Attackers hijack country-code domains to impersonate Google and other services
Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,163 matching stories — announcement, in Secure Access Service Edge (SASE/SSE) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
[tl;dr sec] #349 - Vulns & Exploits in the AI Era, Package Manager Sandboxing, Testing AI Sandboxes
Trends from Google Threat Intelligence Group, a survey of how package managers handle sandboxing, testing Vercel and Perplexity's sandboxes
The AI Memory Tax Makes uCPE Design Worth a Look
AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma
Throughout this year, Amazon Web Services (AWS) has repeatedly had to patch autonomous agent security holes, which have then reemerged in slightly different forms, according to cybersecurity researchers at Palo Alto Networks’ Unit 42 and at Zenity Labs. But the problem is not with AWS, which seems to be reacting quickly to address security reports, as much as it is with the essential nature of autonomous AI agents and the difficulty in controlling those agents. The fact that a hyperscaler with A
Amazon Alexa Tablet 12 Pro, Alexa Tablet 11, Alexa Tablet 8: Specs, Features, Price
The three new aluminum Alexa Tablets now run Android with full access to the Google Play Store. There are versions for kids too.
DNSFilter Named Web Filtering and Control Solution of the Year in the 2026 CyberSecurity Breakthrough Awards
DNSFilter has been named Web Filtering and Control Solution of the Year in the tenth annual CyberSecurity Breakthrough Awards. Here's a look at the technology behind the win.
Open Enrollment Is Where Digital Strategy Gets Tested. Are You Ready?
Open enrollment puts payer infrastructure, security, APIs, and member experiences under pressure. Learn six ways that health plans can prepare from edge to core.
SonicWall and Splunk Patch Critical Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.
You Can’t Exploit What You Can’t Reach
Vulnerability cloaking removes an unpatched service's open ports. See how outbound-only, identity-based connections leave attackers nothing to scan or exploit. The post You Can’t Exploit What You Can’t Reach appeared first on NetFoundry.
The October 2026 Root KSK Rollover: Is Your DNS Really Ready?
How Does the Internet Work? A Simple Guide for Business & Security Leaders
You click a link, and a web page appears in less than a second. But what actually happens in between? More than five billion people go online every day, yet very few know how the internet works or where their data is exposed along the way. Understanding how the internet works is the first step […]
Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow
New research from cyber-physical systems (CPS) protection vendor Claroty found that 58% of CPS operators said they experienced... The post Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow appeared first on Industrial Cyber.
FortiBleed Attackers Locking Victims Out of Fortinet Devices
Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek.
Act Before the Incident: Process-Aware Policy in Your SWG
We are marching towards a tipping point, where agentic transactions outnumber human-originated internet requests. These requests arrive at a volume and velocity no human can match, so defenses need to work at machine scale. For your secure web gateway (SWG) this has implications, creating a need for real-time policy controls that understand both process name […]
What’s New Device Platform Intelligence on Oct 08, 2026
Go to Device Platform Intelligence Added Platforms 7 Platforms are added Platform Name Node Type2 Node Type Arista DCS-7304 Switch Switch Switch HP Aruba Instant On 1930-24G 4SFP+ 370W Switch Switch Switch OUKITEL WP23 Plus Phone Mobile Phone Mobile Device Oppo Reno 15 Pro Max 5G Phone Mobile Phone Mobile Device Oppo Reno 16 F […]
What’s New Device Platform Intelligence on Oct 08, 2026
Go to Device Platform Intelligence Added Platforms 7 Platforms are added Platform Name Node Type2 Node Type Arista DCS-7304 Switch Switch Switch HP Aruba Instant On 1930-24G 4SFP+ 370W Switch Switch Switch OUKITEL WP23 Plus Phone Mobile Phone Mobile Device Oppo Reno 15 Pro Max 5G Phone Mobile Phone Mobile Device Oppo Reno 16 F […]
BuySell Technologies Moves from Perimeter-Based Security to Zero Trust with Netskope SASE/SSE to Support Rapid Business Growth
Founded in 2001, BuySell Technologies Co., Ltd. has achieved an exceptional 67.8% year-over-year revenue growth rate in the reuse industry. As the company expanded its business, grew its workforce, and actively pursued mergers and acquisitions (M&A), the limitations of its existing perimeter-based security model became increasingly apparent. To address challenges including growing use of networks outside the corporate perimeter, the proliferation of shadow IT, inconsistent security policies acro
What Does SKU Stand For? A Complete Guide for Retail and Beyond
SKU stands for Stock Keeping Unit. It is a unique alphanumeric code a business assigns to each distinct product it sells or stores, so it can track inventory, sales, and movement with precision. If you have ever looked at a price tag, a shelf label, or an online product listing and noticed a short string […]
SonicWall’s latest critical flaw indicates a security pattern, not another one-off bug
SonicWall has disclosed yet another critical flaw in one of its core products. CVE-2026-102255, rated 10 in severity, the highest possible on the Common Vulnerability Scoring System (CVSS), is a pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. An unintended access path could allow attackers to order the appliance to issue requests on their behalf and gain access to internal functions to perform unauthorized actions. At the same ti
How to Tie Kubernetes Audit Logs to Individual Engineers
Learn how to attribute Kubernetes logs to individual engineer identities.
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
SonicWall security advisory (AV26-1017) – Update 1
Why API Security Belongs in ECB Cyber Action Plans
Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
What Does GPU Stand For? A Beginner-Friendly Guide to Graphics Power
Your computer’s fan is roaring, your system is crawling, and you have no idea why. Could the culprit be your graphics card? Many people ask, “What does GPU stand for?” without realizing this component is also a growing target for cybercriminals. GPU stands for Graphics Processing Unit, a specialized processor built to handle complex visual […]
Zero Trust Network Sandboxing for Agentic AI, Enforced in the Linux Kernel
Sandbox AI agents with deny-by-default, per-executable network policy enforced by eBPF in the Linux kernel. No container changes, no sidecar proxies. The post Zero Trust Network Sandboxing for Agentic AI, Enforced in the Linux Kernel appeared first on NetFoundry.
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Patching was never the solution, even as AI outpaces it
AI exploits vulnerabilities faster than you can patch, but no one was ever fully patched. Rob Maas on shifting from detect and respond to Prevent and Adapt.
What Is Continuous Authentication? Meaning, How It Works, and Why It Matters for Zero Trust
Key Takeaways Continuous authentication verifies identity and device throughout a session, not only at the moment of login. It closes a specific gap static authentication has: a session that passes login can still be hijacked or taken over afterward. Signals used include device posture, behavioral context, and location, evaluated on an ongoing basis rather than […] The post What Is Continuous Authentication? Meaning, How It Works, and Why It Matters for Zero Trust appeared first on Portnox
SASE for SMBs: Enterprise-Grade Security Without Enterprise Complexity | Todyl
How MSPs deliver SASE for small business clients: replace the VPN with ZTNA, order controls by friction, and package cloud-delivered security as a service.
So OpenAI Wants Us to Just Trust Them?
At DevDay this week, OpenAI launched dots: always-on agents that chase goals across your apps with very little supervision. Per Reuters’ coverage, they can keep a sales proposal current as a customer’s needs change, build a working demo, research and analyze data, and you talk to them through Slack and Teams. They run on OpenAI’s […] The post So OpenAI Wants Us to Just Trust Them? appeared first on Portnox.
When Convenience Becomes a Command Prompt: Five Critical RCEs in Dokploy
AgentSkope Marketplace: AI Agents the Easy Way
AgentSkope Marketplace: AI Agents the Easy Way 56% of SOC and NOC teams are considering agents as a way to help with the capacity pressure in their team, and yet, among those who have started deploying them only 9% consider them to be highly integrated. Managing agents has become a new workload in itself at […]
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Citrix Patches Third Actively Exploited NetScaler Zero Day
Citrix has released another patch for a zero day vulnerability under active exploitation, just a few days after patches were […] The post Citrix Patches Third Actively Exploited NetScaler Zero Day appeared first on The HIPAA Journal.
How Can Digital Risk Protection Services Help Banks Detect External Cyber Threats?
Banks have invested heavily in securing their internal IT infrastructure, endpoints, applications, and networks. However, cyber risks do not always originate inside the organisation. Attackers increasingly target a bank’s external digital presence, including websites, domains, social media accounts, mobile applications, employees, customers, and exposed credentials. A compromised domain, fake banking website, impersonated social media account, […] The post How Can Digital Risk Protection S
Beyond the Firewall: Cryptographic Segmentation for the Modern CISO
Network segmentation trusts the address, so attackers with stolen credentials walk right past it. See how cryptographic segmentation ties access to identity. The post Beyond the Firewall: Cryptographic Segmentation for the Modern CISO appeared first on NetFoundry.
Niantic Spatial CEO on bringing AI into the physical world
Zero-Shot Learning is a podcast about how AI is built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google Gemini, it offers a builder’s view of the architecture and complex decisions involved in shipping AI.Niantic Spatial’s CEO Inhi Cho Suh and Director of Product Management Eugene Chong joined Zero-Shot Learning to explore why spatial understanding is essential for AI systems operating in the physical world and how a grounding l
1Password named a leader in the GigaOm Radar for Enterprise Password Management
Identity and access have changed drastically in the past decade. To meet the needs of the modern enterprise perimeter, Enterprise Password Managers (EPM) have evolved far beyond traditional workplace password storage. The GigaOm Radar: Enterprise Password Management charts this evolution of the category. As the report states, “...evaluation now turns on what surrounds the vault: passwordless login paths, machine and AI-agent credential delivery, breach intelligence, and the administrative machin
How to Reduce Overprivileged Kubernetes Service Accounts
Learn how to reduce Kubernetes ServiceAccount risk.
Citrix NetScaler security snafus get even worse amid more 0-day reports
The new vuln, CVE-2026-88779, is a memory overflow bug that leads to denial of service