Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,461 matching stories — announcement, in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Broadcom Patches Critical Vulnerabilities Affecting Multiple VMware Products
At a glance: Broadcom has released security updates for vulnerabilities affecting VMware environments that use vCenter, the management component included in VMware Cloud Foundation, VMware vSphere Foundation, VMware Telco Cloud products, and standalone VMware vCenter Server deployments. Successful exploitation could provide unauthorized access to virtualization management systems or allow code execution on affected management servers, potentially exposing infrastructure administration functions.
ScreenConnect leveraged in cyberattacks | Kaspersky official blog
We analyze a campaign that leverages ScreenConnect: distribution through fake websites, AsyncRAT deployment, evasion tactics, and organizational defense recommendations.
Fixing problems with the edge
Three main problems perimeter protection faces, and how to fix them The post Fixing problems with the edge first appeared on Network Box USA.
Patching Isn’t Enough: SharePoint CVE‑2026‑50522
Security Advisory Patching Isn’t Enough: SharePoint CVE‑2026‑50522 Attackers are stealing IIS machine keys through a critical deserialization flaw — access that survives the patch. CVSS 9.8 Critical Status Actively Exploited KEV Added July 22 Federal Deadline July 25 — Passed The Short Version A critical SharePoint deserialization flaw is under active exploitation, and attackers are […]
White-Label Security Done Right: A Buyer's Guide for MSPs
White-label security is only as good as the brand control, SOC quality, and channel commitment behind it. Here's what MSPs should evaluate before signing with a partner.
Wiz’s First 6 Months as Part of Google
Fast gets even faster: redefining security for the AI era and doubling down on our multicloud commit
Deepfakes verändern Social Engineering: Wenn Vertrauen zur Angriffsfläche wird
Generative KI eröffnet nicht nur neue Möglichkeiten für Unternehmen – sie verändert auch die Methoden von Cyberkriminellen. Täuschend echte Stimmen, manipulierte Videos und hochgradig personalisierte Nachrichten machen Social-Engineering-Angriffe zunehmend schwerer erkennbar.
Die Woche in den Nachrichten zu Datenschutzverletzungen
Microsoft outage disrupts Azure and Microsoft 365 as OpenAI’s test models escape containment, raising new fears of autonomous cyberattacks. The post The week in breach news appeared first on Kaseya.
Criptografía postcuántica: por qué las organizaciones deben empezar a prepararse
La computación cuántica promete importantes avances en campos como la investigación, la medicina, la logística o la industria. Pero, su desarrollo y aplicación también plantean un nuevo desafío para la ciberseguridad: la posibilidad de que los futuros ordenadores cuánticos comprometan algunos de los algoritmos criptográficos que actualmente protegen nuestras comunicaciones, transacciones, identidades digitales y datos […] La entrada Criptografía postcuántica: por qué las organizaciones deb
Falcon Platform IOAs Arrive in Falcon Next-Gen SIEM to Identify New Threats
Inside Astaroth's New Spambot Component
How to Conduct an OT Cybersecurity Risk Assessment: A Step-by-Step Guide
Operational Technology (OT) environments are the backbone of industries such as manufacturing, energy, utilities, and critical infrastructure. These systems control physical processes, making them essential for operational continuity and safety. However, as OT environments become increasingly connected to IT networks and cloud platforms, they are also becoming more exposed to cyber threats. Unlike traditional IT […]
Secure by Design in practice: a year of progress on Sophos Firewall
One year on from our last Secure by Design update, we’re changing the format: deeper, per-product updates. First up: the firewall.
Critical OpenWrt DHCPv6 flaw enables potential root-level device compromise
At a glance: POC is now available for a critical OpenWrt vulnerability affecting the odhcpd DHCPv6 service and exposing vulnerable devices to potential remote code execution with root privileges. The vulnerability can be triggered through a single unauthenticated DHCPv6 request from a threat actor with network access to the affected service, and successful exploitation could result in complete control of routers, gateways, firewalls, and other network infrastructure devices. Organizations runnin
Security Bulletin: Active Directory Certificate Services Vulnerability
About: CVE-2026-54121 is a high-severity elevation of privilege vulnerability in Microsoft Active Directory Certificate Services (AD CS). The flaw can allow a low-privileged authenticated attacker to obtain certificates for targeted machine accounts and authenticate as those systems using Kerberos. If leveraged against a domain controller account, successful exploitation could result in full Active Directory domain compromise. Organizations should prioritize applying Microsoft's July 2026 securi
Palo Alto Networks Achieves Global CBPR and PRP Certifications
Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. Fulfilling that mission demands that we continually ensure our customers’ trust and instill confidence in our … The post Palo Alto Networks Achieves Global CBPR and PRP Certifications appeared first on Palo Alto Networks Blog.
The Death of Navigational Commerce: From Search Bars to AI Agents
For decades, businesses assumed customers must learn a catalog before buying from it. It's a B2B issue too — shop techs, distributors ordering for someone else's vehicle. Now AI agents handle that translation: an agent either has the structured data to make the right call, or recommends the wrong part with total confidence. In an agentic world, that's the difference between winning the recommendation and never being in the running. The post The Death of Navigational Commerce: From Search Bars to
Security Bulletin: SSL-VPN Symlink Persistence Patch Bypass in FortiOS
About: CVE-2025-68686 is an information disclosure and security patch bypass vulnerability affecting the SSL-VPN functionality in FortiOS. The vulnerability may allow an unauthenticated attacker to bypass a previously released patch designed to prevent a symbolic-link persistence mechanism used in earlier attacks. Exploitation requires the FortiOS device to have already been compromised at the filesystem level through another vulnerability. Successful exploitation may allow an attacker to retain
When exploits move in hours, patching must move faster
Ask most IT teams where they spend their patching effort, and the answer is the operating system. Windows updates, macOS releases, Linux kernels. But that's not where attackers land. The third-party applications sitting on top of your OS, the browsers, PDF readers, and runtimes on every endpoint, are the number one exploited surface in your environment. And for most teams, they're systematically under-managed. That gap is where real risk lives. Here's why third-party applications matter more tha
Meet the Expletive: Josh Carter, SOC Manager
Meet Josh Carter, SOC manager at Expel. He's a self-taught multi-instrumentalist with a firm stance on pizza: triangles only.
Alertas de seguridad – Julio 2026
Vulnerabilidad en productos de Lenze Se ha reportado una vulnerabilidad de severidad alta. La explotación de este fallo por parte de un atacante podría habilitar el acceso administrativo al dispositivo sin autorización, comprometiendo así la confidencialidad, integridad y disponibilidad del dispositivo afectado. Recursos Afectados Controller c430: firmware c4x0 anteriores a 1.15.2 Controller c520: firmware c5x0 anteriores a 1.15.2 […] La entrada Alertas de seguridad – Julio 2026 apar
Security Operations Management for MSPs and IT Teams
Failed patch? Here's how N-zo tells you why A patch fails on a dozen devices. Now the real work starts: pulling logs, hunting through vendor KB articles, and piecing together what actually went wrong. Multiply that by every failed deployment, every patch cycle, and every endpoint in your estate, and you've got one of the biggest hidden costs in patch operations. It doesn't have to work that way. The signals that explain a patch failure already exist. The problem is that reading them takes time a
Not the Target, Yet Still at Risk
Why attackers don’t have to target your bank to impact it An Article Review Nation-state threat actors sound like something only federal agencies need to worry about, but the line isn’t that clean anymore. A recent SC Media explainer breaks down what the term actually means: these groups have some level of government backing, a […] The post Not the Target, Yet Still at Risk appeared first on infotex.
What AI Agents Taught Me About the Autonomous SOC
When I talk about agentic AI and the path toward an autonomous SOC at Netenrich, I try to be specific rather than visionary - because the specificity is what is actually useful to the people building or considering these systems.
What the CMMC Phase II Suspension Means for MSPs and Their DIB Customers | Todyl
The Department of War has updated their requirements for CMMC Phase II Read this blog to see how you can prepare your defense contractor clients for the changes.
CMMC 2.0 Compliance Guide for MSPs Serving DoD Contractors | Todyl
MSPs helping DoD contractors achieve CMMC 2.0 compliance need a clear scope, defined responsibilities, and the right security stack. Here is your practical guide.
ClickFix on macOS: how the Terminal-based attack works, and how to protect yourself | Kaspersky official blog
We break down how ClickFix works on macOS: why attackers trick users into running commands in Terminal, what data the malware steals, and how to protect your device.
When red teams go off the rails, who’s at fault?
Why do red team reports focus on tactics attackers rarely use? Expel's data reveals the misalignment—and a better model.
How to Prepare for a Cybersecurity Audit | Locknet Managed IT
E-Mail-Sicherheit gemäß NIS2
With evolving AI threats, traditional defences are no longer enough  Email has long been a point of vulnerability for businesses, but the scale and sophistication of attacks are evolving, posing The post Email security under NIS2 appeared first on Kaseya.
Cyber-Resilienz im Zeitalter von NIS2: Warum Backups nicht mehr nur eine Aufgabe der IT sind
A question every business should be asking is: How quickly can we get back to business if something goes wrong?  Downtime is expensive, and in The post Cyber resilience in the age of NIS2: Why backup is no longer just an IT function appeared first on Kaseya.
AI Agents X Digital Forensics 01 – OpenCode
As Artificial Intelligence evolves from passive tools to autonomous agents capable of independent action, a new digital forensics subject has emerged: the forensic analysis of AI tooling on a given system. This article serves as the opening chapter in an exclusive series dedicated to our latest research in identifying and exploiting the artifacts left behind by these programs. L’article AI Agents X Digital Forensics 01 – OpenCode est apparu en premier sur INTRINSEC.
No Room For Compromise: How Business Email Protection Predicts BEC Before It Starts
Most business email compromise (BEC) attacks start with stolen credentials, not a malicious email. Group-IB uses threat intelligence to detect compromised accounts before attackers log in — predicting BEC before it starts.
Why Manufacturing Companies Need Continuous OT Security Monitoring in 2026
Manufacturing environments are undergoing rapid transformation. Industry 4.0, smart factories, Industrial IoT (IIoT), and increased connectivity between IT and OT systems have redefined how production operations function. While these advancements improve efficiency, visibility, and scalability, they also introduce significant cybersecurity risks. In 2026, manufacturing companies are among the most targeted sectors for cyberattacks. Threat actors […]
Public Exploit Enables Domain Controller Impersonation
At a glance: A public proof-of-concept exploit, dubbed Certighost, shows how an attacker with a standard Active Directory domain account can abuse Active Directory Certificate Services (AD CS) to impersonate a Domain Controller and access highly sensitive Active Directory secrets and credentials. Microsoft released security updates on July 14, 2026, and researchers publicly disclosed the exploit on July 24, providing organizations and threat actors with a documented method to assess or abuse vul
Security Bulletin: WordPress REST API Batch-Route Confusion Vulnerability
About: CVE-2026-63030 is a high-severity route-confusion vulnerability affecting the WordPress REST API batch endpoint. The vulnerability causes WordPress to process a supplied route differently during permission checking and request execution. While CVE-2026-63030 does not directly enable remote code execution on its own, it can be chained with the SQL injection vulnerability CVE-2026-60137 to manipulate database queries and potentially achieve arbitrary code execution on affected servers. CISA
Why live chat agents can read your messages before you hit “Send” | Kaspersky official blog
On some websites, agents can read your messages before you even send them. We explain how these tracking mechanisms work, what data sites collect, and why this can be a risk.
Who Touched My GCP Project? Understanding the Principal Part in Cloud Audit Logs – Part 1
Part 1 of Mitiga's GCP forensic guide covers Cloud Audit Logs, identity types, service accounts, and impersonation to determine who accessed your GCP project.
How AWS EKS Pod Identity Feature Enhances Credential Management
Focus on cloud credential management optimization using Mitiga's technical analysis of the newly announced AWS EKS Pod Identity feature for Kubernetes.