Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
62 matching stories — release, in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Patch Tuesday: October 2026 (Expel’s version)
Microsoft's October release is the largest in its history with 1,414 CVEs. Two of them are zero-days already exploited in the wild, so patch ASAP.
The patch tsunami: Microsoft addresses 1,415 CVEs in Patch Tuesday
For nearly 25 years, Patch Tuesday gave IT teams a predictable stream of patches to manage. In 2026, AI turned that stream into a tidal wave that threatens to overwhelm the organizations that can’t adapt. The post The patch tsunami: Microsoft addresses 1,415 CVEs in Patch Tuesday appeared first on ThreatDown.
Low-Cost Android Phones Ship With Preinstalled Malware That Turns Them Into Residential Proxies
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into residential proxies. The activity, which targets Android devices built on MediaTek platforms across several brands, is being tracked by Bitdefender under the moniker Midnight Mimosa. The preinstalled
October 2026 Patch Tuesday: 1,413 CVEs Include Three Zero-Days and 75 Critical Vulnerabilities
Sophos AI Defense is now generally available
Bring AI out of the shadows with visibility and control that help your organization adopt AI securely.
Google Fitbit Edge: Specs, Features, Price, Release Date
The new $179 tracker features Pixel Watch smarts, week-long battery life, and an OLED screen.
Exploitation begins after public PoC release for Atlassian flaw
At a glance: Active exploitation of CVE-2026-21589 began shortly after public proof-of-concept code became available, reducing the time available for organizations to remediate exposed systems. The vulnerability affects widely deployed self-hosted Atlassian platforms that often contain operational documentation, source code, authentication data, and integration details. Successful exploitation can expose information that helps threat actors understand an environment, identify high-value systems,
Challengers Approach: Third Party App Stores Arrive to Google Play
If you are an Android user, you may have noticed it already: Google has begun allowing rival, third-party app stores to be distributed through the Google Play Store. And if you are a developer, you may have noticed new options for billing and distributing your apps. For years, Epic Games, maker of games such as Fortnite, has been suing Google, alleging violations of antitrust law. Specifically at issue were Google's restrictions on the distribution of alternate app stores through the Play Store,
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program. "It delivers frontier performance in complex workflows across real-world software engineering, enterprise knowledge work like legal and finance, and cybersecurity defense," Koray Kavukcuoglu,
Sophos CISO Advantage is now generally available
Take control of your security outcomes.
Cynet v5.0 Brings Data Residency to Australia and New Zealand
A security platform has to fit the way an organisation protects its data, including where that data is stored. For MSPs and security teams in Australia and New Zealand, data location can affect whether a platform makes it through legal & procurement reviews. Security tools may handle sensitive information about users, devices and incidents. Data location can therefore be an […]
Cynet v5.0 Brings Data Residency to Canada
“Where will our security data live?” For Canadian MSPs and security teams, that question can shape a buying decision before anyone gets to the product demo.  Security platforms can handle sensitive information about users, devices, and incidents. Customers may need to account for where that information is stored under their own policies, contracts, or regulatory […]
Cynet v5.0: Protect More With the Team You Already Have
The hardest part of security operations today isn’t spotting a threat, it’s doing it quickly, across every environment defenders are responsible for. Every added minute spent hunting for context (which dashboard, which configuration state, which baseline) is another minute the adversary has to find vulnerabilities, create persistence, disable defenses and deploy malware. Cynet v5.0 was built to close that gap. Speed: Get to
Vectra AI、AIを活用した攻撃の新時代への対応を支援するパートナープログラム「Ascent」を発表 - Vectra AI news release
Published: Sep 16, 2026. Vectra AI、AIを活用した攻撃の新時代への対応を支援するパートナープログラム「Ascent」を発表. Visit our news releases page to read more!
Carahsoft and Vectra AI Announce Vectra AI’s Achievement of FedRAMP® High Authorization for its AI-Native Security and Observability Platform - Vectra AI news release
Published: Sep 15, 2026. Carahsoft and Vectra AI Announce Vectra AI’s Achievement of FedRAMP® High Authorization for its AI-Native Security and Observability Platform . Visit our news releases page to read more!
September Patch Tuesday haul includes 973 CVEs
Windows takes 718 fixes… but what if it was actually a slow month?
Vectra AI Launches Ascent to Help Partners Address the New Era of AI-Driven Attacks - Vectra AI news release
Published: Sep 14, 2026. Vectra AI Launches Ascent to Help Partners Address the New Era of AI-Driven Attacks . Visit our news releases page to read more!
974 CVEs in One Patch Tuesday: Why MSPs Can't Patch Their Way Out of September 2026
Microsoft's September 2026 Patch Tuesday broke every prior record with hundreds of CVEs and two actively exploited zero-days. The patch queue can't move fast enough, so detection of what happens after exploitation becomes the real control.
terraform-azurerm-swfw-modules v3.6.0
Patch Tuesday: September 2026 (Expel’s version)
September's Patch Tuesday is Microsoft's biggest ever at 964 CVEs, with two exploited zero-days. Plus a critical Adobe Commerce flaw that can't wait.
N-central Security Update – Take Action to Apply 2026.3 HF4
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
N-able N-central's Fourth Emergency Hotfix in Five Weeks: When the MSP's Own RMM Becomes the Breach Vector
N-able has issued its fourth emergency hotfix in five weeks for N-central, this time for an unauthenticated, CVSS 10.0 remote code execution flaw already under active exploitation. Here's what MSPs need to do about the tool that runs their entire business.
September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
Ubiquiti's SAB-067: 22 UniFi Vulnerabilities, Three Rated CVSS 10.0, and a Patch Cycle MSPs Can't Outrun Alone
Ubiquiti's latest security bulletin patches 22 UniFi vulnerabilities, three of them maximum severity. For MSPs managing UniFi fleets across dozens of client sites, the patch cycle takes days. Here's what to do while it runs.
ipyida v2.3
New Mail Assure Releases: Turning Email Security Signals into Faster Business Decisions
The cleanroom recovery process isolates workloads in a sandbox environment, allows access to validate a known-good restore point, and returns clean data to a production environment so you don't reintroduce dormant malware. This post breaks down the three-step process, explains why cleanroom recovery has become essential rather than optional, and shows how a cloud-native platform delivers it as a built-in capability instead of an expensive bolt-on. If you're an MSP or IT team asking whether stand
Citrix NetScaler flaw exploited following POC release
At a glance: Open-source reporting indicates CVE-2026-8452 is being exploited in the wild following the release of public proof-of-concept exploit code. The vulnerability affects Citrix NetScaler ADC and NetScaler Gateway deployments configured as a Gateway or Authentication, Authorization, and Accounting (AAA) virtual server and was patched on June 30, 2026. Citrix describes the issue as a memory overflow vulnerability, while watchTowr researchers demonstrated a path to pre-authentication remot
Patch Tuesday: August 2026 (Expel’s version)
August's Patch Tuesday is here, and it includes 398 CVEs, with three zero-days we recommend adding to the top of your priority list.
Cisco releases patches for 12 critical Catalyst SD-WAN & IOS XE flaws
At a glance: Cisco has released multiple patches affecting Catalyst SD-WAN, IOS XE, and Integrated Management Controller (IMC) platforms that support network connectivity, administration, and server management across enterprise environments. Several of the vulnerabilities affect technologies that occupy privileged positions within IT infrastructure, increasing the importance of reviewing exposure and applying available updates. Cisco's August 2026 advisories also include an IMC vulnerability wit
Building Scalable Bridges Between Systems Using The Latest Release of Our Ciaops Library
ciaops is Group-IB's open-source Python library for integrating Threat Intelligence, Digital Risk Protection, and Attack Surface Management APIs. Zero event loss, guaranteed.
s3proxy v1.9.1
s3proxy chart-v1.10.1
s3proxy chart-v1.10.0
Announcing the General Availability of Prisma AIRS AI Gateway
Every modern enterprise is moving from an organization run by software to one orchestrated by AI, creating a tension between velocity and control. To resolve this tension, organizations require a unified architecture. … The post Announcing the General Availability of Prisma AIRS AI Gateway appeared first on Palo Alto Networks Blog.
“Keep Systems Updated” – Awareness Poster (Re-Release)
Another awareness poster for YOUR customers (and users). Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Check out posters.infotex.com for the whole collection! Click on the version you want below to download it! Download Portrait Version Download Landscape Version You are welcome to print out […] The post “Keep Systems Updated” – Awareness Poster (Re-Release) appeared first on infotex.