Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
568 matching stories — announcement, in Email Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Most MSPs already sell security awareness training. Keeping it relevant for every user takes ongoing work: building campaigns, tracking failed simulations, and...
Ask receiver teams what's keeping them up at night, and you'll get very different answers. One's worried about a customer's compromised account tanking shared IP reputation. Another's trying to figure out what a cloud service actually does with message data before it comes back with a verdict. A third just wants to ship a policy change without three weeks of testing. These are familiar challenges for email teams at mailbox providers, ISPs and telcos, hosting providers, and cloud email security p
How criminals turn spend-management onboarding into fraud infrastructure, and why you may be accountable for the fraud you never see.
Cofense Phishing Defense Center (PDC) analysts uncovered a device code phishing campaign that impersonates trusted brands, including Microsoft, Syncfusion, and Mimecast, to trick users into granting attackers access to their accounts. Using fake bidding invitations and spoofed authentication pages, threat actors exploit legitimate device code authentication processes to potentially bypass traditional password and multifactor authentication protections.
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
This guide is published by Guardz and includes our own platform: we fit MSPs seeking consolidated security with per-action approval control, while...
Jusqu'à 10 000 euros par jour et par domaine non bloqué, voilà ce que réclamait beIN Sports à plusieurs intermédiaires techniques, dont NordVPN, Surfshark et Cloudflare. Malgré des sites de streaming illégal toujours accessibles, le tribunal judiciaire de Paris a rejeté ses demandes. Une nouvelle décision qui précise les limites des obligations imposées aux fournisseurs de VPN.
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device
Un chercheur en cybersécurité a présenté une faille vieille de seize ans dans les puces Wi-Fi de Broadcom, exploitable à portée du réseau sans connaître le mot de passe de la box. Il a relevé en France une Livebox 5 d’Orange et des box SFR non corrigées.
Modern cloud intrusions rely on structural blind spots: headless OAuth token issuance, pre-consented multi-tenant trust, and resilient operational relay infrastructure. A central...
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
As part of our ongoing series highlighting dmarcian perspectives, Samantha Thompson speaks to the increasing challenge of navigating an ever-changing internet landscape.
Our Ireland-based Professional Services Representative Matia Boldrini and ams OSRAM Group Corporate Information Security Officer Steffen Siguda joined the Certified Senders Alliance to discuss the importance of deploying DMARC and how people are at the crux of a successful DMARC project.
Cybersecurity giant Proofpoint says it will acquire Miami-based data visibility and security company Varonis in an all-cash transaction worth $6.3 billion.
En six mois, plus de 20 000 sous-domaines Cloudflare ont été associés à un réseau d’escroqueries au faux support Microsoft. Derrière ces adresses renouvelées en permanence, une organisation cybercriminelle active depuis 2017.
Proofpoint va racheter Varonis pour environ 6,3 milliards de dollars, payés intégralement en numéraire. Le spécialiste de la sécurité des messageries veut garder un œil sur les données sensibles auxquelles les agents IA ont de plus en plus accès.
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.
OSS tool to reverse binaries, apps, etc. with natural language, new hunting toolkit by Cisco Talos, testing Jev on identity resolution
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co
Digital trust is measurable, and email is where it gets tested the most. Learn what digital trust is, the framework, and how to prove your side of it. The post Digital trust: Framework, services, and safety (in 2027) first appeared on Valimail.
Defend caught 3.7 times more email threats missed by Microsoft Defender than the average add-on
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.
Tech-support scams don't arrive by email; they're bought as ads. How fake Microsoft Support pages reach victims through social, native and programmatic ad networks, and why that path evades email security and domain reputation. The post Anatomy of a Phish: How Tech-Support Scams Buy Their Way Onto Your Screen appeared first on Pixm Anti-Phishing.
2026 October 13
Cybersecurity Awareness Month is the ideal time to investigate and address the risk This year’s Cybersecurity Awareness Month theme is “Don’t Make It Easy for Them.” When it comes to email security, much of the discussion and publicly available advice focuses on helping individuals and organizations recognize suspicious messages and protect the systems receiving them.
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data
The Cofense Phishing Defense Center (PDC) uncovered a phishing campaign that disguises malware as a digital event invitation, exploiting recipients’ curiosity to lure them into downloading a malicious file. The attack uses a fake CAPTCHA and invitation page to deliver a legitimate ConnectWise ScreenConnect installer, which threat actors abuse as a remote access trojan (RAT) to gain control of victims’ devices. This campaign highlights how simple social engineering tactics and the misuse of trust
New study finds 36% of Singapore's office workers can't tell a genuine message from their CEO apart from an AI-generated one, while senior managers are most likely to comply with a cloned CEO voice before verifying it
Your Black Friday campaign is only as good as its inbox placement. Here's how email authentication affects deliverability, open rates, and revenue. The post How to get your Black Friday email marketing program ready first appeared on Valimail.
MCP security controls are necessary, but an attack that begins through MCP may not end there. Learn why AI agents still need detection and response.
MCP connects AI agents to enterprise tools and data. Learn the five MCP security risks and what an MCP security architecture should look like.
Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.
Stripe powers payments for businesses around the world. With global headquarters in Dublin and San Francisco, Stripe isn’t only involved when a customer clicks pay; businesses also use Stripe to communicate with their customers about invoices, receipts, failed payments, and other important account and billing information.
Non-human identities run your infrastructure and send your email. Learn the types, why they're harder to secure than people, and how to gain control. The post Non-human identity security: Your senders that aren’t people first appeared on Valimail.