Chrome Store Hosts 'Poper Blocker' Spyware Downloaded by Millions
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,163 matching stories — announcement, in Secure Access Service Edge (SASE/SSE) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cata pour Citrix NetScaler frappé par deux failles critiques exploitées avant leur correctif, le CERT-FR alerte
Citrix a corrigé huit vulnérabilités dans NetScaler ADC et Gateway, dont deux failles critiques déjà exploitées par des pirates. Dans l'urgence, le CERT-FR a publié une alerte et renvoie les administrateurs vers les correctifs de l'éditeur.
US, UK warn of exploited Citrix NetScaler zero-day bugs
Incident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U.S. and U.K. released advisories on Sunday confirming vulnerabilities. Citrix itself confirmed eight new vulnerabilities.
Cyber Attack News: Risk Roundup, Top Stories for September 2026
The post Cyber Attack News: Risk Roundup, Top Stories for September 2026 appeared first on Xage Security.
Microsoft Just Proved the Passwordless Argument
Six years ago, Microsoft’s own identity security lead wrote a blog post telling the industry to hang up on phone-based authentication for good. It didn’t land the way you’d expect a warning from the company that built the world’s most-used identity platform to land. SMS codes stuck around. Voice calls stuck around. “It’s better than […] The post Microsoft Just Proved the Passwordless Argument appeared first on Portnox.
⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats
A domain used as harmless placeholder text showed up in roughly 1,700 repositories. Then somebody registered it and started serving malicious lures. That is the kind of week this was: forgotten assumptions turning into live attack surface. Elsewhere, weak service accounts, old bugs, exposed systems, phishing kits, and strangely easy exploit paths kept doing useful work for attackers. Nothing
Visibility Isn’t Control: When Manufacturers Mistake Device Inventory for Access Control
Every device that connects to your plant network gets a decision made about it. Something determined that this identity is allowed to be here and what it is allowed to reach. The problem in most plants isn’t that the decision was wrong. It’s that it was made once, by hand, at install, by someone solving […] The post Visibility Isn’t Control: When Manufacturers Mistake Device Inventory for Access Control appeared first on Portnox.
Akamai Joins Athena Coalition to Shield Users from New Vulnerabilities
Akamai joins Chainguard’s Athena Coalition, verifying that Akamai App & API Protector customers are automatically shielded from newly disclosed vulnerabilities.
Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign
The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek.
The Breach that Never Touches your Network
Your firewall held. Your SOC stayed quiet. And a customer still lost money to a company that looked exactly like yours. Picture a Monday morning. A long-time customer calls your helpline, upset. Over the weekend she paid to “renew” her account on your website. It had your logo, your colours, your tone of voice. She […] The post The Breach that Never Touches your Network appeared first on Seqrite Labs.
Securing AI Agents at Scale with NVIDIA
AI agents are crossing an important threshold. They are moving from assistants that respond to us to autonomous systems that reason, plan, and act on our behalf. They can write and execute … The post Securing AI Agents at Scale with NVIDIA appeared first on Palo Alto Networks Blog.
How Data Lineage Catches a File That’s Trying Not to Be Found
A technical look at how Netskope One Data Lineage reconstructs a file’s journey and closes visibility gaps with endpoint events. It almost feels like a Shrödinger riddle: When a user downloads a financial report, renames it (e.g. holiday_photo.jpg), edits it, and uploads it to personal cloud storage, is it still the same file? Arguably not, […]
FortiOS 7.4 End of Support: How Long It Lasts and Which FortiGates Stop There
FortiOS 7.4 is supported until 11 November 2028. See which FortiGates can never move to 7.6, what the upgrade removes, and the three options left.
What Is a Mouse Jiggler? Risks, Uses & Corporate Implications
Remote and hybrid work have changed how organizations measure presence, productivity, and security. Along with that shift, a small and inexpensive gadget has quietly become a topic of discussion in boardrooms, HR departments, and security operations centers alike: the mouse jiggler. If you have ever wondered what is a mouse jiggler, why employees buy them, […]
How to Change Directory in CMD: A Step-by-Step Guide for Beginners and Pros
Ever opened Command Prompt, typed a command, and got “The system cannot find the path specified”? Learning how to change directory in CMD is the fix. It is one of the first skills every Windows user, IT admin, and security analyst needs. The Windows command line is fast and powerful, and attackers know it. MITRE […]
Secure agent access in development workflows with 1Password + NVIDIA OpenShell
null1Password for NVIDIA OpenShell is [now in beta](https://support.1password.com/betas). Connect a 1Password Environment to the OpenShell runtime and let your agents work with the systems it needs without exposing real credentials to the model.Set up the integration65% of developers say they’re expected or encouraged to use AI agents, but only 33% say they have a highly secure way to do so, according to 1Password's 2026 Developer survey. Developers are leveraging coding agents to handle more of
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw that could result in unauthenticated remote code execution. The vulnerability was first exploited as a zero-day
Kothamine malware uses Tailscale’s tailcat to evade network detection
Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block.
Reachability Watch: IBM Guardium’s Eleven-CVE Week and 596 New CVEs This Week
NetFoundry's Reachability Watch tracks new network-exploitable CVEs and KEV-bound vulnerabilities every week — this week: IBM Guardium's access-control bypass and 596 new CVEs. The post Reachability Watch: IBM Guardium’s Eleven-CVE Week and 596 New CVEs This Week appeared first on NetFoundry.
From End of Support to SASE: The 30-Day Firewall Replacement Plan
A 30-day replacement plan for a firewall past its date: five phases with quantitative gates, rollback triggers, and what to do when 30 days is not enough.
What Is DHCP? Understanding the Dynamic Host Configuration Protocol
Every time you open your laptop at a coffee shop, connect your phone to office Wi-Fi, or plug a new printer into your network, something happens in the background that most people never notice. Within seconds, your device is online, able to browse the web, send emails, and talk to other devices. The quiet workhorse […]
Securing the Jackpot: How Western Canada Lottery Corporation Is Modernizing 5,000 Retail Sites with Netskope SASE
Western Canada Lottery Corporation is a non-profit organization that operates lottery products for Manitoba, Saskatchewan, Alberta, and three northern territories. With 5,000 retail lottery terminal locations across one of the world’s largest and most geographically dispersed retail networks, WCLC set out to consolidate a fragmented multi-ISP infrastructure, cut multi-million dollar circuit costs, modernize employee and vendor access, and govern AI adoption, all on a single unified SASE platform
How to Eliminate Shared Production Kubeconfigs
Learn how to eliminate shared Kubernetes kubeconfigs.
Work is Hybrid. Why Are You Paying Double for a Cloud Tax on the Office?
Let’s be honest about where workforce security (i.e. the SSE market) got off track. A few years ago, the default... The post Work is Hybrid. Why Are You Paying Double for a Cloud Tax on the Office? appeared first on Skyhigh Security.
Your Firewall Doesn’t Know Who 10.1.45.112 Is
A SOC analyst pulls up a threat log at 2am. Something’s misbehaving on 10.1.45.112. Is that the CFO’s laptop? A contractor’s phone on guest Wi-Fi? A server that’s been compromised? The log doesn’t say — it just says an IP address did something, and IP addresses don’t have names. So the analyst goes digging: DHCP […] The post Your Firewall Doesn’t Know Who 10.1.45.112 Is appeared first on Portnox.
Aryaka Earns 17 G2 Badges in Fall 2026, Led by SD-WAN and Unified SASE Wins
Aryaka Networks earned 17 badges across G2’s Fall 2026 reports, including 11 in the SD-WAN category and additional recognition for Unified SASE. The recognition is built entirely on verified customer reviews, not vendor claims, which is what makes a G2 badge worth more to a buyer than another vendor slide. 17 G2 Badges, Fall 2026... The post Aryaka Earns 17 G2 Badges in Fall 2026, Led by SD-WAN and Unified SASE Wins appeared first on Aryaka.
Europe’s Online Gambling Enforcement Challenge
Europe’s illegal online gambling market is growing, raising a critical question for governments and regulators: how do you enforce online gambling regulations when unlicensed operators can continue to reach consumers across borders? A new report commissioned by Euromat and produced by Regulus Partners and Helios estimates that Europe’s unlicensed online gambling market has grown at […]
Cybersecurity for MSPs: The Complete Platform Guide | Todyl
Learn what a cybersecurity platform for MSPs has to cover, how to evaluate SIEM, SASE, EDR, MXDR, and GRC together, and how to price it as a service line.
The Battle for Path
In the words of the song, 'Everybody Wants to Rule the World'. It is a battle for the path your AI queries go. Your Q&A sessions with Claude, ChatGPT, Co-Pilots, everyone wants to get a crack at them as training data for their models. We say "Control Your Path". The post The Battle for Path appeared first on Cohesive Networks.
Federal Zero Trust Maturity: Aligning Mission, Security, and Cost
Semtech and Palo Alto Networks integrate 5G/LTE routers with Zero Trust security for industrial IoT
Semtech Corporation, provider of high-performance semiconductors powering AI data center networking and intelligent, connected Internet of Things (IoT)... The post Semtech and Palo Alto Networks integrate 5G/LTE routers with Zero Trust security for industrial IoT appeared first on Industrial Cyber.
Firewall and VPN End of Life 2026–2027: The Cross-Vendor Tracker
Every firewall, VPN gateway and secure-access product going end of sale or end of support through 2027, across twelve vendors, with the KEV overlay.
What Would RAG Look Like If Miranda Priestly Were the User?
You Will Never Patch Fast Enough. Here’s the Math.
Vulnerabilities are disclosed far faster than any team can remediate them, and attackers exploit them in days. See why the patch backlog is structural, and what closes the gap. The post You Will Never Patch Fast Enough. Here’s the Math. appeared first on NetFoundry.
Forcepoint security advisory (AV26-960)
Autonomous Microsegmentation 101: Why Gartner Says Automation is the Only Way to Contain Breaches on the Global Attack Surface
Modern enterprise networks no longer operate within a tidy, well-defined perimeter. Today’s environments sprawl across data centers, clouds, branch offices, and everywhere in between – a tangled web of layers, workloads, and identities that Gartner calls the Global Attack Surface Grid. In this landscape, traditional segmentation and manual firewall rule management can’t keep up; autonomous microsegmentation is vital for enabling real-time breach containment. …
What Is a VLAN? Definition, Core Components, and Segmentation Strategies
After decades of widespread use, VLANs are an established cornerstone of network security. But as modern networks grow more complex and AI security risks increase the pressure on security leaders to strengthen cyber resilience, VLANs alone can’t deliver reliable uptime protection. To understand where VLANs fit into modern cybersecurity strategies, we’ll outline everything you need to know about how VLANs work and when to combine them with more advanced solutions. …
The CMMC Phase II Suspension: What It Means for Your Compliance and Zero Trust Strategy
How to Self-Host Supabase Securely with NetBird
Self-host Supabase with Docker and NetBird. Keep Studio and database access private, then control connections with groups and access policies.
NetBird's September Newsletter
Control Center gets a Draft mode for staging access changes before they go live, Light Mode lands on the desktop app in v0.79, v0.78 closes a Windows DNS leak and gets Rosenpass working through the reverse proxy, a new guide covers picking hardware for your first home server, and NetBird is a track partner at the Vultr Agent Arena Hackathon in San Francisco.