Why the Tools You Already Own Won’t Make You PQC-Ready
Source scanners, SBOMs, certificate managers and questionnaires all answer a different question — and none of them inspects the software that shipped.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
169 matching stories — in Malware Analysis — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Software on the Battlefield Has to Earn Trust Before It Runs
Software-defined warfare puts constantly changing code into operational systems with no human review. Ken Ammon makes the case for deciding trust before execution, based on what code can do.
Tom Bevilacqua Joins CodeHunter’s Board of Directors
Tom Bevilacqua, former E*TRADE EVP and founder of ArrowPath Venture Partners, joins CodeHunter’s Board of Directors to help expand Zero Trust for Code across enterprise and government.
DORA TLPT Requirements Explained: Where Threat Intelligence Fits
The DORA TLPT requirements push selected EU financial entities beyond standard penetration testing. TLPT must be based on realistic threat scenarios, relevant threat actors, and current intelligence about how attacks are actually carried out. That makes threat intelligence a core part of the process. It helps define what should be tested, which TTPs matter, and […] The post DORA TLPT Requirements Explained: Where Threat Intelligence Fits appeared first on ANY.RUN's Cybersecurity Blog.
WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is particularly significant from a threat-intelligence perspective because it removes the requirement for an attacker to first obtain valid credentials or authenticate to the target application. The exploitation chain […] The post WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack appeare
Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20261017)
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update                            Statistical period: October 10, 2026 ~ October 16, 2026 Antiy AVL SDK anti
The Next MOVEit May Already Be in Your File Transfer Queue
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses.
How RL mapped a Midnight Blizzard-linked campaign from two hashes
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets. Similar attacks
Your MSSP Added 10 New Clients. What Breaks First?
Adding 10 new clients sounds like exactly the kind of problem an MSSP wants to have. More revenue, more accounts, more room to grow. But growth also brings more alerts, suspicious files and URLs, investigations, escalations, reports, and SLA commitments. And if too much of that work still depends on manual analyst effort, those 10 […] The post Your MSSP Added 10 New Clients. What Breaks First? appeared first on ANY.RUN's Cybersecurity Blog.
Which Malware Analysis Platforms Use ML/AI-Driven Detection
Malware is becoming increasingly sophisticated, making it difficult for organizations to detect emerging threats using traditional signature-based security tools alone. Attackers use techniques such as code obfuscation, polymorphism, and sandbox evasion to bypass conventional security measures. Artificial intelligence (AI) and machine learning (ML) are transforming malware analysis by helping security teams identify suspicious patterns, analyze […] The post Which Malware Analysis Platforms
Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access?
Remote and hybrid work have changed how organizations manage access to corporate applications, business data, and internal networks. Employees, contractors, and third-party vendors now connect from different locations and devices, making secure remote access a critical part of enterprise cybersecurity. For years, Virtual Private Networks (VPNs) have been a standard solution for remote connectivity. However, […] The post Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access? ap
Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20261010)
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: October 3, 2026 ~ October 9, 2026 Antiy AVL SDK anti-virus engine released a total of […]
Behavioral Risk Brief: Tensorlake npm Package Compromised
Tensorlake’s own release workflow published an npm package version that stole credentials at install. This brief covers what the code did and the controls to require for every new release.
Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20261003)
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: September 26, 2026 ~ October 2, 2026 Antiy AVL SDK anti-virus engine released a total of […]
Nightwing CEO has a Labor Day message for staff – and apparently The Register
Nothing says ‘For internal use only’ quite like emailing it to the press
From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment
Since May 2026, StopAndProtect has quietly compromised thousands of vulnerable WordPress sites in a sophisticated, multilayered campaign uncovered by CheckPoint. The initial vector is social engineering via CAPTCHA prompts, followed by a series of user-induced downloads, and finally, loader and payload execution. It is suspected that an OPSEC failure may have caused the threat actor […] The post From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment appear
AI in DFIR 101: Why AI isn’t Good for DFIR Collections
AI is useful in investigations, but the collection phase is... The post AI in DFIR 101: Why AI isn’t Good for DFIR Collections appeared first on Cyber Triage.
SOC Forensics: 3 DFIR Gaps All EDRs Have
EDRs are great. They are fast, detect most attacks, and... The post SOC Forensics: 3 DFIR Gaps All EDRs Have appeared first on Cyber Triage.
AI in DFIR 101: Why You Should Use AI for Planning
The planning phase of an investigation is where GenAI can... The post AI in DFIR 101: Why You Should Use AI for Planning appeared first on Cyber Triage.
The HuggingFace Incident: What Do We Know?
On July 21, 2026, OpenAI disclosed that their large language models (LLMs) had "escaped" their testing environment and compromised Hugging Face's production infrastructure during a training exercise. As of the publication of this article, this is the first well-documented incident involving an AI agent compromising real production infrastructure. While we don't know everything in great detail, let's review the facts of the situation.
5 Things Every Security Team Should Know About Mythos
Artificial intelligence is changing cybersecurity at an incredible pace. Every few months, a new breakthrough sparks discussions across the industry—but few have generated as much conversation recently as Mythos. Some headlines suggest it could revolutionize software security. Others warn it could become the next major weapon for cybercriminals.