Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,537 matching stories — in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
Rusty Newton shares a science-backed way to study for security certs: start with the practice exam, quiz yourself, study in short bursts, and plan exam day.
Build identity resilience with Identity Posture Assessment, an on-demand Microsoft 365 report that scores your identity defenses and shows how fast you can fix the gaps.
Attackers may be in your tenant before you connect it. Huntress Managed ITDR Lookback reviews 180 days of Microsoft 365 logins & our SOC acts on active incidents.
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
Most MSPs already sell security awareness training. Keeping it relevant for every user takes ongoing work: building campaigns, tracking failed simulations, and...
How criminals turn spend-management onboarding into fraud infrastructure, and why you may be accountable for the fraud you never see.
Kaspersky experts explain the security issues affecting warehouse environments. We break down initial access vectors specific to warehouses, and discuss the impact of a compromise.
I want to write this post differently from the others in this series - not as analysis, not as a technical argument, but as a direct letter to the people who have made this journey possible.
The China-based threat group uses DLL sideloading in these attacks
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
At a glance: ConnectWise discovered unauthorized access involving application identities associated with ConnectWise Cloud Backup on October 14, disclosed the incident on October 16, and disabled affected application identities on October 17. Field Effect notified affected clients on October 16, the same day of the disclosure, after identifying tenants that had authorized the affected ConnectWise Cloud Backup application. Microsoft Threat Intelligence observed successful authentication activity
We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
It's 8 a.m. on a Monday. Your superintendent can't open the updated drawings from the jobsite trailer. Your office manager has a supplier email asking to change banking details before Friday's payment. And the cyber insurance renewal questionnaire is due at the end of the month.
About: CVE-2026-102764 is a critical authentication bypass vulnerability in BeyondTrust Remote Support that is being actively exploited in the wild. The flaw allows an unauthenticated attacker to perform file operations on vulnerable appliances and has been used to deploy web shells and gain control of affected systems. Organizations should immediately apply the BT26-05-RS patch and investigate self-hosted appliances for signs of compromise.
AI made speed cheap, and in the context era, SOCs win or lose on the quality of their calls.
Overview  ConnectWise is investigating unauthorized access involving application identities associated with ConnectWise Cloud Backup, formerly SkyKick Backup. The company publicly disclosed the incident on October 16, 2026. On October 17, it disabled seven application identities associated with Cloud Backup and Cloud Management and revoked certificates used for affected Cloud Backup connections.  According to Microsoft Threat […]
Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service... The post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.
ConnectWise has disabled key cloud services and is investigating unauthorized access to customers’ Microsoft 365 environments after a credential tied to its Cloud Backup platform was compromised and used to authenticate into customer tenants, prompting Huntress to identify suspicious sign-ins across 162 organizations. The activity involved the Cloud Backup application obtaining Microsoft Graph access tokens using a credential associated with ConnectWise’s own tenant. Security firm Huntress has a
It’s Saturday, 6:04 a.m. First tee time is in 26 minutes.
This guide is published by Guardz and includes our own platform: we fit MSPs seeking consolidated security with per-action approval control, while...
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
Peak trading is when your store network is busiest, and most exposed. Twelve practical checks to run before the rush, so every terminal stays online and every card stays protected. Black Friday, the run to Christmas and the Boxing Day sales put more load on your store network than any other time of year. In […] The post The Secure Checkout Checklist appeared first on Orro.
Cybersecurity insurance versus incident response: learn why small businesses need both, what each covers, and how to prepare before an attack strikes. The post Cybersecurity Insurance Versus Incident Response appeared first on mPoweredIT.
Cybersecurity insurance versus incident response: learn why small businesses need both, what each covers, and how to prepare before an attack strikes. The post Cybersecurity Insurance Versus Incident Response appeared first on mPoweredIT.
No novelty required to be effective
Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants
Modern cloud intrusions rely on structural blind spots: headless OAuth token issuance, pre-consented multi-tenant trust, and resilient operational relay infrastructure. A central...
Learn how to protect client data with practical controls for access, devices, email, backups, and staff so your business stays trusted and productive. The post How to Protect Client Data Without Slowing Work appeared first on mPoweredIT.
Todyl has uncovered indicators of compromise regarding The ConnectWise Cloud Backup and Microsoft 365 tenants. Read our findings here.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
When a cloud incident hits, every minute counts.
Some mid-size organizations evaluate managed IT services the same way they choose office equipment. They check the price, examine the features, and make a decision. That might be fine for buying a device that serves a single function and will last a year or two. But managed IT service providers require a more thorough evaluation.Managed IT services are not limited to single functions, like providing help desk support. Providers today offer a full range of services, from day-to-day IT and cyberse
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is particularly significant from a threat-intelligence perspective because it removes the requirement for an attacker to first obtain valid credentials or authenticate to the target application. The exploitation chain […] The post WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack appeare
QuartzLine is a working PDF viewer with a backdoor inside, spread in part through Google Ads. See what it does in real environments, plus IOCs.