Axios attack: How a compromised npm package delivered RAT malware
A malicious Axios npm release compromised over 10,000 systems in hours. Learn how the attack worked, the IoCs, and how to prevent supply chain attacks.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,770 matching stories — in Endpoint Detection & Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
DigiCert compromise precedes widespread Microsoft Defender false positives
DigiCert compromise leads to revocation of 60 code signing signatures and Microsoft Defender false positives.
TeamPCP supply chain attack hits TanStack
TeamPCP extends their slew of supply chain attacks with Mini Shai-Hulud, publishing malicious npm packages through TanStack.
NIST CSF 2.0 Explained: What Changed and What MSPs Need to Do | Todyl
NIST CSF 2.0 made governance its own function and widened the scope to every business. Here is what changed and how MSPs should implement it.
Revolut phishing texts appear days after data breach
Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.
Operational Resilience: Turning Your IR Plan Into a Resilient Team
An incident response plan only works if it’s tested. Learn the 5 pillars of operational resilience and how to turn your plan into muscle memory before an attack hits.
How to Stop Running Five Tools to Keep One Fleet of Shared Computers Working
Learn why shared computer fleets require multiple tools, how this creates management challenges and how to bring these functions together in one platform. The post How to Stop Running Five Tools to Keep One Fleet of Shared Computers Working appeared first on Faronics.
Windows 11 24H2 Home and Pro reach end of support in October
Microsoft reminded customers this week that devices running Windows 11 24H2 Home and Pro editions will stop receiving updates next month. [...]
Inside Cynet’s Settra Ransomware Investigation
Ransomware operations are built around a familiar playbook: get in, lock up critical systems, and hold decryption hostage until payment is received. Settra takes those classic tactics a step further by making the ransomware itself difficult to inspect, creating another barrier for researchers trying to understand how the campaign works.  During a recent CyOps incident response investigation, Cynet obtained a Settra ransomware […]
The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through compromised torrents
Kaspersky experts have discovered a new MovieReaper campaign. The multi-stage Trojan spreads through movie torrents, such as The Odyssey, and uses the Solana blockchain to hide its C2 infrastructure.
Why Autonomous Endpoint Management Depends on Trusted Data
Why Autonomous Endpoint Management Depends on Trusted Data Back to Basics: AEM Fundamentals | Part 1 of 5 The market is rushing toward autonomous endpoint management. But most of the conversation skips past the infrastructure and jumps straight to the outcomes. The market is loud, the promises are bold, and the buyers who got burned before are now the ones asking the hardest questions. They don't need another feature list. They need to know what's actually underneath the claims. IT teams have he
Ready, Settra, Go: New Settra Ransomware Variant Deploys MeshAgent RMM
Huntress has recently seen two incidents involving Settra, a ransomware variant that was first publicly reported in June 2026.
Cisco drops another exploited zero-day, this time a perfect 10
ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch
Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution. The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek.
Proton partners with Apertus, Switzerland’s sovereign AI model
Proton has partnered with the team behind Apertus, adding their sovereign AI model to its privacy-first AI chatbot Lumo.
Cast streaming apps at a friend’s house instead of signing in on their TV
Watching a movie or game at a friend’s house should not end with your streaming account permanently logged into someone else’s television. When the TV supports casting, you can often control playback through an authenticated app on your own phone, tablet, or laptop instead. Casting generally reduces the need to type or save your username […] The post Cast streaming apps at a friend’s house instead of signing in on their TV first appeared on Total Defense.
Securing web applications with Coraza WAF and Wazuh
Web application firewalls (WAFs) secure web applications by inspecting HTTP traffic and blocking malicious requests before they reach backend services. They help protect applications from attacks such as SQL injection, cross-site scripting (XSS), path traversal, command injection, and other threats covered by the OWASP Core Rule Set (CRS). Coraza is an open source WAF engine […] The post Securing web applications with Coraza WAF and Wazuh appeared first on Wazuh.
87% of Canada’s biggest companies depend on US tech
Our latest research found that 87% of Canada’s largest companies and 100% of government domains rely on US-owned email infrastructure.
Malicious Chrome and Edge add-ons: how to spot them and why they’re dangerous | Kaspersky official blog
How malicious Chrome extensions steal passwords, drain cryptocurrency wallets and display fake ClickFix instructions, and what to do if you find one of these extensions installed in your browser.
Using a shared computer? Turn on private browsing to protect your accounts and history
A shared computer can be convenient when you are traveling, visiting a library, staying at a hotel, or borrowing a friend’s laptop. It can also expose your browsing history, login sessions, and personal information to the next person who uses it. Private browsing, called Incognito in Google Chrome, InPrivate in Microsoft Edge, and Private Browsing […] The post Using a shared computer? Turn on private browsing to protect your accounts and history first appeared on Total Defense.
12 celebrity deepfake websites seized by Manhattan DA
The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people.
Redefining the Cost of Fighting Financial Crime
The post Redefining the Cost of Fighting Financial Crime appeared first on Feedzai.
T-Mobile rewards points expiry texts are a phishing scam
A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links.
Threat Intelligence Report Sep 8 - Sep 14 2026
Threat Intelligence Report Sep 8 - Sep 14 2026 john.cezar Thu, 09/17/2026 - 10:43 New Threats Detection Added• GemStoneNew Threat Protection86Newly Detected Threats7Weekly Detected ThreatsThe following threats were added to Crystal Eye this week:Threat name:GemStoneGemStone is a malicious Chromium-based browser extension that was initially discovered in August 2026. GemStone is designed to steal sensitive browser data including credentials, cookies, session tokens, and browsing information. GemS
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++ backdoor," ESET security researchers Alexandre Côté Cyr and Romain Dumont said in a technical report shared with The Hacker News
Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026
Cybersecurity compliance APAC 2026 has moved from guidance to enforcement across three of Southeast Asia's largest economies, almost in step. Singapore's Cyber Security Agency issued an updated Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026. Malaysia's Cyber Security Act 2024 has been active since August 2024, with NACSA now well into audits and incident-reporting enforcement. Thailand's Cybersecurity Act NCSA mandate now covers new cloud and website
How to Set Up Remote Access to Endpoints for IT Admins and MSPs
Whether an employee needs secure access to daily work files or an IT administrator must troubleshoot a failed server, remote access is a critical operational backbone. In this guide, you will learn how to securely connect remote endpoints while systematically balancing connectivity, compliance, and infrastructure security. Why remote access is the backbone of IT and […]
What Are the Benefits of MDM for Your Clients?
Device management is more complex than ever, thanks to the shift to remote and hybrid work setups. Employees now access company systems from personal devices and home networks, increasing the risk of data exposure and operational inefficiencies. This is where understanding the Mobile Device Management (MDM) benefits becomes essential. MDM helps organizations secure, monitor, and […]
How to Recover Data After a Ransomware Attack on Microsoft 365
When ransomware strikes, files can be encrypted, and critical business data may become inaccessible, disrupting normal operations. Minimizing downtime requires immediate containment and effective data protection, recovery measures, and a strong Microsoft 365 ransomware protection strategy. In this guide, you will learn how to quickly contain breaches, restore affected workloads, and prevent permanent data loss. […]
Netacea and Queue-it Team Up To Stop Bots Before They Reach The Queue
The post Netacea and Queue-it Team Up To Stop Bots Before They Reach The Queue appeared first on Netacea.
Microsoft shares workaround for Windows domain login issues
Microsoft shared a temporary fix on Wednesday for a known issue that prevents Windows 11 users from logging in with valid domain credentials after installing the September 2026 security updates. [...]
Cisco warns of max severity ISE zero-day exploited in attacks
Cisco has released security updates to address a maximum-severity Identity Services Engine vulnerability that attackers are actively exploiting in the wild. [...]
FTP Server What is? Everything You Need to Know
If you’ve ever downloaded a software update from a company’s website, uploaded a website’s files to a hosting provider, or sent a large batch of documents to a client, there’s a good chance an FTP server was doing the work behind the scenes. It’s one of the oldest pieces of internet infrastructure still in daily […]
What’s New Device Platform Intelligence on Sep 17, 2026
Go to Device Platform Intelligence Added Platforms 12 Platforms are added Platform Name Node Type2 Node Type Arista DCS-7010X-48 Switch Switch Switch Canon imageFORCE C5170 Printer Printer Printer DJI Osmo Pocket 4P Camera ICS/OT IoT/OT Honor 600 Lite Phone Mobile Phone Mobile Device Huawei Qingyun C5e Tablet Tablet & PMP Mobile Device Motorola Moto G […]
What’s New Device Platform Intelligence on Sep 17, 2026
Go to Device Platform Intelligence Added Platforms 12 Platforms are added Platform Name Node Type2 Node Type Arista DCS-7010X-48 Switch Switch Switch Canon imageFORCE C5170 Printer Printer Printer DJI Osmo Pocket 4P Camera ICS/OT IoT/OT Honor 600 Lite Phone Mobile Phone Mobile Device Huawei Qingyun C5e Tablet Tablet & PMP Mobile Device Motorola Moto G […]
CrowdStrike SafeMind: When the Best Offense Builds the Best Defense
CrowdStrike Named a Leader in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
Unpacking a laZzzy Donut
Six stages. Multiple encryption layers. One static analysis. In this blog, we unpack a multi-stage malware loader combining Python obfuscation, Donut shellcode, and laZzzy PE encryption, without executing the payload.
Securing Communications in an AI-Assisted World
Christine Gadsby spoke with Decipher's Dennis Fischer about cybersecurity’s evolution, mobile communications risks, AI-driven threats, and secure government communications.
Unmasking ShadowParasite: The Invisible Cyber Fraud Network Hijacking Everyday Payments
Reading Time: 10 minsAn investigation by Lumu CTI exposes a Colombian payment fraud network using fake payment portals to hijack everyday utility bills and harvest banking credentials. The post Unmasking ShadowParasite: The Invisible Cyber Fraud Network Hijacking Everyday Payments appeared first on Lumu Technologies.