Microsoft fixes bug causing Windows black screens, Explorer crashes
Microsoft has resolved a known issue that was causing black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. [...]
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,615 matching stories — announcement, in Endpoint Detection & Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The GhostX Ecosystem: Forged in Transit, Licensed to Deceive
Executive Summary Cyble has continued tracking GhostBat RAT activity targeting Android users in India since its initial identification in October 2025. Recent investigations into malicious mParivahan and eChallan-themed applications revealed a broader operator-controlled ecosystem that we track as GhostX. Analysis of the exposed GhostX backend identified administrative and user-management structures, device-control records, SMS-delivery instructions, call-forwarding activity, and continuously ch
5 Ways To Measure Your Endpoint Security Effectiveness
Buying an endpoint security tool is easy. Knowing whether it actually protects you is much harder. Many organizations deploy antivirus, EDR, or a full endpoint protection platform, watch the dashboard turn green, and assume the job is done. Then a ransomware attack slips through an unmanaged laptop or an unpatched server, and the gap becomes […]
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution
The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available. The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek.
Threat Intelligence Report Oct 6 - Oct 12 2026
Threat Intelligence Report Oct 6 - Oct 12 2026 john.cezar Thu, 10/15/2026 - 06:53 New Threats Detection Added• ContEXE Stealer • CountLoaderNewly Detected Threats10New IDPS Rules Created61Weekly Detected ThreatsThe following threats were added to Crystal Eye this week:Threat name:ContEXE StealerContEXE Stealer is an information-stealing malware design to collect sensitive information such as browser-stored credentials, cookies, authentication tokens, system information, and other valuable artifa
Cisco Warns of Exploited Secure Email Gateway Vulnerability
Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek.
Tech Support Scam: Fake Orders and Bank Alerts Prompt Victims to Call
A tech support scam impersonates a legitimate support service to persuade someone to call, make a payment, disclose sensitive information, or authorize access to their device.
What’s New Device Platform Intelligence on Oct 15, 2026
Go to Device Platform Intelligence Added Platforms 9 Platforms are added Platform Name Node Type2 Node Type Realme C85 Pro Phone Mobile Phone Mobile Device Samsung Galaxy Wide 9 Phone Mobile Phone Mobile Device TCL K33 5G Phone Mobile Phone Mobile Device TECNO Spark 50 Pro Phone Mobile Phone Mobile Device Vivo V70 Phone Mobile […]
What’s New Device Platform Intelligence on Oct 15, 2026
Go to Device Platform Intelligence Added Platforms 9 Platforms are added Platform Name Node Type2 Node Type Realme C85 Pro Phone Mobile Phone Mobile Device Samsung Galaxy Wide 9 Phone Mobile Phone Mobile Device TCL K33 5G Phone Mobile Phone Mobile Device TECNO Spark 50 Pro Phone Mobile Phone Mobile Device Vivo V70 Phone Mobile […]
CrowdStrike Outage: What Happened and How to Limit Future Risk | UpGuard
Learn how you should respond to the CrowdStrike incident and the likely long-term impact it will have on third-party risk management.
As phishing-as-a-service goes industrial, Microsoft takes down a marketplace behind 1 billion messages
Microsoft says it has dismantled a criminal marketplace responsible for 1 billion malicious messages. Working with international authorities and several tech and cybersecurity companies in a nearly year-long investigation, Redmond identified and took down Yam Store, a coordinated underground network dealing in commercial phishing-as-a-service (PhaaS). The network allowed cybercriminals to readily purchase, and very quickly deploy, pre-made kits they could use in phishing attacks to steal data an
Entry Point Analyzer
Analyzes smart contract codebases to identify state-changing entry points for security auditing.
Advantages Of EDR Solutions People Don’t Known About
Would you know if an attacker had been hiding inside one of your laptops for the past three weeks? For many organizations, the honest answer is no. Traditional antivirus only stops threats it already recognizes, and today’s attackers count on that gap. This is where the advantages of EDR solutions become impossible to ignore. Endpoint […]
Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. [...]
Cisco make-me-root email bug exploited as a 0-day by unknown crims
Both Switchzilla and CISA sound the alarm
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Cisco security advisory (AV26-1042) – Update 1
What Does the Dark Web Look Like? Pulling Back the Curtain | Huntress
Learn what the dark web looks like with an exploration of the far reaches of the internet, how you can get there, and what you might find… from a safe distance.
IBM security advisory (AV26-1040)
October 2026 Vulnerability Digest Recording
Watch this webinar recording to learn about patches for Microsoft vulnerabilities from Patch Tuesday and third-party vulnerabilities from October 2026. The post October 2026 Vulnerability Digest Recording first appeared on Action1.
Ivanti patches Connect Secure zero-day after researchers confirm in-the-wild attacks
Vendor promises fix for separate privilege-escalation flaw in the coming weeks
Microsoft Disrupts 3 Phishing Kits Linked to Over 1 Billion Scam Messages
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for
Passkeys Raise the Bar. Here’s Where Attackers Can Still Get In.
Passkeys significantly improve authentication, but attackers still target enrollment, recovery, endpoints, and alternative flows. Discover how to secure the full account lifecycle with a comprehensive identity strategy.
AI worms could spread across your smart devices, Anthropic warns
Researchers say small AI models could be capable of spreading across vulnerable smart devices within months.
Texas HB 3834 Cybersecurity & AI Training Requirements
Texas HB 3834 and HB 3512 require annual cybersecurity and AI awareness training. Learn who’s in scope, what’s required, and how to comply fast.
Microsoft security advisory – October 2026 monthly rollup (AV26-1038)
Why an authenticated AI agent can still be dangerous
AI authentication is one layer of AI agent security. It should be followed by device verification, access policy, and application, privilege, and storage controls.
Highlights of Microsoft’s October Patch Release | Kaspersky official blog
The update collection published by Microsoft on October 13, 2026 includes a total of 1,414 patches. Here’s what you need to know.
Highlights of Microsoft’s October Patch Release | Kaspersky official blog
The update collection published by Microsoft on October 13, 2026 includes a total of 1,414 patches. Here’s what you need to know.
Cómo funciona una red inalámbrica mesh y cuándo conviene usarla
Las redes inalámbricas tradicionales se basan en puntos de acceso conectados a una red cableada. En entornos donde tender cable Ethernet resulta difícil o poco práctico, este modelo se queda corto. Las redes inalámbricas mesh ofrecen una alternativa: permiten que los puntos de acceso se conecten entre sí sin cables. En una red mesh, varios […]
How to delete your Facebook account
Want to delete your Facebook account for good? Here's how to permanently delete or temporarily deactivate it, export your data, and cut Messenger loose.
Software Monetization Models and Strategies – 2027 Outlook
Revenera’s annual industry report on software monetization models and strategies is essential reading for business leaders looking to navigate the complexities of AI pricing, customer adoption, and profitability. By surveying 415 senior executives at global technology companies, we’ve compiled a rich dataset that sheds light on industry trends, best practices, and common roadblocks to revenue growth. Big talking points from this year’s Monetization Monitor include: 96% of respo
The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws
This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble's global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). The Cyble Global Sensor Intelligence (CGSI) network observed exploitation attempts against about 20 known vulnerabilities. They range from newly disclosed flaws in WordPress, Apache Solr, and Langflow to years-old bugs i
Proactive Endpoint Health Monitoring: How to Extend PC Lifespan as Memory Prices Rise
Memory prices are climbing, and not in a way that’s expected to correct itself soon. Gartner is projecting a 130% surge in combined DRAM and SSD prices by the end of 2026, with PC prices up 17% and smartphone prices up 13% compared to 2025. The downstream effect for IT is straightforward. Gartner expects PC […]
7 types of business meetings and top tips for each
Learn about seven common business meetings, with practical tips for keeping each one productive and private.
How the Aurora® Superintelligence Platform and Aurora Agentic SOC Help You Understand and Secure AI
AI now plays a central role in defending organizations from the modern threat landscape. It triages alerts, investigates security events, and recommends what to do next. AI is critical to defending at machine speed, but security leaders can’t see how it is making decisions on their behalf. This visibility challenge creates multiple downstream problems for ... How the Aurora® Superintelligence Platform and Aurora Agentic SOC Help You Understand and Secure AI
How Aurora® Adaptive Threat Protection Spots Attacker Intent Early
Imagine this: There’s an active attack but no alert. Nothing looks wrong. Every login is valid. Every tool is trusted. Every command is one your team has run before. This invisible attack chain is how many attackers work today, and they can take control of a domain in minutes and encrypt an environment while evading ... How Aurora® Adaptive Threat Protection Spots Attacker Intent Early
Arctic Wolf Raises the Industry Standard for Trusted AI Security with SwarmView
New capability gives customers unprecedented visibility into AI-driven investigations, bringing greater trust and accountability to the world’s largest commercial agentic SOC EDEN PRAIRIE, Minn. – October 14, 2026 – Arctic Wolf®, the cybersecurity and AI company, today at the 2026 Security Operations Summit announced SwarmView™, a new capability that brings the power of the Swarm ... Arctic Wolf Raises the Industry Standard for Trusted AI Security with SwarmView
CISA warns admins to immediately fix Ivanti flaw exploited as zero-day
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. [...]