BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
355 matching stories — in Mobile Device Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How to Build a Service-Oriented IT Operating Model
Organizing your IT team around technologies, systems, or support tiers is not enough to ensure users will understand what your team actually delivers. Shifting your focus to becoming a service-oriented IT model will help prevent disconnected workflows, inconsistencies in support experiences, and unclear ownership between teams. In this article, we will give you a rundown […]
How to Evaluate Serverless Architecture for Cloud Workloads
Serverless architecture enables IT teams to write, deploy, and upgrade code without physical servers, which can be more difficult to upgrade or maintain in traditional environments. But the serverless architecture pros and cons are never this simple—like many paradigm shifts in IT. This guide offers some clarity on why serverless architecture may work for your […]
What ITSM Problem Management Is and How It Works
IT remediation workflows often don’t examine the root cause of an incident. This can create recurring problems that lead to high support demand, disrupting operational efficiency. ITSM problem management solves this gap through systematic documentation and permanent solutions. Here’s how: Refine your IT problem management process The underlying cause of incidents needs to be studied […]
The Financing Coalition: Unblocking Smartphone Access at Scale
Smartphone financing is growing rapidly across all price points, but success requires alignment across manufacturers, retailers, carriers, and financiers. No single company can make it happen alone. It needs a coalition of the willing. As Prices Surge, Financing Bridges the Gap A global shortage of memory chips is pushing handset prices up fast. IDC now expects the average smartphone selling…
WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack
WP2Shell is a critical WordPress Core exploit chain disclosed in July 2026 that can enables pre-authentication remote code execution (RCE) on vulnerable WordPress installations. The chain is particularly significant from a threat-intelligence perspective because it removes the requirement for an attacker to first obtain valid credentials or authenticate to the target application. The exploitation chain […] The post WP2Shell Exploit Chain: Anatomy of a Sophisticated WordPress Attack appeare
Ivanti ICS Zero-Day Attacks Highlight Vendor Patching Hurdles
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticated Code Execution
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate
When security logic becomes an attack surface: lessons from CVE-2026-20971
CVE-2026-20971 was a use-after-free bug in Samsung's Knox-related PROCA driver, showing how a flaw in a security feature can become an attack surface. Learn more about this already patched vulnerability and how to respond.
Introducing JumpCloud PKI: Managed Client Certificates for Wi-Fi, VPN, and Application Access
Bring private certificate authority management, identity-bound issuance, and automated deployment together with JumpCloud PKI. The post Introducing JumpCloud PKI: Managed Client Certificates for Wi-Fi, VPN, and Application Access appeared first on JumpCloud.
Which Malware Analysis Platforms Use ML/AI-Driven Detection
Malware is becoming increasingly sophisticated, making it difficult for organizations to detect emerging threats using traditional signature-based security tools alone. Attackers use techniques such as code obfuscation, polymorphism, and sandbox evasion to bypass conventional security measures. Artificial intelligence (AI) and machine learning (ML) are transforming malware analysis by helping security teams identify suspicious patterns, analyze […] The post Which Malware Analysis Platforms
The 4 Questions Your Privileged Access Program Can’t Yet Answer About AI Agents
Discover how to adapt your privileged access management (PAM) program to improve security, auditability, and governance for AI agents. The post The 4 Questions Your Privileged Access Program Can’t Yet Answer About AI Agents appeared first on JumpCloud.
Beyond model guardrails, part 3: when prevention fails
Isolation and authorization limit the damage when an AI agent fails, but they can't stop it from misreading inputs. This final part covers how to treat retrieved content as untrusted, log agent activity independently and plan for recovery.
Iru AI: Your Windows Update caddie
Iru AI can now recommend and implement Windows Update settings based on CIS benchmarks or Microsoft defaults, and you can ask follow-up questions to refine those settings or understand their behavior.
Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access?
Remote and hybrid work have changed how organizations manage access to corporate applications, business data, and internal networks. Employees, contractors, and third-party vendors now connect from different locations and devices, making secure remote access a critical part of enterprise cybersecurity. For years, Virtual Private Networks (VPNs) have been a standard solution for remote connectivity. However, […] The post Why is ZTNA Emerging as a VPN Alternative for Secure Remote Access? ap
Securing the Autonomous Enterprise: Managing Agentic Workflows in IT
Discover how agentic workflows help IT secure and manage AI agents, eliminate governance gaps, and scale automation safely. The post Securing the Autonomous Enterprise: Managing Agentic Workflows in IT appeared first on JumpCloud.
Ransomware has a new target. Is your backup ready?
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. [...]
Augmentt renews its SOC 2 Type 2 attestation
Augmentt has completed its annual SOC 2 Type 2 audit and renewed the attestation we first earned in 2022. An independent auditor looked at the controls that protect the Augmentt platform. They checked that those controls were designed well and that they actually ran throughout the audit period.  When you connect a client tenant to […]
Cybersecurity awareness month: a practitioner’s view
October is Cybersecurity Awareness Month! How is your cybersecurity practice going?
Intune pricing: What your bundled MDM is actually costing you
You didn't specifically choose Intune. It came bundled with your E3 or E5 agreement. It was a free line item sitting next to the productivity suite your org/company actually signed up for. So you started using it, because that's what "free" does: becomes the default before anyone really evaluates it.
PamStealer comes to Intel Macs: Analyzing the x86_64 build of a Rust macOS stealer
In late August 2026, automated telemetry identified an in-the-wild sample of PamStealer , an emerging Rust-based macOS information stealer first documented by Jamf Threat Labs . Prior public analysis observed PamStealer operating exclusively as an Apple Silicon (arm64) payload delivered via trojanized disk images impersonating the Maccy clipboard utility. This analyzed artifact is the Intel (x86_64) architecture slice of a multi-architecture fat binary, confirming that the threat actors hav
How the memory crisis is splitting Africa’s smartphone market in two
Africa’s smartphone market just broke a twelve-quarter winning streak. Shipments fell 7% in Q2 2026 from the same period in 2025 — the first decline in three years, ending a run of twelve consecutive quarters of y-o-y shipment growth across the continent. Memory-driven cost inflation is colliding with the affordability constraints that define the continent’s device economy, and that collision…
Microsoft 365 Security Standards: Best Tools to Monitor Your Tenant
Secure Score shows a single number, not your tenant's actual policies. Here is what applied security standards really cover and which tools give MSPs full visibility across every client tenant.
Managing Microsoft 365 Tenants Through MSP Acquisitions
A practical guide for MSPs on auditing inherited Microsoft 365 tenants, transferring GDAP and CSP relationships, and standardizing security baselines across an expanded client book after an acquisition.