Zero Trust Network Access (ZTNA): Scope, Limits and Gaps
Gartner forecasts that up to 70% of new remote access … The post Zero Trust Network Access (ZTNA): Scope, Limits and Gaps appeared first on Tufin.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
467 matching stories — in Network Firewall (NGFW) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
Zero-Day Exploitation of Citrix NetScaler ADC and Gateway: CVE-2026-88771 and CVE-2026-88772
OverviewOn September 27, 2026, Citrix disclosed eight new vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including two critical remote code execution (RCE) vulnerabilities: CVE-2026-88771 and CVE-2026-88772. Both of these RCE vulnerabilities carry a critical CVSSv4 score of 9.5, and both have been confirmed as being actively exploited in the wild as zero-days prior to the vendor disclosure. CVE-2026-88771 affects vulnerable NetScaler deployments in their default configuration, wi
NetScaler admins told to patch critical zero-days in ADC and Gateway now
Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too late,” watchTowr CEO Benjamin Harris wrote in a LinkedIn post on Sunday. Citrix subsequently confirmed the two remotely exploitable vulnerabilities were under attack, and released fixes for both. Affected
Securing AI Agents at Scale with NVIDIA
AI agents are crossing an important threshold. They are moving from assistants that respond to us to autonomous systems that reason, plan, and act on our behalf. They can write and execute … The post Securing AI Agents at Scale with NVIDIA appeared first on Palo Alto Networks Blog.
A Sketch of GISEC Global 2026
Penta Security participated in GISEC 2026, the Middle East and Africa’s largest cybersecurity exhibition, held […] The post A Sketch of GISEC Global 2026 appeared first on Penta Security Inc..
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
Data Security Posture Is a Discipline, Not a Scan: 10 Practices That Make DSPM Work
A one-time scan shows where sensitive data sits today. Keeping it protected takes a sustained practice. Here are ten practices that turn data security posture management into a daily discipline, from defining what matters to your business to bringing generative AI into scope.
Must-See Enterprise Sessions at ENGAGE 26
NETSCOUT has multiple can't-miss sessions for enterprises at ENGAGE 26. Learn more about the actionable insights that can be gleaned from NETSCOUT Smart Data.
Kiteworks recommends server shutdown pending possible attack
The Battle for Path
In the words of the song, 'Everybody Wants to Rule the World'. It is a battle for the path your AI queries go. Your Q&A sessions with Claude, ChatGPT, Co-Pilots, everyone wants to get a crack at them as training data for their models. We say "Control Your Path". The post The Battle for Path appeared first on Cohesive Networks.
Federal Zero Trust Maturity: Aligning Mission, Security, and Cost
Introducing Omnis Streamer’s Built-in MCP Server: NETSCOUT’s Latest Innovation
NETSCOUT’s Omnis Streamer now includes a built-in MCP server, giving AI agents and LLMs real-time access to Smart Data for AI workflows and autonomous troubleshooting.
Semtech and Palo Alto Networks integrate 5G/LTE routers with Zero Trust security for industrial IoT
Semtech Corporation, provider of high-performance semiconductors powering AI data center networking and intelligent, connected Internet of Things (IoT)... The post Semtech and Palo Alto Networks integrate 5G/LTE routers with Zero Trust security for industrial IoT appeared first on Industrial Cyber.
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.
How Network Data Quality Affects Your AI Costs
Find NETSCOUT at SCTE TechExpo26, Booth B430, from September 29 through October 1. See firsthand how curated, multidomain NETSCOUT Smart Data powers smarter operations, strengthens security, and protects network and service availability.
AI malware just removed the human from the attack loop
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first “LLM-as-C2” architecture that can fully automate the command-and-control (C2) chain. Dubbed CLOSEDQUORUM, the malware binary relies on a panel of large language model (LLM) judges to map and execute the
The Rising Threat of Deepfakes: Why Organizations Must Rethink Trust
For decades, we believed that if could hear someone’s voice on a phone call or see them on a video call, they were who they said they were. What if that’s no longer true?
Check Point warns of Management Server zero-day exploited in attacks
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. [...]
The Flat Network Is the Last Unsegmented Zone in the Enterprise
Introducing Unit 42 Continuous Frontier AI Defense
Cybersecurity is in the middle of a generational shift. AI has disrupted a 30-year balance of power between defenders and adversaries. Armed with agentic AI tools and open-weight models stripped of safety … The post Introducing Unit 42 Continuous Frontier AI Defense appeared first on Palo Alto Networks Blog.
Network Security Monitoring Software: Evaluation Guide
Exploited vulnerabilities were the initial access vector in 31% of … The post Network Security Monitoring Software: Evaluation Guide appeared first on Tufin.
The Closed Quorum: Inside the first reported autonomous AI C2 implant
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
A critical vulnerability impacting Orkes Conductor is being actively exploited in the wild, according to Fortinet. The vulnerability in question is CVE-2026-58138 (CVSS v3.1 score: 9.8/CVSS v4 score: 9.3), which relates to a case of unauthenticated remote code execution. "Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote
New Check Point flaw lets hackers execute code with root privileges
Check Point Software has released security updates to address a critical vulnerability that can let attackers execute code with root privileges on management systems. [...]
The Essential Planes Every Sovereign SASE Vendor Must Support
Telus Confirms Account Breach – February 2025 to June 2026
Telus Confirms Account Breach – February 2025 to June 2026 Telus is notifying customers of […] The post Telus Confirms Account Breach – February 2025 to June 2026 appeared first on Penta Security Inc..
Microsegmentation Is Maturing. Is Your Network Ready?
Zero Trust is everywhere now, but ask five people what … The post Microsegmentation Is Maturing. Is Your Network Ready? appeared first on Tufin.
Everyone Has a Code of Conduct. Fewer Than Half Have the Control That Works Best.
Your organization almost certainly has a code of conduct, an internal audit department and a hotline. So did the victims. In this post, we look at the eighteen anti-fraud controls ACFE measured in Occupational Fraud 2026 — and why two of the four most effective are in place at fewer than half of organizations.
HIPAA Enforcement Is Increasing: Why Third-Party Scripts Are the Next Big Target
A healthcare marketer adds a “simple” tracking pixel to an appointment page. Nothing exotic. Just a script to measure conversions, tune campaigns,... Read More... The post HIPAA Enforcement Is Increasing: Why Third-Party Scripts Are the Next Big Target appeared first on Source Defense.
CRA Reporting Requirements Explained: 24-Hour Deadlines, SRP, and Legacy Products
The EU Cyber Resilience Act (CRA) will become fully applicable on December 11, 2027. However, […] The post CRA Reporting Requirements Explained: 24-Hour Deadlines, SRP, and Legacy Products appeared first on Penta Security Inc..
Melofee: a look back at a Linux implant and its new variants
The post Melofee: a look back at a Linux implant and its new variants appeared first on Stormshield.
What PSPs Aren’t Telling Merchants About Client-Side Risk
Payment service providers play a critical role in modern commerce. They help merchants accept payments, reduce infrastructure complexity, and shift sensitive parts... Read More... The post What PSPs Aren’t Telling Merchants About Client-Side Risk appeared first on Source Defense.
Fortinet security advisory (AV26-023) - Update 1
Fortinet security advisory (AV26-898)
Clavister Awarded 47 MSEK Network Security Contract with Global Enterprise Customer
Clavister has signed a new five-year agreement with a long-standing global enterprise customer for the continued delivery of network security products and advanced technical services. The agreement has a total contract value of approximately 47 MSEK, and is Clavister’s largest civilian contract to date.
A Holistic Look at eSkimming: From Formjacking to Full Funnel Manipulation
How modern website attacks evolve inside the browser, and what to do about it It starts like a lot of incident reviews... Read More... The post A Holistic Look at eSkimming: From Formjacking to Full Funnel Manipulation appeared first on Source Defense.
SonicWall Warns of Actively Exploited Vulnerabilities in SMA1000 Appliances
Two remotely exploitable zero-day vulnerabilities in SonicWall SMA1000 appliances are being chained together to achieve remote code execution, according to […] The post SonicWall Warns of Actively Exploited Vulnerabilities in SMA1000 Appliances appeared first on The HIPAA Journal.
Clavister and Akkodis Strengthen Europe’s Tactical Communications Capabilities
Clavister has signed a Memorandum of Understanding (MoU) with Akkodis Group Nordics to deepen the companies’ collaboration in tactical communications and jointly pursue opportunities across Nordic and European defence markets.
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.