One Adversary: The Moment Nobody Sees
Map any fraud campaign against your org chart and one stage of the attack has no owner. The adversary knows exactly which one — and the most expensive fraud cases live there.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,538 matching stories — in Managed Detection & Response (MDR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How to Secure Active Directory Against Modern Ransomware Groups
Active Directory (AD) remains the backbone of enterprise identity and access management, making it one of the most critical components of an organization’s cybersecurity infrastructure. However, this central role also makes Active Directory a prime target for modern ransomware groups. Today’s ransomware attacks are no longer opportunistic or isolated. They are highly coordinated, multi-stage operations […]
Sophos DNS Protection update for GenAI
New Generative AI category is now available in DNS filtering policy and reporting.
Active exploitation of N-able N-central authentication bypass flaw
Update: On August 6, 2026, N-able released N-central 2026.3.1.10 (Hotfix 2), which supersedes 2026.3.1.7 (Hotfix 1) and is required even for organizations that already installed Hotfix 1.
ChainDrop: The Mini Shai Hulud npm worm’s latest wave hits keyv and cacheable
A self-propagating npm worm hit keyv, cacheable, and hundreds of dependent packages to steal CI/CD, cloud, and API credentials. Here's what to do now.
SOC as a Service: What It Is and How It Works in 2026
Last updated: July 2026 Building an in-house security operations center is out of reach for most organizations. Staffing a 24/7 SOC means hiring and retaining a rotating team of security analysts in one of the tightest labor markets in tech, plus the tooling to feed them. SOC as a Service (SOCaaS) exists so you do […] The post SOC as a Service: What It Is and How It Works in 2026 appeared first on Defendify.
Wie MSPs nach der neuen britischen Gesetzgebung zu einem „kritischen Lieferanten“ werden könnten
Even if MSPs are not directly regulated, there’s a second way The UK’s Cyber Security and Resilience Bill may affect them  In part one of The post How MSPs could become a ‘critical supplier’ under new UK legislation appeared first on Kaseya.
US AI leaders turn to Chinese open-weight models, challenging closed-source safety claims
More American titans of artificial intelligence are describing Chinese open-weight models as better for AI safety and security than closed-source models, challenging the long-standing claim by US closed-source AI model developers such as Anthropic that open-source models present a threat to society. “From what I’m seeing, I think open-weight models seem safer to me than closed-weight models,” AI pioneer Andrew Ng, the former head of Google Brain and former chief scientist at Baidu, said at the..
How to prevent autonomous agents from breaching corporate infrastructure
Launching AI-driven cyberattacks on businesses no longer requires advanced OpenAI models. We analyze a recent breach to build an effective defense strategy against AI-driven attacks.
Expel now covers the full AI attack surface
Expel is the top MDR provider covering the full AI attack surface: AI-powered attacks, employee misuse, and exposure inside AI systems. See what's live now.
Redefining Network Security for the Frontier AI Era
Modern enterprise security is at a pivotal moment where CIOs and CISOs have a clear opportunity to build a cybersecurity architecture for both today’s environment, and for the future. Doing so requires … The post Redefining Network Security for the Frontier AI Era appeared first on Palo Alto Networks Blog.
Bank of America Phishing Email Delivers ScreenConnect Malware
A fake Bank of America phishing email kicks off a multi-stage malware infection chain. See how one convincing bank scam unravels.
37% of IT Security Teams Hit Burnout From Audit Demands
A Huntress survey of 504 IT leaders found that compliance demands caused burnout at 37% of orgs, delayed security initiatives at 34%, and cost 21% a contract.
Deepfake-Angriffe erkennen: Wie KI Social Engineering verändert
Ein Anruf des CEOs mit einer dringenden Zahlungsfreigabe. Eine Videokonferenz mit bekannten Gesichtern. Eine Sprachnachricht eines Kollegen mit der Bitte um schnelle Unterstützung. Lange galten genau diese Kommunikationsformen als vertrauenswürdig. Doch mit dem Fortschritt generativer KI verändert sich die Realität digitaler Kommunikation grundlegend.
Cybersecurity Partners: Building Trust & Shared Value
I want to use this post to say something I do not say publicly often enough.
Secure Agent Harness Execution: Preventing Escape
Out of the Box August 2026
Open Source Security: vulnerability and openness tradeoff The post Out of the Box August 2026 first appeared on Network Box USA.
Password Spraying
What is password spraying and how can you protect against it? The post Password Spraying first appeared on Network Box USA.
N-able N-central exploitation results in RMM tool deployment
After compromising systems via CVE-2026-18577, threat actors use the additional RMM tools and network tunnels to establish persistent remote access
Interlock ransomware gang creates volatile situation
Multiple legitimate DFIR tools abused by GOLD EMBRACE double-extortion specialists
Security Bulletin: N-able N-central Incomplete Patch Leads to Administrative Account Takeover
About: CVE-2026-18577 is a high-severity authentication bypass vulnerability affecting N-able N-central, a remote monitoring and management platform used by MSPs and IT teams. The vulnerability exists because a previous patch for CVE-2026-18556 addressed one exploitation path but left an alternate path to the same underlying weakness accessible. Successful exploitation can allow an attacker to bypass authentication and take over administrative accounts, potentially providing control over the end
Outsourced SOC: Costs, Benefits, and How to Choose
A new CVE lands. Your scanner catches it. Then the handoffs begin. Someone exports the findings, someone else decides what matters, and a technician logs into a separate patch console to deploy the fix. By the time anyone confirms the patch actually landed, hours or days have passed. That's the gap attackers live in. The problem isn't any single tool. It's the seams between them. When detection, prioritization, and remediation live in different places, every handoff adds delay, and every delay s
What we built: July 2026
In July, Expel launched six new threat hunts spanning the AI attack surface, for new features, and one integration update.
Introducing Unit 42 Threat Intelligence: Know What Matters, Understand the Adversary, and Act Faster
Security teams do not need another threat feed. Instead, they need to know which threats matter to their organization, what’s coming, and what they should do next. That distinction has never been … The post Introducing Unit 42 Threat Intelligence: Know What Matters, Understand the Adversary, and Act Faster appeared first on Palo Alto Networks Blog.
Managing Vendor Sprawl: Strategies for Vendor Consolidation and Oversight
BLOG ARTICLE Table of Contents Vendor sprawl starts small. Marketing picks up a new analytics tool. Sales finds something that talks better to the CRM. HR grabs an engagement platform. Finance adds a reporting app. Each decision solves a real problem. Two years later the organization is paying for dozens […] The post Managing Vendor Sprawl: Strategies for Vendor Consolidation and Oversight appeared first on Netrix Global.
CrashStealer, a new infostealer for macOS: how it works and how to stay safe | Kaspersky official blog
We break down CrashStealer — a new macOS infostealer: how it spreads, what data it steals, how it bypasses Apple’s built-in defenses, and what you can do to protect your Mac.
Why App Control Fails Most Teams and How Managed ESPM Fixes It
App control works, but most solutions are built for enterprise budgets and headcount. See how Huntress Managed ESPM makes proactive endpoint hardening accessible for MSPs and small IT teams.
Managing IT Backlogs | Locknet Managed IT
Most people carrying IT responsibility at a community bank or credit union are aware of two lists. They don't usually call them that. But they know them both. The first is the list of things that fill the day whether you planned for them or not. User support tickets. Password resets. Hardware that stops working. Security alerts that need immediate attention. The operational demands that arrive without warning and can't be deferred and that collectively make it almost impossible to get to anythin
What Is the DPDP Act 2025? Key Rules, Compliance Requirements, and Business Impact
What Is the DPDP Act 2025? Key Rules, Compliance Requirements, and Business Impact If you’ve been hearing the term “DPDP Act 2025” a lot lately and feeling slightly out of the loop, you’re not alone. Almost every business owner, IT head, and compliance manager in India is asking some version of the same question right […] The post What Is the DPDP Act 2025? Key Rules, Compliance Requirements, and Business Impact appeared first on Seqrite Labs.
Cuatro de cada diez empresas españolas carecen de un SOC que las supervise
Solo el 51,6% de las organizaciones consultadas en este estudio cuenta con un plan de respuesta ante incidentes, y el 48,4% carece de un procedimiento formal para organizar la actuación cuando se detecta una amenaza. España, 03 agosto de 2026 – En los últimos años, las empresas españolas han optado por reforzar sus herramientas de […] La entrada Cuatro de cada diez empresas españolas carecen de un SOC que las supervise aparece primero en Secure&IT.
Identity Security Best Practices for Hybrid and Remote Workforces
The modern workplace has fundamentally changed. Hybrid and remote work models are now standard across industries, driven by digital transformation, cloud adoption, and evolving employee expectations. While these models improve flexibility and productivity, they also introduce significant cybersecurity risks, particularly around identity. In a distributed work environment, traditional network perimeters no longer define security boundaries. […]
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
Agentic SOC Autonomy: Earn It One Decision at a Time
Agents that recommend and agents that act carry different blast radii. Tammy Hawkins (ex-Intuit) on earning SOC autonomy one decision class at a time.
What the Agentic SOC Still Gets Wrong: 15 Years In
Five lessons from 15 years of handing security calls to machines — circuit breakers, unified signal, outcome metrics — and what the agentic SOC still misses.
The July 26th Autonomous AI Attack: What CISOs Must Learn From the Hugging Face Incident
In July 2026, OpenAI pre-release models autonomously breached Hugging Face during an evaluation, marking what many are calling the first autonomous AI cyberattack. Here is what it means for incident response planning.
PLC Security Checklist
How to Protect Industrial Control Systems From Remote Attacks The post PLC Security Checklist first appeared on Network Box USA.
Managed Observability: Turning Data into Operational Velocity
Key Takeaways “Mean Time to Innocence,” the time it takes a network team to prove a problem isn’t theirs, is a genuine operational cost hiding inside every outage investigation, not just industry slang Full-stack visibility shows where a problem sits, but it doesn’t fix the fragmented, ungoverned data underneath everything else running on the network […] The post Managed Observability: Turning Data into Operational Velocity appeared first on Orro.
Security Incident Response Metrics: Measure What Matters
Disaster recovery testing should answer two critical questions: can your backup data actually be restored, and is the recovered system safe to run? Many organizations verify the first and assume the second. This post explores why manual, point-in-time tests leave gaps between validation cycles, how automated recovery testing and clean room recovery address different risks, and what auditors and cyber insurers increasingly expect from modern recovery testing. Why "we have backups" isn't the same
The Essential Eight Is Being Retired: What Compliance Leaders Need to Know Now
By Manuel Salazar, Director of Cyber Services, Orro Over the past fortnight, I have had close to the same conversation with four different clients, across four different sectors. Someone on the compliance or risk team has seen a headline about the Essential Eight being retired, and the question that follows is always some version of […] The post The Essential Eight Is Being Retired: What Compliance Leaders Need to Know Now appeared first on Orro.
Beyond the Responsible Entity: What SOCI’s ‘Relevant Operator’ Concept Means for You
  By Stu Long, Chief Technology Officer, Orro Over the past few weeks, three separate conversations with clients in mining, water utilities and state government have circled back to the same theme: what the second tranche of SOCI Act reforms actually changes, and for whom. The Department of Home Affairs released its consultation paper on […] The post Beyond the Responsible Entity: What SOCI’s ‘Relevant Operator’ Concept Means for You appeared first on Orro.