Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

202 matching stories — announcement, in Intrusion Detection and Prevention Systems — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA

Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was

Announcement

Agentic Denial of Service Attack: The Emerging AI Risk Hiding in Plain Sight

Picture a security operations center (SOC) in the age of AI. Alerts are pouring in and AI agents are doing exactly what they were built to do: pulling endpoint telemetry, querying threat intelligence, searching identity logs, summarizing findings and opening cases. Then the AI workflows get slower, and suddenly token budgets are running low. Investigation […] The post Agentic Denial of Service Attack: The Emerging AI Risk Hiding in Plain Sight appeared first on Infoblox Blog.

Announcement

What if Your Analyst Could Just Ask? Connecting Tenable Findings to Infoblox Network Identity with MCP

The Missing Context behind Every Vulnerability Finding Vulnerability management teams rarely have too few findings. What they’re usually missing is context. A scanner can report that an IP address has dozens of critical vulnerabilities. Before anyone can act on that, someone still has to answer a more basic set of questions: What is this device? […] The post What if Your Analyst Could Just Ask? Connecting Tenable Findings to Infoblox Network Identity with MCP appeared first on Infoblox Blo

Announcement

New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs

Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.

Announcement

Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection

Threat research is always a bit of a cat-and-mouse game, and it’s often made more so when an actor survives years in the face of scrutiny. The actors behind the so-called Help Traffic Distribution System (TDS) are one such case. They’ve been active since at least April 2017 and have been largely unaffected by the […] The post Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection appeared first on Infoblox Blog.

Announcement

Cisco warns of actively exploited Secure Email Gateway flaw

A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co

Announcement

Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500

Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.

Announcement

Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own

Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero

Announcement

Protect What Is Privileged

Your Attorneys Shouldn’t Be the Last Line of Defense Law firms sell trust. Clients hand over their most sensitive information, like deal terms, litigation strategy, health records and Social Security numbers, because they believe it’s safe with you. That trust is under real pressure. Cyberattacks on law firms nearly doubled last year, and in the …

Announcement

SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing

The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers

Announcement

Diamond Model in Deep Threat Research: The Four Corners of an Intrusion

Every intrusion involves more than just malware or a compromised IP — it involves a threat actor, the tools they wield, the infrastructure they operate through, and the victim they target. Understanding how these elements connect is often more valuable than looking at any one of them in isolation. That’s why Prime Architect visualizes adversary […] The post Diamond Model in Deep Threat Research: The Four Corners of an Intrusion appeared first on SOC Prime.

Announcement

Integrations of the Month

Jonathan Peyster Director of Product Management, Silent Push This month’s three integrations are not similar on the surface. Google SecOps is a SIEM, Abstract Security is a data pipeline platform and OpenCTI is where your CTI team probably already lives. However, customers running more than one of these integrations have mentioned the same problem to […] The post Integrations of the Month appeared first on Silent Push.

Announcement

Danglegeddon: The Full Research Report Is Now Available

Recently, Silent Push researchers ran a dangling DNS takeover simulation to show how easily forgotten infrastructure becomes an entry point. The full findings are now live in our latest research report. Dangling DNS records get left behind when infrastructure changes and nobody cleans up the pointer. Attackers already scan for these gaps, and they are […] The post Danglegeddon: The Full Research Report Is Now Available appeared first on Silent Push.