SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,215 matching stories — in Secure Access Service Edge (SASE/SSE) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Python NodeStealer: AI-Assisted to Full Spyware
Since 2023, Netskope Threat Labs has been tracking the Python-based NodeStealer, an infostealer targeting sensitive browser data and Facebook user, and Ads Manager accounts. In August 2026, we found a new variant with major upgrades. Aside from its previous features, it now has full spyware capabilities, including keystroke logging, clipboard monitoring, screenshot capture, and a […]
Red Team AI Skills
Today, SpecterOps released a new open-source skills marketplace for offensive security research and red team operations. We are proud to have collaborated on this project over the last few weeks and hope more teams will join now that it’s public. The initial release includes plugins for Fortra’s Cobalt Strike and Outflank C2. Get started here: https://github.com/SpecterOps/skills Background I recently reached out to a few red teams we’ve worked with before to discuss developing a public AI
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
OverviewOn September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution (RCE) on affected appliances.CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. The flaw has a CVSS v3.1 base score
Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program
A secure workspace for your team - so you can focus on building, not on what could go wrong. Every customer support agent starts their day the same way: opening a browser, … The post Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program appeared first on Palo Alto Networks Blog.
Your DNS Is Hiding in HTTPS — This Is Why It Matters
Discover why unmanaged DNS over HTTPS (DoH) creates security visibility gaps and how a controlled DoH strategy restores visibility without compromising privacy.
How DNS filtering supports your compliance framework
PQC Doesn’t Need a Network Forklift
The 2026 Verizon DBIR found vulnerability exploitation beat stolen credentials for the first time in 19 years. Here's what that means for AI infrastructure. The post PQC Doesn’t Need a Network Forklift appeared first on NetFoundry.
Policy on Paper, Risk in Practice
Ask any security leader whether their organization has an AI policy and most will say yes. Ask how it’s enforced, and the answer gets complicated. According to the 2026 Unified Data Security Report, nearly half of the organizations surveyed still rely on written policies, post-event monitoring, or inconsistently enforced controls as their primary enforcement approach. […]
Securing Mobile Communications – Why Mobile Device Management Is Only The First Step
Mobile devices have fundamentally transformed operations across all sectors, including highly sensitive fields such as law enforcement, government agencies, and […] The post Securing Mobile Communications – Why Mobile Device Management Is Only The First Step appeared first on Soliton Systems.
Making the Most of the Cloud Marketplace Opportunity
How Partners Can Turn Marketplace Momentum into Customer Value. Cloud marketplaces have become an increasingly important way for customers to buy technology. They can offer a familiar route to procurement, help organizations … The post Making the Most of the Cloud Marketplace Opportunity appeared first on Palo Alto Networks Blog.
The Perimeter Just Lost, Officially: What the 2026 DBIR Means for AI Infrastructure
The 2026 Verizon DBIR found vulnerability exploitation beat stolen credentials for the first time in 19 years. Here's what that means for AI infrastructure. The post The Perimeter Just Lost, Officially: What the 2026 DBIR Means for AI Infrastructure appeared first on NetFoundry.
Netskope Joins CrowdStrike QuiltWorks + 3 Major New Integrations
Most attacks today move faster than a human analyst can read a dashboard. AI agents, non-human identities, and automated SaaS workflows now touch as much sensitive data as the people who deployed them, and each one adds another blind spot a security team has to awkwardly bend their neck to try to watch. Understanding risk […]
What Is SASE? The Complete Guide to Secure Access Service Edge | Todyl
What is SASE? Learn the SASE definition, how secure access service edge architecture works, its 5 core components, and why MSPs are replacing VPNs with it.
Pervasive Security and Why the AI Era Needs a New Security Model
What Enterprises Are Really Saying About AI Security
What Is DSL: A Deep Dive into Digital Subscriber Line Technology
If you’ve ever set up home internet, you’ve probably come across the term “DSL” as one of the connection options alongside cable and fiber. But what is DSL, exactly, and how does it manage to deliver internet access over the same copper wires that have carried telephone calls for over a century? This guide breaks […]
7 Reasons Company AI Projects Stall Before They Ever Launch
Walk into almost any IT department in 2026 and you’ll find an AI initiative somewhere on the roadmap. Walk out a few months later, and there’s a good chance it’s still there — approved, budgeted, discussed in every leadership meeting, and not yet live. That gap between ambition and adoption isn’t a lack of enthusiasm. […]
Incident Response vs. Breach Containment: Modernizing Cyber Resilience and Recovery
It takes an average of 247 days to identify and contain a breach, yet attackers typically begin moving laterally in less than 30 minutes. Cyber incident response has long relied on the assumption that defenders have time to observe anomalous behavior, investigate it, and coordinate containment before business impact escalates. The massive delta between attack speed and breach containment proves that assumption no longer holds – and the disparity is only growing wider with the rise of…
Mean-Time-to-Adapt: The Only Clock That Matters Now
Mean-Time-to-Adapt: The Only Clock That Matters Now The average enterprise breach still takes 241 days to detect and contain, 181 days to identify, and 60 more to shut down, according to IBM’s Cost of a Data Breach Report. That number has barely moved in years, and most security programs are still built around shrinking it. […] The post Mean-Time-to-Adapt: The Only Clock That Matters Now appeared first on Portnox.
Hugging Face Breach: When Tailscale VPN Is the Blast Radius
OpenAI agents used a stolen Tailscale key to breach Hugging Face. See how NetFoundry's zero trust overlay changes what a stolen credential is worth. The post Hugging Face Breach: When Tailscale VPN Is the Blast Radius appeared first on NetFoundry.
Shifting the Standard: Akamai’s Transition to the IFRS S2 Climate Disclosure
What is 401 Error: Causes, Fixes, and Best Practices for IT Security
If you spend any time managing websites, APIs, or internal business applications, sooner or later you’ll run into an HTTP status code that stops users cold: the 401 error. It’s short, it’s blunt, and it usually shows up at the worst possible moment — during a product launch, a client demo, or a critical system […]
The CyFun Label Explained: Levels, Routes, Costs and Deadlines
What the CyberFundamentals framework is, how the four levels and three assurance routes work, what a label costs, and which NIS2 deadlines still apply.
Streamlining Application and API Discovery and Governance
Your Firewall Protects Data. It Was Never Built to Protect a Patient.
Hospital security programs are built to stop a data breach. The attack chains ON2IT models in live Hack the Hospital demonstrations hit HVAC, water, and building systems instead.
What MSPs Need to Know about CIRCIA Final Rule | Todyl
Is your MSP ready for CIRCIA? Covered clients must report cyber incidents in 72 hours. Learn who's covered and how to deliver compliance services.
Managed Firewall Pricing 2026: What Mid-Market Teams Actually Pay
Managed firewall pricing benchmarks for Europe and North America, what the monthly fee hides, and the seven questions to ask before signing an MSP quote.
1Password signs OpenAI open letter calling for collective action on cyber defense
As AI moves from answering questions to taking actions, the ecosystem around it will determine whether organizations can use it safely and with confidence.OpenAI’s open letter on collective cyber defense warns that defenders have a limited window to strengthen security. It urges organizations to fix their highest-risk weaknesses, build least privilege and strong access controls, verify fixes, and make agentic identities traceable and accountable.The real work is building the ecosystem that lets
Salt Typhoon Is Already Inside - Encryption Doesn’t Solve the Problem
COMMUNICATIONS SECURITY BRIEFING What Volt Typhoon and Salt Typhoon reveal about the next front in communications security, and why hardened transport is the missing layer Volt Typhoon and Salt Typhoon mark a deliberate shift in how state-sponsored cyber campaigns operate. Rather than chasing endpoints or applications, these actors have gone after the infrastructure underneath them: the routers, telecommunications systems, and network management platforms that carry the traffic itself. Public re
Back to School, Back Online: Student Mental Health
The pressures students carry back into the classroom, why wellbeing does not stop at the school gate, how a safe digital learning environment fits into a broader student safety strategy, and the honest role technology plays as one layer of support. The First Day Back Is Not a Fresh Start for Everyone New timetables, new […]
What a 24/7 SOC Does (And Why It Matters for MSPs) | Todyl
A 24/7 SOC for MSPs means analyst-led threat monitoring and incident response at 3 a.m. See what a SOC does and why building one rarely pencils out.
Beyond the Console: MCP and the New Operating Model for Enterprise Infrastructure
MPLS Pricing in 2026: What Carriers Actually Charge per Site
MPLS cost benchmarks per site and per Mbps for Europe and North America, plus the contract mechanics, exit fees and price trajectory behind your invoice.
1Password product enhancements: Smarter autofill, phishing prevention, and more
At 1Password, we’re constantly working to make life simpler and more secure for our users, from the biggest businesses to each individual who signs up for our password manager. Over the past few months, we’ve been rolling out a slew of updates designed to make a difference for customers, whether you’re using us at home, at work, or (ideally) both.Here are some of the latest developments for you to explore.Upgrades to autofill and autosaveOne of the most immediate benefits of using 1Password in y
When AI adoption outpaces IT visibility
At 1Password, we started expanding our use of AI with a familiar IT playbook. We identified the problems we wanted to solve and the tools that could help us achieve those goals. The plan was straightforward: enable teams, move quickly, learn what worked, and build the visibility needed to manage the cost.Then the operating model changed. AI vendors introduced consumption-based pricing faster than our processes could keep up, leaving us with a distributed system of vendor-specific dashboards to t
Mythos and the Death of the Patch Window
When Anthropic disclosed that Mythos generates a working exploit on its first attempt over 83% of the time, it wasn’t just publishing a benchmark, it was announcing an obituary for the patch window. Back in April 2026, Anthropic revealed that a preview version of its Claude Mythos model had autonomously found thousands of high-severity vulnerabilities […] The post Mythos and the Death of the Patch Window appeared first on Portnox.
Third-Party Access Governance: How to Prevent Supply Chain Attacks
Among CEOs of highly resilient organizations, 78% say third-party and supply chain vulnerabilities are their #1 barrier to becoming cyber resilient. The issue isn’t that third parties can get in – the gig economy and SaaS integrations are only becoming more central to enterprise operations. But when threat actors can abuse third-party credentials to log in and effectively access 100% of your environment within two hops, third-party access often…
Start the Year With onGuard Insights
As we start the new year, we’re reminding our UK Cloud customers that onGuard Insights is available with onGuard 1.6.4. See the Bigger Picture onGuard Insights gives schools and safeguarding teams a clearer view of changes and trends in student online activity as they develop. Individual incidents can be difficult to assess on their own. […]
Celebrating excellence: Palo Alto Networks announces the 2026 North America Partner of the Year Awards
At the 2026 Executive Partner Summit, Palo Alto Networks President BJ Jenkins made one thing clear: the AI era is the platform era — and above all, the AI era is the … The post Celebrating excellence: Palo Alto Networks announces the 2026 North America Partner of the Year Awards appeared first on Palo Alto Networks Blog.