2026 Cyber Insurance Trends Report: What's Changed and What You Need to Know
New regulations, data exfiltration tactics, and shifting premiums are reshaping cyber insurance. Our 2026 report reveals what businesses need to know now.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,539 matching stories — in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Netskope Joins CrowdStrike QuiltWorks + 3 Major New Integrations
Most attacks today move faster than a human analyst can read a dashboard. AI agents, non-human identities, and automated SaaS workflows now touch as much sensitive data as the people who deployed them, and each one adds another blind spot a security team has to awkwardly bend their neck to try to watch. Understanding risk […]
Cyber Threat Intelligence (CTI) Demo page
Cyber Threat Intelligence (CTI) Demo page prem.shah Tue, 09/01/2026 - 16:06
Securing Your Business: The Vital Role of Cyber Insurance | Huntress
Understand the critical role of cyber insurance in safeguarding your business from cyber threats. Learn how this coverage can protect your assets.
Cutting Dwell Time in Cybersecurity: A Practical Guide
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
What Is SASE? The Complete Guide to Secure Access Service Edge | Todyl
What is SASE? Learn the SASE definition, how secure access service edge architecture works, its 5 core components, and why MSPs are replacing VPNs with it.
CVE-2026-8452: The NetScaler 'DoS Patch' That Was Actually Unauthenticated RCE
A NetScaler bug Citrix classified as denial-of-service in June turned out to be unauthenticated remote code execution, and CISA has confirmed active exploitation. Patching closes the door, but it doesn't check who already walked through it.
What we built: August 2026
This month we released MDR for AI—coverage for the AI attack surface—along with CSV exports and a new home for product documentation.
SECUINFRA Sommer-Event 2026: Raus aus dem Alltag. Rein ins Team.
Was bleibt, wenn man für vier Tage den Arbeitsplatz gegen Bergpark, Team-Challenges und neue Perspektiven tauscht? Vor allem eines: jede Menge Energie, gemeinsame Erinnerungen und das gute Gefühl, als Team noch enger zusammengewachsen zu sein.
Mirage Kitten targeting aviation and FinTech sectors across the Middle East and Africa with a new malware set
Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.
Własny zespół 24/7, model hybrydowy czy MDR? Jak wybrać sposób obsługi ESET Inspect
„Własny SOC czy MDR” to pytanie najczęściej zadawane zbyt wcześnie i w złej formie. Zanim odpowie się, który model jest lepszy, trzeba rozważyć bardziej podstawowe kwestie: jaką faktyczną zdolność operacyjną organizacja jest w stanie utrzymać w czasie, miesiąc po miesiącu, także wtedy, gdy kluczowy pracownik jest na urlopie albo odchodzi z firmy. Artykuł nie odpowiada,... Artykuł Własny zespół 24/7, model hybrydowy czy MDR? Jak wybrać sposób obsługi ESET Inspect pochodzi z serwisu Pe
How to Plan Cloud Migration Without Work Disruption
Learn how to plan cloud migration with a practical roadmap that protects data, limits downtime, manages costs, and keeps your people productive throughout. The post How to Plan Cloud Migration Without Work Disruption appeared first on mPoweredIT.
How to Plan Cloud Migration Without Work Disruption
Learn how to plan cloud migration with a practical roadmap that protects data, limits downtime, manages costs, and keeps your people productive throughout. The post How to Plan Cloud Migration Without Work Disruption appeared first on mPoweredIT.
India, the Team, and Building a True Global SOC
I came to the United States from India in 1986. I was 21. Everything I built in my first two decades in Silicon Valley was built from here, by teams assembled here, for the North American and global enterprise market.
Peer Pressure: Inside the Sality Botnet Disruption Operation
CrowdStrike Falcon Guardian Defines the Next Generation of AI Security
The Crypto Wallet That Never Opened: Tampered Exodus Installer Hides a Modular RAT
Exodus crypto wallet analysis by Huntress uncovered tampered installers hiding a modular RAT focused on stealing credentials, not coins.
Ungentlemanly behavior: Insights into a ransomware operation
Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates
This Android malware steals banking credentials even without an internet connection | Kaspersky official blog
How the Manic Trojan steals passwords, banking credentials and SMS codes, takes control of Android phones, and relays stolen information through other infected devices.
J-Space: The Logs AI Security Has Never Had
Anthropic’s J-space shows what an AI agent is thinking before it acts. Why that’s a third telemetry layer for detection — and why labs should expose the feed.
PaperCut NG/MF Zero-Day Vulnerabilities Chained in Active Attacks
At a glance: On August 27, PaperCut disclosed active exploitation of, and released emergency updates for, vulnerabilities affecting PaperCut NG and PaperCut MF. Two vulnerabilities affecting the PaperCut Application Server can be chained to achieve unauthenticated code execution on vulnerable servers. Internet-accessible PaperCut Application Servers warrant urgent review. Organizations are advised to deploy current vendor updates, assess systems for signs of compromise, and monitor ongoing guida
The Tool That Steals Your Microsoft 365 Login Rents For $320/Month
The Trillion-Dollar AI Bet Needs a Security Strategy
AI agents have now proven, in the real world, that autonomy without a security model is a liability. At Arctic Wolf, we’ve spent years watching that same lesson play out with cloud migrations, remote work, and every other rush of new technology, and this is that pattern showing up again, just faster. OpenAI recently published ... The Trillion-Dollar AI Bet Needs a Security Strategy
Shadow AI risk: The 4 behaviors that create real exposure
Shadow AI risk comes down to how employees use AI. Get the four real risk categories and a practical governance approach.
ShinyHunters Phished a ReliaQuest Employee. Device Trust Is the Only Reason It Stopped There.
ShinyHunters phished a ReliaQuest employee, captured credentials and a live MFA approval, and still didn't get further in. ReliaQuest credits device trust, not training. Here's what that means for how a SOC should be built.
Bank Audit Preparation: What Your Pre-Exam Weeks Reveal | Locknet
You already know what those audit preparation weeks feel like.
The Event Venue IT Nightmare: When 500 Guests Arrive And Your Technology Isn’t Ready
The florist is setting up. The catering team is doing final prep. Five hundred guests are forty-five minutes away. The AV team is doing their equipment pre-check.
Anatomy of BraZetsu: How Cybercriminals Fuel the Underground Ecosystem
Group-IB uncovers BraZetsu, a new Python-based Windows malware that serves as a master toolkit for Initial Access Brokers and powers a unique, AI-enhanced underground marketplace for commercializing compromised Iberian and Latin American targets.
Alertas de seguridad – Agosto 2026
Múltiples vulnerabilidades en ASE2000 V2 de Applied Systems Engineering Se han detectado dos vulnerabilidades críticas, cuya explotación podría permitir a un atacante leer o escribir archivos locales arbitrarios, provocar que la aplicación emita solicitudes de red salientes o interceptar la conexión para suplantar la identidad del interlocutor de confianza, completar el protocolo de enlace TLS […] La entrada Alertas de seguridad – Agosto 2026 aparece primero en Secure&IT.
The Cyber Action Year Readiness Checklist
ASD has moved from awareness to action for 2026. A practical, five-part checklist mapped directly to ASD’s own critical actions, so you know exactly where you stand. 2026 is Cyber Action Year. ASD has set five critical actions every Australian organisation should be prioritising, replacing legacy technology, implementing best practice event logging, choosing secure-by-design products […] The post The Cyber Action Year Readiness Checklist appeared first on Orro.
The Recovery-Denial Economy: Why Modern Ransomware No Longer Needs Encryption
By Manuel Salazar, Director of Cyber Services, Orro For years, ransomware followed a pattern security teams could plan around: encrypt the data, demand payment for the key, and make recovery a race against the clock. That model has not disappeared, but it is no longer the centre of gravity. The more important shift is that […] The post The Recovery-Denial Economy: Why Modern Ransomware No Longer Needs Encryption appeared first on Orro.
Zero Trust Wasn’t Built for This: Securing the Rise of Non-Human Identities
Key Takeaways Zero Trust and SASE were built to secure a distributed human workforce. That problem is largely solved. The current gap is different: most architectures were never built to recognise, verify or constrain AI agents. Non-human identities, service accounts, API keys and agent credentials already outnumber human identities in many enterprise environments, and the […] The post Zero Trust Wasn’t Built for This: Securing the Rise of Non-Human Identities appeared first on Orro.
Your Firewall Protects Data. It Was Never Built to Protect a Patient.
Hospital security programs are built to stop a data breach. The attack chains ON2IT models in live Hack the Hospital demonstrations hit HVAC, water, and building systems instead.
PaperCut's Two-Patch Week: What CVE-2026-82078 and CVE-2026-81578 Mean for MSSPs
PaperCut's second emergency patch in 48 hours proves the ticket isn't the finish line. Here's what a partner's SOC should be watching for on every exposed Application Server.
How to Evaluate an IT Provider Before You Sign
Learn how to evaluate an IT provider for response times, security, pricing, and business fit before a slow support partner costs you more downtime too. The post How to Evaluate an IT Provider Before You Sign appeared first on mPoweredIT.
AI threat so great that security “takes precedence over everything except critical business operations”
What OpenAI’s open letter means for teams running lean. The post AI threat so great that security “takes precedence over everything except critical business operations” appeared first on ThreatDown.
Everything, Everywhere, All at Once: The New Rules of Exposure Management
Gryxa: The AI-Built Toolkit That Watches How You Remove It
ReliaQuest identified a new toolkit, "Gryxa," highly likely used by a financially motivated threat actor to run an initial-access operation.
Security Bulletin: Multiple Critical Vulnerabilities in ServiceNow AI Platform
About: CVE-2026-18885, CVE-2026-18886, and CVE-2026-74820 are three critical vulnerabilities affecting the ServiceNow AI Platform, each with a CVSS score of 10.0. CVE-2026-18885 and CVE-2026-18886 are code injection vulnerabilities that may allow an unauthenticated attacker to execute arbitrary code, access or modify instance data, or escalate privileges under certain circumstances. CVE-2026-74820 is a SQL injection vulnerability that may allow an unauthenticated attacker to execute arbitrary SQ
Detection blind spots: non-standard file formats in malicious email campaigns | Kaspersky official blog
Disk images, atypical Office files, vector graphics, polyglots, and other techniques for covertly launching malware, as seen in real-world cyberattacks.