated response as close to the point of attack as possible […] The post Detection Without Automated Response Fails: Lessons for Identity-First CTI appeared first on Flare
Who dominated the ransomware landscape in Q2 2026? Discover how Qilin, TheGentlemen, Akira, DragonForce, and LockBit5 operated, what they targeted, and what Brandefense CTI predicts for the months ahead.
Unit 42 documented four evasion techniques currently running in Microsoft device-code phishing campaigns: CAPTCHA gates that block headless scanners, multi-step chains through legitimate SaaS platforms, blob-URL delivery that gives the phishing page no network existence, and source-level obfuscation using Cyrillic confusables, 93 zero-width characters, and tag injection. One documented chain crosses four steps and two third-party domains before the device code appears. The techniques stack acros