Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,539 matching stories — in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
From CMDB to CAASM: Operationalizing Asset Intelligence
The gap between where most enterprises are on asset intelligence - a CMDB with varying degrees of staleness and completeness - and where the security outcomes they need require them to be is significant.
Smashing Security podcast #481: Never say this to a robot dog
At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google's AI into its brain, and jailbroke it by telling it - with a completely straight face - that it was a Pokemon. What followed involved a wall, a blue ice chest, and anyone in the room wearing white shoes. Oh, and did we mention you can buy a flamethrower attachment? Meanwhile, in Salzburg, 280 gold statuettes of Mozart have vanished from the streets. This has happened to the same artist before. Organi
Helios AIDR: Why Cloud Security Needs Intelligent Automation Now
Mitiga launches Helios AIDR, an intelligent cloud security solution that automates threat detection and response. Its first feature, AI Insights, cuts through noise, speeds up analysis, and boosts SecOps efficiency.
How to protect yourself from webcam spying: five simple steps | Kaspersky official blog
We explain how to avoid becoming a victim of IP camera surveillance at home or while traveling, and how to properly configure a home video surveillance system.
What is SIEM? The Complete Guide to Security Information and Event Management | Todyl
What is SIEM? Learn the SIEM definition, how SIEM works, key features, top use cases, and how modern SIEM tools protect MSPs and businesses from threats.
Kritische Infrastruktur unter Beschuss: Was Banken von Krankenhäusern lernen können
Was passiert, wenn ausgerechnet die Systeme ausfallen, die niemals ausfallen dürfen? Cyberangriffe auf Krankenhäuser zeigen eindrücklich, welche Folgen es haben kann, wenn kritische IT-Infrastrukturen kompromittiert werden. Die daraus gewonnenen Erkenntnisse sind auch für Banken hochrelevant.
CISA flags actively exploited Ray vulnerability
At a glance: CISA has confirmed active exploitation of CVE-2025-62593, a critical Ray vulnerability that can allow remote code execution on systems running vulnerable deployments. Ray may be difficult to identify because it is often installed as a Python package within AI and machine learning environments rather than as a traditional enterprise application. Organizations using Ray are encouraged to locate deployments across developer systems, containers, Kubernetes clusters, and cloud-based AI i
Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
Huntress researcher uncovers post-Black Hat & DEF CON phishing campaign using X DMs & malicious documents to deliver AMOS, NetSupport RAT, and other malware.
How Grok unknowingly powers cybercrime
Kriminal isn't a custom-built criminal AI model: it's Grok in a trench coat. The proof sits in its own code. The post How Grok unknowingly powers cybercrime appeared first on ThreatDown.
Ep. 12: CMMC Phase 2 Is Paused. Your Obligations Aren't.
In Episode 12 of Winners Circle, host Pavle Majerle sits down with CMMC experts Don Costanzo (NexusTek vCIO and CMMC Registered Practitioner) and Dr. Yvette Burton (founding partner of Silent Partner Solutions and a CMMC Certified Assessor) to examine what the CMMC Phase 2 60-day suspension really means for defense contractors. They explain what changed, what didn’t, and why organizations should use the additional time to strengthen their cybersecurity posture instead of putting compliance effor
“Quishing: Think Before You Scan” – Awareness Poster
Another awareness poster for YOUR customers (and users). Now that we have our own employees aware, maybe it’s time to start posting content for our customers! Check out posters.infotex.com for the whole collection! Click on the version you want below to download it! Download Portrait Version Download Landscape Version You are welcome to print out […] The post “Quishing: Think Before You Scan” – Awareness Poster appeared first on infotex.
Balonx Sistema: The Face Behind the PhaaS Affecting Mexican Banking
Group-IB exposes a Mexican PhaaS operation targeting over 20 financial institutions with live phishing, AI vishing, and mobile RAT capabilities.
Benchmaxxing: When the Benchmark Becomes the Target
A Detection Engineer's Guide for Delegating Work to AI
Before delegating work to AI, ask one question: can you check the output? A detection engineer on why verification, not trust, decides what tasks you hand over.
Fake AI, real malware: Attackers impersonating AI brands
A year of MDR casework shows attackers repeatedly exploiting demand for AI tools
Security Bulletin: Pre-Authentication Bypass in macOS Screen Sharing
About: CVE-2026-65400 is a critical authentication bypass vulnerability affecting the Screen Sharing service in macOS. The flaw exists in screensharingd, the daemon that provides remote desktop access over the VNC protocol. Due to an error in the implementation of Secure Remote Password (SRP) authentication, an attacker on the network can establish an authenticated Screen Sharing session without valid credentials. The resulting session also continues without cryptographic protection. Successful
New Ruxie AI power-up: Phishing classification AI turns benign inbox noise into SOC focus
Ruxie's latest power-up, phishing classification, is an additive skill for our automated marketing engine; it automatically closes reported benign phishing.
HeliosAI Agent: Finally, a Tier 2/3 Analyst You Can Trust
See how HeliosAI Agent, part of Helios AIDR, guides analysts through cloud and SaaS incidents, with expert-level reasoning and evidence behind every verdict.
Arctic Wolf Data Explorer
Die Kunden können die Rohprotokolle und die von der Arctic Wolf-Plattform verarbeiteten analysierten Daten untersuchen, um kritische Sicherheitsfragen zu beantworten und bei Bedarf Maßnahmen zu ergreifen.
The Tiered SOC Is Breaking: Why the Agentic SOC Is the Only Model Built for Machine-Speed Attacks
Twenty-two seconds. That’s the median time it now takes for one attacker to hand freshly compromised access to the next team in the chain, the group that drives toward ransomware. In 2022, that hand-off took more than eight hours. In 2025, it took twenty-two seconds. Now consider how the average security operations center (SOC) is ... The Tiered SOC Is Breaking: Why the Agentic SOC Is the Only Model Built for Machine-Speed Attacks
The Tiered SOC Is Breaking: Why the Agentic SOC Is the Only Model Built for Machine-Speed Attacks
Twenty-two seconds. That’s the median time it now takes for one attacker to hand freshly compromised access to the next team in the chain, the group that drives toward ransomware. In 2022, that hand-off took more than eight hours. In 2025, it took twenty-two seconds. Now consider how the average security operations center (SOC) is ... The Tiered SOC Is Breaking: Why the Agentic SOC Is the Only Model Built for Machine-Speed Attacks
Vectra AI Appoints Italo Calvano as Regional Vice President, Latin America to Accelerate Regional Growth - Vectra AI news release
Published: Aug 17, 2026. Vectra AI Appoints Italo Calvano as Regional Vice President, Latin America to Accelerate Regional Growth . Visit our news releases page to read more!
Power Pages misconfigurations expose D365 data
At a glance: A recently disclosed data extortion campaign led to the publication of millions of records from multiple organizations, most likely obtained through misconfigured Microsoft Power Pages deployments. The activity appears to have relied on anonymous access permissions that exposed Microsoft Dataverse data through internet-facing portals, allowing attackers to enumerate and export records without exploiting a software vulnerability. Organizations using Power Pages are advised to re
How to Help MSP Clients Pass Cyber Insurance Audits
A client is three weeks from cyber insurance renewal when the underwriter asks for proof that MFA covers every user, EDR is...
What Is Digital Risk Management and Why Does Your Business Need It?
Digital transformation has changed the way businesses operate. Organisations now depend on cloud applications, digital platforms, connected devices, third-party vendors, social media, and online customer channels to deliver products and services. While these technologies create new growth opportunities, they also expand the organisation’s digital risk landscape. A single exposed asset, compromised account, vulnerable application, leaked […] The post What Is Digital Risk Management and Why
Technical Debt Doesn’t Stay Technical
Every shortcut has an interest rate. In cybersecurity, the payment comes in risk. When Yesterday’s Shortcut Becomes Tomorrow’s Breach Technical debt reminds me a lot of carrying a balance on a credit card. At first, it doesn’t seem like a big deal. You’ll take care of it next month. Then after the next project. Then […] The post Technical Debt Doesn’t Stay Technical appeared first on infotex.
Clop Returns with Custom Implant in Mass-Extortion Campaign
Clop's exploitation of CVE-2026-12569 in PTC Windchill returns the group to mass exploitation with a custom web shell built for full data theft.
Cyber Resilience Act : les fabricants face à l’échéance de septembre 2026 et aux nouvelles normes ETSI
Le Cyber Resilience Act (CRA) ne se contente plus d'être un texte législatif à l'horizon lointain. Il entre résolument dans sa phase opérationnelle. Le 17 août 2026, l'ETSI (European Telecommunications Standards Institute) a officiellement lancé le processus d'approbation de 17 normes européennes clés destinées à soutenir la mise en œuvre du règlement. Ces standards [...]
DORA : ce qui change concrètement pour la cybersécurité et la conformité du secteur financier en 2026
Le règlement européen sur la résilience opérationnelle numérique (DORA), entré en application le 17 janvier 2025, est désormais pleinement intégré au dispositif de supervision du secteur financier. Après une année 2025 largement consacrée à l’accompagnement des entités financières dans la mise en œuvre de leurs nouvelles obligations, 2026 marque une phase de supervision renforcée. [...]
NIS2 en 2026 : comment anticiper la conformité malgré le retard de transposition en France
Alors que nous entrons dans le second semestre 2026, la transposition française de la directive NIS2 (Network and Information Security) reste en suspens. Ce décalage par rapport au calendrier initial a déclenché des procédures d’infraction de la part de la Commission européenne. Pourtant, pour les milliers d’entités essentielles et importantes concernées, attendre la publication [...]
SonicWall’s Zero-Day Problem: What Small Businesses Need to Know About INC Ransomware
Two SonicWall zero-days let INC ransomware strike fast. Here's what happened and five simple steps to protect your business. The post SonicWall’s Zero-Day Problem: What Small Businesses Need to Know About INC Ransomware appeared first on CyberHoot.
Employee Onboarding IT Checklist for Small Business
Use this employee onboarding IT checklist to secure access, equip new hires, and prevent costly first-day delays, downtime, and compliance gaps early. The post Employee Onboarding IT Checklist for Small Business appeared first on mPoweredIT.
Why Divergent Teams Drive True Security Collaboration
When people ask me what makes the Resolution Intelligence Cloud different from other security intelligence platforms, I usually start with the data architecture. The unified data model, the ontology engine, the knowledge graph, the behavioral analytics. These are real differentiators and they are worth explaining.
The Future of OT and Identity Security: Emerging Threats and Defence Strategies for 2026
Operational Technology (OT) environments are undergoing a rapid transformation. As industrial systems become increasingly connected to enterprise IT networks, cloud platforms, and remote operations, the attack surface has expanded significantly. At the same time, identity has emerged as the central control layer governing access to both IT and OT systems. This convergence of OT and […]
ClickFix on Steam forums: how malicious PowerShell commands install a crypto miner | Kaspersky official blog
Attackers are targeting Steam forums with malicious PowerShell commands disguised as fixes for game launch issues. Here’s how this version of the ClickFix scam works.
Microsoft Says Russian Intelligence Is Hijacking Hotel Wi-Fi. Changing Your Password Won't Stop It.
Community Bank IT Emergency Response & Readiness | Locknet
Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor
Contents Introduction Key Targets Industries Affected Geographical focus Infection Chain Campaign Timeline Initial Findings Looking into the Decoy Document Technical Analysis Stage 1 – LNK-Based Initial Access Stage 2 – Split Payload Reconstruction via ftp Script Stage 3 – QUICAgent Implant – Go-Based Backdoor Infrastructure & Attribution Conclusion Seqrite Protection Indicators of Compromise (IOCs) MITRE […] The post Operation QUICSILVER: China-Nexus Actor Targ
Campgrounds Aren’t Roughing It Anymore: The Technology Behind Better Stays
The tent is pitched. The campfire is going. And the guest at Site 14 is on a video call with their office.