Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
432 matching stories — announcement, in Network Firewall (NGFW) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
Retailers entering the 2026 holiday season face a browser-side security problem that can be difficult to identify during a conventional website review.... Read More... The post What Holiday 2025 eSkimming Attacks Reveal About Retail Risk in 2026 appeared first on Source Defense.
NETSCOUT’s 1H 2026 DDoS Threat Intelligence Report reveals a DDoS landscape defined by growing scale, multivector complexity, direct-path attacks, residential proxy abuse, and increasingly commercialized attack services.
The China-based threat group uses DLL sideloading in these attacks
Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service... The post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
The post Slaiclind: analyzing a campaign combining ClickFix and EtherHiding appeared first on Stormshield.
No novelty required to be effective
Automated sign-ins used the vendor's Entra application identity to request Microsoft Graph tokens across consenting tenants
Most enterprise networks don’t run on one vendor anymore. Yours … The post No More Carve-Outs: Managing and Auditing More of Your Network in One Place appeared first on Tufin.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
The Razer Barracuda V2 Pro headset has a place in the office as well as at your gaming battle station.
Successful exploitation of some of these issues could lead to remote code execution and full device takeover. The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
Selon une étude WatchGuard Technologies menée en avril auprès de 684 salariés de PME et d'ETI dans huit pays, dont la France, 64 % des employés recourent à des outils d'intelligence artificielle non validés par leur direction. Moins de 30 % des organisations interrogées tiennent un inventaire de ces logiciels.
OSS tool to reverse binaries, apps, etc. with natural language, new hunting toolkit by Cisco Talos, testing Jev on identity resolution
Cybercriminals have found a way to make eSkimming attacks faster, cheaper, and easier to scale. Autonomous artificial intelligence (AI) agents can now... Read More... The post AI-Powered eSkimming Is Changing the Economics of Retail Attacks appeared first on Source Defense.
Unified visibility helps state agencies protect critical digital services by linking citizen experience to network, application, and infrastructure performance for faster troubleshooting and improved service reliability.
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co
TFG London Cyberattack Disrupts Hobbs and Whistles Retailers TFG London experienced a cyberattack detected on […] The post TFG London Cyberattack Disrupts Hobbs and Whistles Retailers appeared first on Penta Security Inc..
Data centers aren’t villains; they are part of the network fabric running our digital world. NETSCOUT protects data and AI moving between these environments.
Website tracking can collect and share personal data during a live browser session. Privacy teams need to understand that behavior alongside their... Read More... The post Website Tracking and GDPR: Why Browser Behavior Matters appeared first on Source Defense.
Attackers are currently targeting a critical vulnerability in SMA 1000 appliances, putting SonicWall customers in a familiar yet unenviable position.
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forgery (SSRF) that could allow a remote attacker "to direct the appliance to issue requests on their
OpenAI Agents Caught Manipulating Wikimedia Tools The Wikimedia Foundation reported unauthorized activity from rogue OpenAI […] The post OpenAI Agents Caught Manipulating Wikimedia Tools appeared first on Penta Security Inc..
Penta Security, a cybersecurity company, announced that it has issued a security response guide following […] The post Penta Security Issues Response Guide for AI-Powered Cyber Attack, Outlines Three Principles for Cyber Defence appeared first on Penta Security Inc..
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions. [...]
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions. "CVE-2026-107406 is a memory overflow vulnerability that may lead to remote code execution or denial-of-service under specific configuration conditions," Citrix said. The vulnerability
AI agents are moving from pilots into production. They update … The post Once an AI Agent Is In, How Far Can It Go? appeared first on Tufin.
Cybersecurity researchers have shed light on a WordPress compromise in which threat actors deployed multiple persistence mechanisms to ensure that the final payload kept returning without having to infect the site again. The backdoor has been codenamed SC after the "SC_" markers present in the injected content. Sucuri has described the malware as a "self-healing mesh" that's