waf-fu, or Some Log Replay Nonsense
AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool built to pull, analyze, and replay what gets left behind.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,617 matching stories — announcement, in Endpoint Detection & Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Peer Pressure: Inside the Sality Botnet Disruption Operation
CrowdStrike Falcon Guardian Defines the Next Generation of AI Security
The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
Exodus crypto wallet analysis by Huntress uncovered tampered installers hiding a modular RAT focused on stealing credentials, not coins.
MyGoPen Uses Attestiv in Public Fact-Checks of AI-Generated and Misleading Media
MyGoPen Uses Attestiv to Debunk AI-Generated and Misleading Media The post MyGoPen Uses Attestiv in Public Fact-Checks of AI-Generated and Misleading Media appeared first on Attestiv.
How To Disable Location Tracking on iPhone: Settings and Privacy Considerations
Learn how to disable location tracking on iPhone, prevent apps and others from accessing your location, and protect your privacy beyond the app level.
Secure What Agents Do, Not Just What They Say
Salt Security and CrowdStrike give joint customers visibility across the full agentic path, from the model to the system where the action lands
This Android malware steals banking credentials even without an internet connection | Kaspersky official blog
How the Manic Trojan steals passwords, banking credentials and SMS codes, takes control of Android phones, and relays stolen information through other infected devices.
This Android malware steals banking credentials even without an internet connection | Kaspersky official blog
How the Manic Trojan steals passwords, banking credentials and SMS codes, takes control of Android phones, and relays stolen information through other infected devices.
How Integrated Malware Sandboxing Makes EDR Investigations Faster
See how integrated malware sandboxing cuts manual handoffs, speeds EDR investigations, and helps teams move from suspicious files to faster response. The post How Integrated Malware Sandboxing Makes EDR Investigations Faster appeared first on Fidelis Security.
The Trillion-Dollar AI Bet Needs a Security Strategy
AI agents have now proven, in the real world, that autonomy without a security model is a liability. At Arctic Wolf, we’ve spent years watching that same lesson play out with cloud migrations, remote work, and every other rush of new technology, and this is that pattern showing up again, just faster. OpenAI recently published ... The Trillion-Dollar AI Bet Needs a Security Strategy
McKesson confirms cyber incident after ShinyHunters claims patient-data theft
Healthcare company McKesson acknowledged a data breach. ShinyHunters claims to have stolen hundred of millions of records
UK Defence Cyber Certification Level 0
Learn how hardware visibility and device identification can help support Defence Cyber Certification Level 0 and Cyber Essentials readiness. The post UK Defence Cyber Certification Level 0 appeared first on Sepio.
Huntress API Update: New Endpoints, Webhooks, and Automation
The Huntress API has grown from six read-only endpoints into a full integration and automation platform. See what’s new, including webhooks and MCP support.
Why AI-Driven Email Security Needs More Than One AI Model
Modern email phishing rarely has one obvious warning sign. AI-driven email security therefore needs to be a layered AI architecture that interprets content, context, behavior, visuals, destinations, and threat intelligence together - ideally before the message reaches the inbox.
Test Message
UZTNA: the Evolution of Network Access Control
Can a point-in-time network admission model keep up with how access works today? Forescout explores the evolution of network access control. The post UZTNA: the Evolution of Network Access Control appeared first on Forescout.
How cybercriminals are targeting seniors right now and how to stay protected
Older adults are increasingly spending time online to connect with family, manage finances, receive healthcare, and shop. Unfortunately, cybercriminals know this and are constantly adapting their tactics to target seniors with sophisticated scams designed to steal money, personal information, and even life savings. The good news is that awareness remains one of the strongest cybersecurity […] The post How cybercriminals are targeting seniors right now and how to stay protected first appear
Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams
Learn how the Spring Ring campaign abuses Microsoft Teams and voice phishing to deploy malware and target enterprise domain controllers. The post Spring Ring: An Inside Look at Voice Phishing Campaigns in Microsoft Teams appeared first on Unit 42.
What is 401 Error: Causes, Fixes, and Best Practices for IT Security
If you spend any time managing websites, APIs, or internal business applications, sooner or later you’ll run into an HTTP status code that stops users cold: the 401 error. It’s short, it’s blunt, and it usually shows up at the worst possible moment — during a product launch, a client demo, or a critical system […]
What is a Subnet Mask: A Complete Guide for Networking & Cybersecurity Professionals
Have you ever wondered how thousands of devices on the same network manage to communicate without chaos, or how cybersecurity teams isolate a breach before it spreads across an entire company? The answer often comes down to one small but powerful concept: the subnet mask. If you’ve ever asked yourself what is a subnet mask, […]
Infrastructure Security in the Cloud: Risk & Visibility
More than 50% of enterprise and SMB workloads reside in … The post Infrastructure Security in the Cloud: Risk & Visibility appeared first on Tufin.
A week in security (August 24 – August 30)
A list of topics we covered in the week of August 24 to August 30 of 2026
Why Secure Communications Remain a Human Problem
Understand why secure communications depend on human behavior and how agencies can balance security, compliance, and usability.
How consumers can protect themselves from AI scams, deepfakes, and voice cloning
Artificial intelligence can write convincing emails, clone voices, create realistic images, and generate videos that appear authentic. These tools offer real benefits, but scammers also use them to impersonate relatives, recruiters, banks, government agencies, executives, and trusted companies. The best defense is not learning to spot every deepfake. AI-generated content will keep improving. Instead, build […] The post How consumers can protect themselves from AI scams, deepfakes, and voic
Automated patch management: How it works and why it matters
A critical Common Vulnerabilities and Exposures (CVE) entry drops for an app your team uses. A fix is already available, but the next maintenance window is weeks away. While the patch waits, attackers have time to scan for the same flaw and find systems that still leave the door open.
95.02% Success Rate! NSFOCUS AI Tops the CyberGym Global Leaderboard
In the CyberGym Level 1 global leaderboard, an authoritative benchmark for cybersecurity large models, NSFOCUS AI, NSFOCUS’s self-developed intelligent security agent captured the top global ranking in this round with a 95.02% vulnerability-reproduction success rate. Built on Zhipu’s GLM-5.3 large language model, NSFOCUS AI distills NSFOCUS’s accumulated offensive-and-defensive expertise into computable workflows, systematically unlocking GLM-5.3’s […] The post 95.02% Success Rate! NSFOCUS
Report duplicate social media accounts before scammers target your network
Finding a second social media account that uses your name, photo, workplace, or personal details is more than an annoyance. A scammer may have cloned your profile to impersonate you, contact your friends, distribute malicious links, advertise fake jobs, or request money. If you discover a duplicate account, document it and report it immediately. Fast […] The post Report duplicate social media accounts before scammers target your network first appeared on Total Defense.
AI threat so great that security “takes precedence over everything except critical business operations”
What OpenAI’s open letter means for teams running lean. The post AI threat so great that security “takes precedence over everything except critical business operations” appeared first on ThreatDown.
Cursor AI hack highlights AI shortcomings
The Cursor AI hack reveals that agentic AI is not efficient at determining intent, making them susceptible to attackers. Read CEO Danny Jenkins’ thoughts on the incident and how to protect your environment from similar threats.
Credential security and AI agents: What happens when an agent can access secrets?
How should AI agents access credentials and secrets? Learn the risks of excessive access and how least privilege can strengthen AI agent security.
Top 10 Network Detection and Response Solutions for Enterprise Security Teams
Check the top 10 network detection and response solutions for enterprise security teams, including Fidelis, ExtraHop, NetWitness, and more. The post Top 10 Network Detection and Response Solutions for Enterprise Security Teams appeared first on Fidelis Security.
Everything, Everywhere, All at Once: The New Rules of Exposure Management
Gryxa: The AI-Built Toolkit That Watches How You Remove It
ReliaQuest identified a new toolkit, "Gryxa," highly likely used by a financially motivated threat actor to run an initial-access operation.
Detection blind spots: non-standard file formats in malicious email campaigns | Kaspersky official blog
Disk images, atypical Office files, vector graphics, polyglots, and other techniques for covertly launching malware, as seen in real-world cyberattacks.
Detection blind spots: non-standard file formats in malicious email campaigns | Kaspersky official blog
Disk images, atypical Office files, vector graphics, polyglots, and other techniques for covertly launching malware, as seen in real-world cyberattacks.
The Good, the Bad and the Ugly in Cybersecurity – Week 35 (2026)
Authorities disrupt global cybercrime rings, attackers abuse DocuSign in NovaCookies phishing, and Spark RAT targets Cambodia with vulnerable drivers.
A Beginner’s Guide to Phishing Simulation Training for Employees | Huntress
Learn the essentials of phishing simulation training with our beginner's guide. Protect your organization by simulating real phishing attacks.
Apple is deprecating hdiutil in macOS 27 Golden Gate. Are your scripts ready?
If you spent part of last weekend fielding Slack messages about hdiutil, you're not alone. Jeff Johnson'slapcatsoftware.com blog flagged that the man page for hdiutil in the macOS 27 Golden Gate beta now carries a deprecation notice:
Beyond Detection: Guarantee Recovery: Reboot-to-Restore in a Layered Endpoint Security Stack
Learn how reboot-to-restore recovers endpoints independent of detection, protects against unknown threats and simplifies recovery. The post Beyond Detection: Guarantee Recovery: Reboot-to-Restore in a Layered Endpoint Security Stack appeared first on Faronics.