Why the Tools You Already Own Won’t Make You PQC-Ready
Source scanners, SBOMs, certificate managers and questionnaires all answer a different question — and none of them inspects the software that shipped.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
148 matching stories — announcement, in Malware Analysis — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Software on the Battlefield Has to Earn Trust Before It Runs
Software-defined warfare puts constantly changing code into operational systems with no human review. Ken Ammon makes the case for deciding trust before execution, based on what code can do.
Tom Bevilacqua Joins CodeHunter’s Board of Directors
Tom Bevilacqua, former E*TRADE EVP and founder of ArrowPath Venture Partners, joins CodeHunter’s Board of Directors to help expand Zero Trust for Code across enterprise and government.
DORA TLPT Requirements Explained: Where Threat Intelligence Fits
The DORA TLPT requirements push selected EU financial entities beyond standard penetration testing. TLPT must be based on realistic threat scenarios, relevant threat actors, and current intelligence about how attacks are actually carried out. That makes threat intelligence a core part of the process. It helps define what should be tested, which TTPs matter, and […] The post DORA TLPT Requirements Explained: Where Threat Intelligence Fits appeared first on ANY.RUN's Cybersecurity Blog.
WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is particularly significant from a threat-intelligence perspective because it removes the requirement for an attacker to first obtain valid credentials or authenticate to the target application. The exploitation chain […] The post WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack appeare
The Next MOVEit May Already Be in Your File Transfer Queue
MFT and other trusted systems collect files, access and connections. Patching and inspecting what moves through it are separate defenses.
How RL mapped a Midnight Blizzard-linked campaign from two hashes
ReversingLabs expanded the published hashes into a staging server, five stagers, two lure files and the domain-to-server links.
Fake AI Attacks Spread Across US Companies: How MSSPs Can Stop Incidents Early
Attackers are impersonating popular AI products to distribute malware, steal browser sessions, and compromise business accounts. ANY.RUN linked 1,258 public sandbox analyses to fake AI campaigns between April and October of 2026. The campaigns also increase operational pressure on MSSPs serving US businesses, which accounted for 16% of country-attributed targets. Similar attacks
Your MSSP Added 10 New Clients. What Breaks First?
Adding 10 new clients sounds like exactly the kind of problem an MSSP wants to have. More revenue, more accounts, more room to grow. But growth also brings more alerts, suspicious files and URLs, investigations, escalations, reports, and SLA commitments. And if too much of that work still depends on manual analyst effort, those 10 […] The post Your MSSP Added 10 New Clients. What Breaks First? appeared first on ANY.RUN's Cybersecurity Blog.
Which Malware Analysis Platforms Use ML/AI-Driven Detection
Malware is becoming increasingly sophisticated, making it difficult for organizations to detect emerging threats using traditional signature-based security tools alone. Attackers use techniques such as code obfuscation, polymorphism, and sandbox evasion to bypass conventional security measures. Artificial intelligence (AI) and machine learning (ML) are transforming malware analysis by helping security teams identify suspicious patterns, analyze […] The post Which Malware Analysis Platforms
Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access?
Remote and hybrid work have changed how organizations manage access to corporate applications, business data, and internal networks. Employees, contractors, and third-party vendors now connect from different locations and devices, making secure remote access a critical part of enterprise cybersecurity. For years, Virtual Private Networks (VPNs) have been a standard solution for remote connectivity. However, […] The post Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access? ap
Behavioral Risk Brief: Tensorlake npm Package Compromised
Tensorlake’s own release workflow published an npm package version that stole credentials at install. This brief covers what the code did and the controls to require for every new release.
Antiy Detected a Stealthy Contamination Attack Targeting Chinese Open-source AI Model Code Repository
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese 1.Summary In September 2026, Antiy CERT monitoring revealed that 71 files from the same batch, submitted under the guise of “model updates,” were successively uploaded to the official model repositories of two leading providers on the Hugging […]
Nightwing CEO has a Labor Day message for staff – and apparently The Register
Nothing says ‘For internal use only’ quite like emailing it to the press
From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment
Since May 2026, StopAndProtect has quietly compromised thousands of vulnerable WordPress sites in a sophisticated, multilayered campaign uncovered by CheckPoint. The initial vector is social engineering via CAPTCHA prompts, followed by a series of user-induced downloads, and finally, loader and payload execution. It is suspected that an OPSEC failure may have caused the threat actor […] The post From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment appear
AI in DFIR 101: Why AI isn’t Good for DFIR Collections
AI is useful in investigations, but the collection phase is... The post AI in DFIR 101: Why AI isn’t Good for DFIR Collections appeared first on Cyber Triage.
SOC Forensics: 3 DFIR Gaps All EDRs Have
EDRs are great. They are fast, detect most attacks, and... The post SOC Forensics: 3 DFIR Gaps All EDRs Have appeared first on Cyber Triage.
AI in DFIR 101: Why You Should Use AI for Planning
The planning phase of an investigation is where GenAI can... The post AI in DFIR 101: Why You Should Use AI for Planning appeared first on Cyber Triage.
Antiy IEP for Linux Effectively Defends Against Sorry Ransomware
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese 1. Overview On August 10, 2026, the National Computer Virus Emergency Response Center, in collaboration with the National Engineering Laboratory for Computer Virus Prevention and Control Technology, released Early Warning Report on “Sorry” Ransomware, disclosing multiple attacks […]
Website Cloning, Decryption Injection, and Chinese System Verification | Technical and Tactical Tracking of the SwimmingSnake (Silver Fox)
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese 1.Summary Antiy CERT has recently been continuously monitoring the latest attack activities of the “SwimmingSnake (Silver Fox)” black market gang and analyzing its technical methodologies: this gang targets the Bing search engine by conducting SEO poisoning, establishing […]
The HuggingFace Incident: What Do We Know?
On July 21, 2026, OpenAI disclosed that their large language models (LLMs) had "escaped" their testing environment and compromised Hugging Face's production infrastructure during a training exercise. As of the publication of this article, this is the first well-documented incident involving an AI agent compromising real production infrastructure. While we don't know everything in great detail, let's review the facts of the situation.
5 Things Every Security Team Should Know About Mythos
Artificial intelligence is changing cybersecurity at an incredible pace. Every few months, a new breakthrough sparks discussions across the industry—but few have generated as much conversation recently as Mythos. Some headlines suggest it could revolutionize software security. Others warn it could become the next major weapon for cybercriminals.
Your NDR Is Capturing Evidence of Threats You Haven’t Found Yet
How Corelight and Stairwell Close the Loop on Network File Intelligence Every day, your network detection and response platform is extracting files from the wire through executables transferred over SMB, scripts pulled via FTP, email attachments traversing unencrypted channels. It flags known-bad files, matches against current threat intelligence, and moves on. What it cannot do […] The post Your NDR Is Capturing Evidence of Threats You Haven’t Found Yet appeared first on Stairwell.
How to Prevent a Ransomware Attack: 5 Steps to Find Threats Before Encryption Starts
Ransomware is often treated like a moment-in-time crisis: systems lock up, operations stop, and the organization moves into emergency response. But by the time files are encrypted, the attack has usually been underway for days, weeks, or longer. Modern ransomware operations often include phishing, exploitation, credential theft, remote access, malware staging, lateral movement, data theft, […] The post How to Prevent a Ransomware Attack: 5 Steps to Find Threats Before Encryption Starts app