Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
466 matching stories — in Network Firewall (NGFW) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
The China-based threat group uses DLL sideloading in these attacks
OverviewIn early October 2026, Rapid7 analysts investigated a compromise of a Citrix NetScaler ADC appliance. The appliance was running an affected 14.1 build and was exposed to active exploitation targeting NetScaler authentication and SAML deployments.The intrusion achieved root code execution, deployed multiple persistence mechanisms, installed PHP web shells, created outbound command-and-control and internal tunnelling capabilities, performed targeted reconnaissance of DNS, LDAP/Active Direc
Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service... The post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
The post Slaiclind: analyzing a campaign combining ClickFix and EtherHiding appeared first on Stormshield.
No novelty required to be effective
Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants
Most enterprise networks don’t run on one vendor anymore. Yours … The post No More Carve-Outs: Managing and Auditing More of Your Network in One Place appeared first on Tufin.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
The Razer Barracuda V2 Pro headset has a place in the office as well as at your gaming battle station.
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
Selon une étude WatchGuard Technologies menée en avril auprès de 684 salariés de PME et d'ETI dans huit pays, dont la France, 64 % des employés recourent à des outils d'intelligence artificielle non validés par leur direction. Moins de 30 % des organisations interrogées tiennent un inventaire de ces logiciels.
OSS tool to reverse binaries, apps, etc. with natural language, new hunting toolkit by Cisco Talos, testing Jev on identity resolution
Cybercriminals have found a way to make eSkimming attacks faster, cheaper, and easier to scale. Autonomous artificial intelligence (AI) agents can now... Read More... The post AI-Powered eSkimming Is Changing the Economics of Retail Attacks appeared first on Source Defense.
Unified visibility helps state agencies protect critical digital services by linking citizen experience to network, application, and infrastructure performance for faster troubleshooting and improved service reliability.
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co
TFG London Cyberattack Disrupts Hobbs and Whistles Retailers TFG London experienced a cyberattack detected on […] The post TFG London Cyberattack Disrupts Hobbs and Whistles Retailers appeared first on Penta Security Inc..
Data centers aren’t villains; they are part of the network fabric running our digital world. NETSCOUT protects data and AI moving between these environments.
Website tracking can collect and share personal data during a live browser session. Privacy teams need to understand that behavior alongside their... Read More... The post Website Tracking and GDPR: Why Browser Behavior Matters appeared first on Source Defense.
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
OpenAI Agents Caught Manipulating Wikimedia Tools The Wikimedia Foundation reported unauthorized activity from rogue OpenAI […] The post OpenAI Agents Caught Manipulating Wikimedia Tools appeared first on Penta Security Inc..
Penta Security, a cybersecurity company, announced that it has issued a security response guide following […] The post Penta Security Issues Response Guide for AI-Powered Cyber Attack, Outlines Three Principles for Cyber Defence appeared first on Penta Security Inc..
Citrix has disclosed CVE-2026-107406, a critical memory overflow vulnerability affecting NetScaler ADC and NetScaler Gateway appliances configured for specific SAML authentication roles. The flaw carries a CVSS v4.0 score of 9.5 and could enable an unauthenticated remote attacker to execute arbitrary code or trigger a denial-of-service condition on vulnerable systems. The vulnerability is particularly significant […] The post CVE-2026-107406: Critical NetScaler ADC and Gateway RCE Vulnerab
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
Network uptime alone no longer defines service quality; subscriber experience does. Better assurance can accelerate issue resolution, reduce preventable churn, protect revenue, and guide higher return on investments.
AI agents are moving from pilots into production. They update … The post Once an AI Agent Is In, How Far Can It Go? appeared first on Tufin.
Stormshield, a leading European player in sovereign cybersecurity, announces the arrival of Christophe Canguilhem, who will succeed Pierre-Yves Hentzen as President and CEO of Stormshield, effective January 1, 2027. To ensure a smooth and orderly handover, a three-month transition period will take place, allowing Christophe... The post Stormshield announces the appointment of Christophe Canguilhem to succeed Pierre-Yves Hentzen as Head of the company appeared first on Stormshield.
The most useful eSkimming platform comparison begins with the point of enforcement. What happens in the browser when an approved script, tag... Read More... The post How to Compare eSkimming Protection Platforms appeared first on Source Defense.
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as a "self-healing mesh" that's