MSP Security Bundle: What to Include, How to Tier It, and Why Single-Vendor Matters
MSPs can easily find security tools. The challenge is turning those tools into a service clients can understand, technicians can operate consistently,...
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,539 matching stories — in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break
Gemini’s Breakout Is a Reminder the Basics Still Matter
In May, an Israeli security firm called Irregular put Google’s Gemini through a capture-the-flag exercise, testing how well the model could find its way through systems belonging to fictional companies. Perhaps unsurprisingly, Gemini didn’t stay inside the exercise. Google has confirmed that, through an unintended connection to the open internet, the model reached three real […]
RemControl: AI Built the Overlays. Victims Lose their PINs
Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.
Why Unified Cyber Defense Is Replacing Fragmented Security Stacks
Many organizations have spent years strengthening cybersecurity by adding new security products. A new endpoint threat leads to an endpoint security tool. Cloud adoption leads to another security platform. Identity attacks introduce another identity security product. Threat intelligence requires another portal. Vulnerability management, SIEM, network monitoring, incident response, and automation add more technologies. Each tool […]
Beyond Point-in-Time Testing: 5 Use Cases for Agentic Red Teaming
Traditional red teaming is just a snapshot. Agentic red teaming uses autonomous AI agents to continuously reason within your environment. Here are the five use cases we see that security teams should adopt first.
Google Workspace Promo Codes: 14% Off for October 2026
Boost your productivity and save with exclusive Google Workspace coupons from WIRED. Get up to 14% off plans for three months, including Starter, Standard, and Plus tiers.
J-Space, Ten Weeks On: The Second Feed Just Went Dark
Ten weeks after we asked the labs to expose the J-space, there is still no feed, and GPT-6 Astra showed chain-of-thought monitoring can collapse outright.
Best Cloud Backup Options for Small Businesses
Compare the best cloud backup options for small businesses, including security, recovery speed, compliance, and the support needed to keep work moving. The post Best Cloud Backup Options for Small Businesses appeared first on mPoweredIT.
The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust
For decades, we believed that if could hear someone’s voice on a phone call or see them on a video call, they were who they said they were. What if that’s no longer true?
DarkMe RAT: A VB6 APT Trojan Turned Conventional Infostealer
DarkMe, an APT-linked VB6 RAT known for using zero day exploits, turned up in two Huntress incidents stripped down to a plain .pif infostealer malware.
F5 Fixes Actively Exploited BIG-IP APM Vulnerability
At a glance: F5 addressed an actively exploited vulnerability affecting specific BIG-IP Access Policy Manager deployments, by releasing engineering hotfixes for affected versions. The vulnerability affects virtual servers configured with both an APM access policy and an OAuth profile, a deployment commonly used to provide OAuth-based authentication, single sign-on, and federated identity services. Successful exploitation can result in unauthenticated remote code execution, making internet-facing
AI Productivity Tools: The Adoption Journey So Far
Explore how AI productivity tools are shaping real work. Roei Sherman of Mitiga shares lessons, challenges, and what it takes to truly improve performance with AI.
Agentic SOC: Why Your AI Strategy Will Live or Die on Data | Mitiga
Agentic AI is reshaping the SOC, but data quality decides the outcome. See why investigation-grade cloud and SaaS data determines if AI agents succeed or fail.
What Is ZTNA? Zero Trust Network Access Explained | Todyl
ZTNA verifies identity, device posture, and context before granting access to a single app. How it works, how it differs from VPN, and what MSPs need.
The Age of Fully Autonomous AI: Why the World Needs Global Oversight and an Emergency Kill Switch
By Jacob Thankachen, CEO & Co-Founder, CybrHawk Artificial intelligence is advancing at a pace few technologies in human history have matched. We are rapidly moving beyond AI systems that simply answer questions or assist users. The next generation of AI is increasingly agentic and autonomous, capable of reasoning, planning, writing software, communicating with other systems, […]
Fighting AI Slop in Production Codebases: How Huntress Improved Fable 5.1’s API Recall
Three changes to the Huntress coding harnesses doubled Claude Fable 5.1’s API recall evaluation accuracy rate.
How a hidden Wi-Fi network name can give away your data to strangers | Kaspersky official blog
Why hiding your Wi-Fi network name does more harm than good, and what actually does make your home network more secure.
Kapibala, Red Heron, and the Blind Spot Between Your Tools
Three unrelated products, three separate disclosures, one operational lesson: attackers don't respect your vendor categories, and neither should your monitoring.
AI Attacks Move Faster. Huntress’ Agentic SOC Keeps Up
AI hasn't changed attacker tradecraft, just the speed. See how Huntress built Athena, an agentic SOC partner, to help analysts keep pace.
Introducing Unit 42 Continuous Frontier AI Defense
Cybersecurity is in the middle of a generational shift. AI has disrupted a 30-year balance of power between defenders and adversaries. Armed with agentic AI tools and open-weight models stripped of safety … The post Introducing Unit 42 Continuous Frontier AI Defense appeared first on Palo Alto Networks Blog.
ReliaQuest Recognized as a Strong Performer in The Forrester Wave™: External Threat Intelligence Service Providers, Q3 2026
See Why ReliaQuest was named a Strong Performer.
Data Breach Laws: A State-by-State Framework
What you need to know for compliance coast-to-coast. Starting back in the year 2020 we unwittingly began an annual tradition by posting an article containing links to data breach laws from each state, only to have it go on to become one of our most popular posts. Because of this enduring popularity and because laws […] The post Data Breach Laws: A State-by-State Framework appeared first on infotex.
The SIEM Wasn't Wrong: We Need a Next-Gen SIEM
I want to be honest about something that gets lost in conversations about the future of security operations: the past was not wrong.
MSP Cybersecurity Tool Pricing Comparison Matrix (2026)
You sit down to price a security stack for a 40-seat client. You need 5 numbers, one each for EDR, MDR, email...
The third-party patch gap: why your riskiest surface isn’t the OS
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
Gyazo Breach Exposes User Data and Image Metadata Records
At a glance: A threat actor exploited a vulnerability in Gyazo's image upload server, gained unauthorized access to company systems, and accessed customer data on September 11, 2026. The breach exposed approximately 23.62 million user records and approximately 490 million image metadata records, including image identifiers, login session IDs, integration tokens, OCR-extracted text, and information related to private images. The most significant challenge for affected organizations is determining
AI-augmented, still human-led: What changed in the 2026 Gartner Market Guide for Managed Detection and Response
The Gartner 2026 MDR insights added "AI-augmented" to the definition and kept the human-led requirement. Here's what changed.
Microsoft Cut Its Patch Window From 14 Days To 3. Bad Actors Are Why.
Microsoft used to treat 2 weeks as a reasonable time for a business to install a monthly security update. It now says 72 hours. This week is why.
Cybersecurity for SMBs: how to grow without the added risks
Why almost 90% of small companies have to deal with cyberincidents, and how to build a security setup without straining your budget or IT team.
MSP for Banks: What to Expect from an IT Partner
Of all the questions worth asking about your institution's IT environment, and there are several, this one tends to be the last one community banking leaders get to because it's the hardest to evaluate from the outside.
CISA Retires Its Weekly Vulnerability Bulletin: What MSPs Do Now
CISA is retiring its weekly vulnerability bulletin on September 28, 2026, in favor of a risk-based, KEV-first model under BOD 26-04. Here's what that means for MSPs still running CVSS-only patch cycles.
The Private Golf Club IT Problem: Getting Tech Out of the Rough
The new software implementation was supposed to begin in April. It’s August, and the project still hasn’t moved forward.
Best Malware Analysis Platforms for Security Teams
Malware can hide inside legitimate-looking files, exploit vulnerabilities, execute malicious scripts, or remain dormant until specific conditions are met. For security teams, identifying a suspicious file is only the beginning. They also need to understand what it does, how dangerous it is, which systems it may affect, and what action to take. A malware analysis […] The post Best Malware Analysis Platforms for Security Teams appeared first on Seqrite Labs.
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Objects.
ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure
Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access trojan (RAT) called ChainScript. "ChainScript has appeared under multiple build names, including ComponentTask33, UpdateDigital, HostShared, and OrchidViolet66, while presenting itself as Spotify, Zoom Workplace, and Microsoft Teams software," Blackpoint Adversary Pursuit Group (APG)
What 1,000+ CybrHawk Deployments Have Taught Us About SOC Operations
Deploying security technology is relatively straightforward compared with operating a Security Operations Center effectively. A platform can be installed. Agents can be deployed. Logs can be collected. Dashboards can be created. Alerts can begin appearing within hours. That does not automatically create an effective SOC. Across more than 1,000 CybrHawk deployments, one lesson has become […]
Is Outsourced IT Worth It for Small Businesses?
Is outsourced IT worth it for your small business? Compare the cost, security, support, and growth benefits before choosing a technology partner today. The post Is Outsourced IT Worth It for Small Businesses? appeared first on mPoweredIT.
Zero Trust Governance: 7 Questions Every Board Must Ask
Zero Trust is not a technology decision, it is a governance decision. The four principles, five implementation steps and seven questions every board must ask.
CVE-2026-19490: Why CISA Says Patching Citrix NetScaler Isn't the Finish Line
CISA's KEV addition for CVE-2026-19490 comes with an unusual instruction: patching Citrix NetScaler ADC and Gateway is not the end of remediation. Here's what forensic triage actually requires, and where an MSSP's SOC has to pick up the work.