Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
347 matching stories — announcement, in Insider Threat Detection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
EvilTokens has quickly become one of the top PhaaS platforms, enabling device code phishing attacks through AI-assisted lures, automated infrastructure, and token theft. In collaboration with partners, Microsoft Digital Crimes Unit (DCU) facilitated a disruption of EvilTokens infrastructure and operations. The post Unmasking EvilTokens: Getting to the root of device code phishing appeared first on Microsoft Security Blog.
The EvilTokens platform that compromised more than 12,000 Microsoft accounts at over 10,000 organizations has been disrupted in an effort led by Microsoft's Digital Crimes Unit (DCU). [...]
⏱ 3 min See how to create and configure a monitoring policy in Veriato to control what activity is captured, how it is categorized, and which users are monitored. The post Configuring Your Monitoring Policy appeared first on Veriato.
Nisos The Insider Risk Lifecycle: Before, During and After Employment The traditional view of insider risk starts with the employee. Someone with badge access, a laptop, and login credentials, whose behavior might shift in a way that puts data, systems, or people at risk... The post The Insider Risk Lifecycle: Before, During and After Employment appeared first on Nisos by Nisos
Security alerts can tell you something happened, but not always what it means. Learn how digital and behavioral evidence can help close the evidence gap in employee investigations and provide the context needed to understand what happened. The post Employee Investigations: How to Close the Digital Evidence Gap appeared first on Veriato.
Your organization almost certainly has a code of conduct, an internal audit department and a hotline. So did the victims. In this post, we look at the eighteen anti-fraud controls ACFE measured in Occupational Fraud 2026 — and why two of the four most effective are in place at fewer than half of organizations.
Nisos US Election Bomb Threat Hoaxes: 2024–2026 Analysis A collaborative analysis of past (2024-2025) and emerging election bomb threat activity, prepared for election officials and law enforcement... The post US Election Bomb Threat Hoaxes: 2024–2026 Analysis appeared first on Nisos by Nisos
Nisos Nisos DPRK Investigation Featured on NBC News NBC News covered our investigation into industrial-scale infiltration of US companies... The post Nisos DPRK Investigation Featured on NBC News appeared first on Nisos by Nisos
Executive Summary: DragonForce is a financially motivated ransomware group. It became active in 2023 and later developed a Ransomware-as-a-Service (RaaS) model. Instead of doing all attacks by itself, DragonForce provides ransomware tools and services to affiliates. These affiliates use the tools to attack organizations and share the ransom money with DragonForce. DragonForce uses double extortion. […]
UBA and UEBA are closely related, but the difference matters for modern Insider Risk Management. Learn how behavioral analytics has evolved to provide greater context across human and non-human activity—and help security teams identify and respond to meaningful risk. The post UEBA vs. UBA: What’s the Difference and Why It Matters for Insider Risk Management appeared first on Veriato.
The Hire That Was Never Vetted Most breaches announce themselves. Ransomware locks screens. Phishing kicks off a chain of alerts. But some of the most damaging intrusions never trip a single traditional control, because they don’t start with a stolen credential or an exploited vulnerability. They start with a job offer. A fabricated identity clears […]
What is Employee Monitoring? In broad terms, employee monitoring is watching the activity of an individual on the job. The post What is Employee Monitoring? Benefits, Types, Best Practices first appeared on Teramind Blog | Data Security & Workforce Management.
Most employee monitoring tools don’t cost what their pricing pages say they do. Between onboarding fees, custom integrations, setup and training, IT overhead, and legal reviews, the true cost can be much higher — and harder to quantify. These extra costs usually aren’t hidden on purpose. More often, they come from the real-world complexity of […] The post What is the True Cost of Employee Monitoring Software? first appeared on Teramind Blog | Data Security & Workforce Management.
Are you struggling to keep up with the lightning-fast adoption of AI and remote work? Traditional data protection tools have a massive blind spot: the endpoint, where rogue applications and Shadow AI operate completely out of sight. In this post, we break down the essential features of modern employee monitoring software. You’ll gain valuable insights […] The post 45+ Employee Monitoring Software Features and Benefits first appeared on Teramind Blog | Data Security & Workforce Manage
Executive Summary Threat actors are actively impersonating Adobe Sign (hxxps://chickplaybox[.]com) to deliver PureLogs Stealer in memory. The campaign relies on complex obfuscation, process environment variable storage, and image steganography to minimize on-disk forensic artifacts. Fingerprinting & Exfiltration:The landing page uses Cloudflare Turnstile and ipapi.co to collect victim IP, hostname, geolocation, and browser metadata, sending real-time alerts to […]
Most organizations assume their security posture is reasonably solid until an assessment proves otherwise. That gap between perceived and actual security maturity is wider than many leadership teams expect. Recent survey data shows that fewer than a third of organizations conduct regular risk assessments at all, even though more than 70 percent of large enterprises […] The post What a Cybersecurity Risk Assessment Actually Uncovers appeared first on Secure Halo.
Is your security team drowning in alerts? False positives aren't just annoying — they're a serious security risk. In this post, we explore five warning signs that your detection rules are crying wolf and share practical strategies to restore clarity to your security operations.