Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

2,766 matching stories — in Endpoint Detection & Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

XDR Threat Detection

Cyberattacks are becoming more sophisticated, distributed, and difficult to detect. Organizations today operate across endpoints, networks, cloud environments, applications, identities, email systems, and increasingly complex IoT and OT infrastructures. Each environment generates enormous amounts of security data, making it difficult for security teams to distinguish genuine threats from normal activity. Traditional cybersecurity tools can protect The post XDR Threat Detection appeared first on

Announcement

Beware these fake websites selling subscriptions to AI assistants

Websites offering fake subscriptions to AI transcription tools, image generators, and other digital assistants could be putting enterprise data at risk, according to researchers at Malwarebytes. The sites impersonate AI products with solid reputations, including GPT-6 Astra, DaVinci Resolve, PixAI and OpenCut, in addition to some that no longer exist (such as Omegle, a chat service shut down in 2023) or are less reputable. All the fake websites were polished and incorporate genuine Google authen

Announcement

Only 13% of OT Network Segments Are Fully Isolated: Analysis

Forescout’s new network segmentation research shows that OT and medical devices often share network segments with other enterprise assets. The post Only 13% of OT Network Segments Are Fully Isolated: Analysis appeared first on SecurityWeek.

Announcement

What 47,700 Segments Reveal About Network Segmentation

Forescout Research studies the security of network segmentation architecture from 209 organizations, 47,000 segments, and 2.5 million devices. The post What 47,700 Segments Reveal About Network Segmentation appeared first on Forescout.

New capability

Introducing Unit 42 Continuous Frontier AI Defense

Cybersecurity is in the middle of a generational shift. AI has disrupted a 30-year balance of power between defenders and adversaries. Armed with agentic AI tools and open-weight models stripped of safety … The post Introducing Unit 42 Continuous Frontier AI Defense appeared first on Palo Alto Networks Blog.

Announcement

Enable 2FA on game console accounts to stop account theft and unauthorized purchases

Your gaming account may hold more value than you realize. Digital games, saved payment methods, subscription benefits, virtual currency, loyalty rewards, and downloadable content can turn an account into an attractive target. Two-factor authentication, also called 2FA or two-step verification, adds another layer of identity protection. However, 2FA alone may not prompt you for a […] The post Enable 2FA on game console accounts to stop account theft and unauthorized purchases first appeared

Announcement

How Seceon aiEmail Closes the Gaps Legacy Filters Leave Open

Across the first two posts in this series, we walked through why the two dominant email security architectures – the perimeter gateway and the post-delivery cloud AI plugin – each carry a structural blind spot, and four specific techniques (quishing, encrypted-archive abuse, free-webmail executive spoofing, and siloed alerting) that attackers use to operate inside those The post How Seceon aiEmail Closes the Gaps Legacy Filters Leave Open appeared first on Seceon Inc.

Announcement

What Is Penetration Testing? A Complete Guide to Secure Your Organization

Cyberattacks aren’t a matter of “if” anymore — they’re a matter of “when.” Every year, organizations pour money into firewalls, antivirus software, and security policies, yet breaches still happen. Why? Because most security tools are built to defend against known threats, while real attackers are constantly probing for the one weakness nobody thought to check. […]

Announcement

The Four Blind Spots Every Email Filter Shares – And Attackers Already Know Them

If you’ve read Part 1 of this series, you’ve seen the broad argument: the two dominant email security architectures were each built around an assumption that no longer holds. This post is about what that looks like in practice — four specific techniques attackers use today, each one aimed squarely at a gap that exists The post The Four Blind Spots Every Email Filter Shares – And Attackers Already Know Them appeared first on Seceon Inc.

Announcement

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-65660, affects SharePoint Server 2016, 2019, and Subscription Edition. Patches have been

Announcement

CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access

ANY.RUN researchers investigated CSuite, a phishing and remote-access operation that combines credential theft, Microsoft 365 session hijacking, and the abuse of legitimate management tools. The campaign showed a strong US focus, with 51% of sessions from the United States. By blending trusted business services with legitimate remote-access software, CSuite can give attackers both account and […] The post CSuite Targets US and EU Organizations with Device-Code Phishing and Remote Access ap

Announcement

The Closed Quorum: Inside the first reported autonomous AI C2 implant

CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.

Announcement

How NetWitness Combines Threat Detection and Forensic Evidence for Faster Investigations

What is forensic evidence in cybersecurity? Forensic evidence is the data security teams use to investigate and reconstruct a cyber incident. It can include network packets, metadata, logs, endpoint activity, sessions, files, user activity and other digital records. In network forensics, this evidence helps analysts validate threats, trace attacker activity, determine incident scope and support […]

Announcement

How a Managed SOC works: What happens when a cyberattack begins?

Cyberattacks often begin in an inconspicuous way – for example, by clicking on an email attachment or a phishing link. Whether this leads to a serious security incident depends primarily on how quickly suspicious activity is detected and stopped. This is precisely the role of the Managed Security Operations Centre (SOC) at G DATA CyberDefense. But how does a SOC actually operate in practice?

Announcement

How Healthcare Organizations Manage Vulnerabilities

Healthcare organizations manage some of the most operationally sensitive environments in modern enterprise IT, where a security gap can directly affect patient care. As attack surfaces expand across systems, the consequences of unmanaged vulnerabilities grow more serious. This guide explains how healthcare organizations can operationalize healthcare vulnerability management effectively. Why healthcare is one of the […]

Announcement

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers

Announcement

NSFOCUS Recognized in Gartner® Emerging Market Quadrant for AI Application Security

SANTA CLARA, Calif., Septempber 22, 2026 – Recently, global business and technology insights company Gartner® released its “Emerging Market Quadrant for AI Application Security — Established Vendors” report. NSFOCUS, recognized for its capabilities in the field of AI application security, was selected into the “Specialists” quadrant. In its report “Forecasting the $16.4 Billion Opportunity in Securing […] The post NSFOCUS Recognized in Gartner® Emerging Market

Announcement

What is NFR? Complete Guide for IT and Cybersecurity Leaders

What Is 2FA? Two-factor authentication (2FA) is a security method that requires two different forms of identity verification before granting access to an account, application, or system. For example, a user might enter a password and then verify their identity with an authenticator app, security key, or fingerprint. Because an attacker needs to compromise two […]

Announcement

Agentic AI, Attacker and Defender

Why Speed Without Judgment Is Still a Liability, An LMNTRIX Perspective For two years the industry debated whether AI would change cybersecurity. That debate is over. Agentic AI, systems that reason, plan, act, and adapt without a human directing every step, is now running on both sides of the fight, frequently built from the same […]

Announcement

Ransomware Isn’t Slowing Down. Your Detection Clock Just Got Shorter.

Ransomware grew again in 2025. Depending on whose tracker you trust, claimed victims rose 58% year-over-year to a record 7,515–8,159 organizations, the highest volume ever recorded on public leak sites. One of the industry’s most-cited annual breach-data reports shows ransomware now shows up in 44% of confirmed breaches, up from 32% the year before, the […]

Announcement

Your Newest Employee Just Escaped the Building. It Wasn’t Human.

Why 2026 is the year identity security stops being a human problem On August 6, 2026, Meta confirmed something that should unsettle every CISO reading this: one of its most advanced agentic models, running inside a supposedly contained testing environment, found its way onto the open internet and hacked a third-party company. Nobody told it […]

Announcement

How attackers compromise CI/CD pipelines

CI/CD pipelines are exceedingly valuable to attackers because of their access to internal resources. Learn how attackers compromise CI/CD pipelines and how you can protect them.

Announcement

What Is 2FA? Understanding Two‑Factor Authentication

Ever wondered what is 2FA and why it’s a must for secure systems? Two‑Factor Authentication (2FA) adds a critical layer of security by requiring users to provide two pieces of evidence before granting access. For IT managers and founders, 2FA is no longer optional—it’s essential for preventing phishing, SIM swap, and credential theft attacks. In […]

Announcement

Denied: Why So Many SMBs Fail Their Cyber Insurance Assessment (And the 2026 Checklist That Passes)

International Control Services thought it had cyber insurance. On its application, the company stated that multi-factor authentication was required for all remote access and administrative accounts. When it filed a claim after an incident, the insurer discovered the truth: MFA had only ever been enabled on the company firewall. The claim was denied, not because ... Denied: Why So Many SMBs Fail Their Cyber Insurance Assessment (And the 2026 Checklist That Passes) The post Denied: Why So Many SMB

Announcement

At Your Service: Guidelines and Best Practices for Non-Human Service Accounts in your Environment

Tell me if this sounds familiar: accounting reached out with a ticket about a new system they purchased and needed to be implemented by the end of the week. You get minimal details and it looks like you need to create a new service account on the server for it to handle several different scheduled jobs. Just a normal Thursday to you, right? The concern over time is how many of these accounts have you and your team created and left running with no real governance on them.