Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
601 matching stories — in Email Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Best Practices for Financial Data Sovereignty in the Netherlands: A Strategic Framework for Enterprise Security Leaders
Top 5 DORA compliance challenges for Luxembourg banks
TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords
Ghost Service Accounts Enable M365 Data Theft in Chile
Proofpoint Banks on Intent‑Based Detection
Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer
An active ClickFix campaign has been observed compromising legitimate Ukrainian business websites to inject bogus Cloudflare verification pages and trick victims into downloading a previously undocumented information stealer called Psychedelic. "When a visitor interacts with the page, the lure copies a Windows Installer command to the clipboard and instructs the visitor to paste it into the
Darktrace Launches Signal Labs to Research Emerging Risks of Enterprise AI Agents
How to create and publish your own DMARC record
Learn everything you need to know about DMARC to create and publish your own DMARC records and keep them secure and up to date. The post How to create and publish your own DMARC record first appeared on Valimail.
How to Fix “Sender Not Authorized for Relay” (SMTP 550 5.7.367)
Originally published at How to Fix “Sender Not Authorized for Relay” (SMTP 550 5.7.367) by Hagop K.. Getting a “sender not authorized for relay” error means your email could not be sent through the SMTP server you were using. You may see this error when sending emails from Outlook, Microsoft 365, a website, a scanner, a CRM, or another application. The error is often shown with the SMTP status code 550 5.7.367. […] The post How to Fix “Sender Not Authorized fo
No One Gets Phished: The New Group-IB Browser Agent Applies Predictive Intelligence At The Click
One employee reaches a phishing page. The tab closes, the domain is blocked for every browser in the company, and the targeted password is already being reset. The new Group-IB Browser Agent brings the corporate browser under XDR coverage, checking every page against predictive Threat Intelligence in real time.
Placeholder domain used in dev docs now serves ClickFix attacks
The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.
EasyDMARC Launches Email Trust Platform to Restore Email Trust and Performance in the Era of AI Threats and Agentic Intelligence
Originally published at EasyDMARC Launches Email Trust Platform to Restore Email Trust and Performance in the Era of AI Threats and Agentic Intelligence by Anush Yolyan. Defining the next generation of critical email infrastructure for modern business continuity and risk management Dover, Delaware | September 23, 2026 — Building on years of experience helping organizations implement and enforce email authentication at scale, EasyDMARC today introduces the Email Trust Platform, delivering ag
CARBONATO: a botnet built around an AI agent
ThreatDown researchers uncovered CARBONATO, a Docker botnet built around an AI agent that compromises exposed Docker daemons, spreads across reachable hosts, and gives operators a Telegram-controlled tool for post-compromise activity. The post CARBONATO: a botnet built around an AI agent appeared first on ThreatDown.
KnowBe4 Shuts Down Shadow AI with Agent Security Innovation
New Agent Risk Manager browser extension performs active discovery of new and unknown domains allowing security admins to block, warn or allow the sites
MSP Security Bundle: What to Include, How to Tier It, and Why Single-Vendor Matters
MSPs can easily find security tools. The challenge is turning those tools into a service clients can understand, technicians can operate consistently,...
RemControl: AI Built the Overlays. Victims Lose their PINs
Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.
Beyond Point-in-Time Testing: 5 Use Cases for Agentic Red Teaming
Traditional red teaming is just a snapshot. Agentic red teaming uses autonomous AI agents to continuously reason within your environment. Here are the five use cases we see that security teams should adopt first.
Beyond Human Risk: A Better Way to Build Secure Behavior
Lee Martin explores why security awareness programs need to move beyond measuring activity and risk to focus on whether employees are actually getting better at recognizing and responding to phishing. Cofense’s approach to Secure Behavior Management connects measurable employee competency with real-world phishing and remediation signals, giving organizations a clearer picture of what employees know, where gaps exist, and how they respond when real threats reach the inbox.
Cofense Expands AI-Driven Phishing Defense Platform to Advance Secure Behavior Management
Cofense, the leader in intelligence-driven post-perimeter phishing defense, today announced an expansion of its AI-driven Phishing Defense Platform through Cofense Command Center, its orchestration layer for measurement and reporting. The new Competency Dashboard measures how employees recognize, report and respond to phishing threats, giving security teams evidence of program effectiveness rather than training completion.
AI malware just removed the human from the attack loop
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first “LLM-as-C2” architecture that can fully automate the command-and-control (C2) chain. Dubbed CLOSEDQUORUM, the malware binary relies on a panel of large language model (LLM) judges to map and execute the
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
Complete guide to account takeover (ATO) fraud prevention
Account takeover (ATO) fraud gives attackers a legitimate account to work from. Learn how ATO happens, the red flags, and ways to prevent it. The post Complete guide to account takeover (ATO) fraud prevention first appeared on Valimail.
ReliaQuest Recognized as a Strong Performer in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
See Why ReliaQuest was named a Strong Performer.
What is SMTP Relay and How Does It Work?
Originally published at What is SMTP Relay and How Does It Work? by Ruben Khachatryan. When you send an email, it does not always go straight from your email app to the recipient’s inbox. In many cases, the message passes through one or more mail servers before it reaches its final destination. This process of moving an email from one mail server to another is called SMTP relay. SMTP relay […] The post What is SMTP Relay and How Does It Work? appeared first on EasyDMARC.
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
MSP Cybersecurity Tool Pricing Comparison Matrix (2026)
You sit down to price a security stack for a 40-seat client. You need 5 numbers, one each for EDR, MDR, email...
From Payment Plan to Ransomware - Inside a Global Group Attack
The Cofense Phishing Defense Center (PDC) team has recently investigated a newly emerged Ransomware-as-a-Service (RaaS) operation organized by the Global Group, a financially motivated cybercriminal group running a Ransomware-as-a-Service (RaaS) platform. Targeting high-value, large-scale enterprises across different industries, escalating threats to the global digital economy. Global Group is a rebranding of the legacy Black Lock and Mamona ransomware families by inheriting an established backe
Authenticate first, evaluate second: What DMARC teaches us about AI agent identity
AI-written phishing hits a 54% click rate. Detection alone can't keep up. Here's the identity model email solved first, and why AI agents need it now. The post Authenticate first, evaluate second: What DMARC teaches us about AI agent identity first appeared on Valimail.
Cellopoint 祝您中秋節快樂，月圓人團圓，幸福常相伴
Cellopoint wishes you a Happy Moon Festival
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025. "SparroWocky is a modular, C++ backdoor," ESET security researchers Alexandre Côté Cyr and Romain Dumont said in a technical report shared with The Hacker News
Delivery Guru | Halon
Picture this: Inbox placement drops at a major provider. Someone greps the logs. Someone correlates deferral codes across IP pools and tries to remember whether traffic patterns changed overnight. Someone makes a judgment call, adjusts a rule, files the ticket, and watches the queues. Then everyone waits to find out whether it worked. If you run email infrastructure, that isn't a war story. That's Tuesday. Deliverability is one of the most reactive disciplines in engineering. Every incident is b
HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack
Group-IB Threat Intelligence analyzes HEAVYGRAM, a Telegram-based Windows backdoor attributed with moderate confidence to the Iran-linked threat actor Handala Hack. Active since Fall 2023, it has been used to surveil Iranian dissidents, journalists and government opponents, enabling remote command execution, data exfiltration, and persistence over Telegram command-and-control.
MSP Client Security Onboarding Checklist: Security Setup Done Right, Every Time
When an MSP signs a new client, it assumes responsibility for an environment someone else built. Accounts, devices, mailboxes, SaaS connections, and...
DMARC & Cyber Insurance: 2026 Underwriting Trends
Cyber insurance has become a risk management standard for organisations, and insurers have grown increasingly sophisticated in assessing an organisation’s security posture.
Cybersecurity vs. Security Products: What MSPs Need to Know
In this piece our MSP Program Manager shares his observations on how some MSPs focus on pushing security products instead of offering true cybersecurity.