Why RMM Built-In Security Isn’t Enough and What MSPs Need Instead
Remote monitoring and management (RMM) platforms are at the center of most MSP operations, and many now include built-in security features such...
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,093 matching stories — announcement, in Security Awareness Training — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Remote monitoring and management (RMM) platforms are at the center of most MSP operations, and many now include built-in security features such...
EU exposes Russia-linked cyber campaign targeting member states as Australia warns of widespread attacks on content management systems. The post The week in breach news appeared first on Kaseya.
MADISON, S.D., July 15, 2026 — As the FIFA World Cup enters its final days, cybersecurity experts at SBS CyberSecurity warn that the same urgency and global attention driving fan engagement are also increasing risk for organizations. As interest extends beyond core fans to casual viewers and those following headlines, the likelihood of successful event-themed phishing and social engineering attempts increases across nearly every industry. High-profile events concentrate interest, increase d
Canada’s defense supply chain now faces a new mandatory cybersecurity bar. The Canadian Program for Cyber Security Certification (CPCSC) sets baseline requirements for organizations handling sensitive government information, and Level 1 is being introduced into select contracts and becomes a requirement for those contracts as it appears in them.   This CPCSC Level 1 checklist […] The post CPCSC Level 1 Requirements: The 13-Control Checklist for Canadian Defense Suppliers appeared firs
Update, July 13, 2026: The Department of War has suspended CMMC Phase II, the mandate that would have required third-party (C3PAO) Level 2 certification starting November 10, 2026. A 60-day Reform Task Force is now reviewing the program’s future. Self-assessment requirements, SPRS scoring, annual affirmations, and DFARS 252.204-7012 remain fully in force and are still […] The post CMMC Level 2 Requirements: A Practical Assessment Checklist for Defense Contractors appeared first on Ca
Effective cybersecurity awareness training and realistic phishing simulations are essential for helping organizations defend against increasingly sophisticated AI-powered phishing attacks. While artificial intelligence has improved cybersecurity capabilities in many areas, it has also dramatically increased the speed, scale, and effectiveness of social engineering attacks. Organizations that fail to evolve their training strategies risk leaving employees vulnerable to a new generation of... The
Accelerating time-to-value through AWS Marketplace to protect organizations from sophisticated social engineering, deepfakes, and shadow AI
The Netherlands now has its NIS2 law. On 7 July 2026, the Dutch Senate adopted the Cyberbeveiligingswet (Cbw), which transposes the EU NIS2 Directive into national law. It takes effect on 15 August 2026, with no transition period. From that date, organizations in scope must meet the duty of care and the duty to report.
The unit that fails isn't a person, it's a workflow, exposed by a moment on the calendar and a campaign aimed at your sector. Two of those three signals change every week.
The post TISAX certification: what it is, the requirements and how it differs from ISO 27001 appeared first on Guardey.
The post Phishing simulations for companies: run them yourself or bring in a partner? appeared first on Guardey.
Security reporting is one of the clearest ways for an MSP to show clients what and how their security program is doing....
:AI: !ai! Anthropic’s Fable 5 is back after a brief US export ban. Kev Breen breaks down why restricting hosted AI models only hurts defenders
Originally posted on Substack I’ve curated a list of recent works on privacy, AI, and tech that will be worth your time checking out. Authors included: Graham Greenleaf Ella Corren Cindy Cohn Andrew Guthrie Ferguson Alicia Solow-Niederman Laura Moy Mark P. McKenna Woodrow Hartzog Maria P. Angel Christina Lee Zina Makar Elettra Bietti Peter Ormerod […] The post Privacy, AI, and Tech Works Worth Your Attention appeared first on TeachPrivacy.
Key Takeaways Security tooling investment in application security has grown steadily for years, but vulnerability rates have not moved in the same direction.   In a recent NINJIO webinar, Laura Bell Main, Founder and CEO of SafeStack, and Kevin Baroudi, NINJIO’s VP of Client Experience, examined why that gap persists and what organizations need to address the part... The post What Are Your Developers Missing in Application Security Training? appeared first on NINJIO.
The post How Atea Built a Security-First Culture Across the Nordics and Baltics appeared first on MetaCompliance.
The post 78% of CISOs say C-level do not fully understand employee-driven cyber risk appeared first on MetaCompliance.
Jul 09, 2026 | World Cup 2026 phishing attacks targeting employees have surged 500% from April to June, as temporal attacks pinned to major global events gain in popularity with cyber criminals
Overview Free smartwatches don’t exist. Yet across the MENA region, thousands of banking and payment customers are clicking on ads that promise… The post The Free Smartwatch Scam: Anatomy of a MENA Financial Phishing Campaign first appeared on dPhish.
AI is writing your software faster than ever. Is your organization keeping pace with the security risks? The AI Coding Revolution Has Already Arrived Artificial Intelligence is transforming software development […] The post Vibe Coding: The Rise & Risk of AI-Generated Code first appeared on Global Learning Systems.
Originally posted on Substack Published posthumously, Italo Calvino’s Numbers in the Dark (2002) is a provocative collection of stories written between 1943 and 1984 that explores the effects of digital technologies and data. Calvino (1923-1985) was an Italian author, most known for his book, Invisible Cities and If On a Winter’s Night a Traveler. Although Numbers in the Dark is not his best work, […] The post The False Idolatry of Data: Calvino’s Numbers in the Dark appeared first on Teac
The post The EU AI Act: What the 2nd August Deadline Means for Your Organisation appeared first on MetaCompliance.
I've delivered more security awareness sessions than I can count. I'm also a social engineer, which means I've been the person those sessions are trying to prepare people for. That gives you a unique view of the problem. The post The attack your training prepared them for doesn’t exist appeared first on CovertSwarm.
Kritische Sicherheitslücken werden innerhalb weniger Stunden ausgenutzt – ist Ihre Website vorbereitet? Joomla, WordPress und andere Content-Management-Systeme stehen derzeit verstärkt im Fokus automatisierter Cyberangriffe. Dabei sind es häufig nicht die CMS selbst, sondern veraltete Plugins, Themes oder Erweiterungen, die Angreifern den Einstieg ermöglichen. The post Im Fokus: Content-Management-Systeme unter Beschuss appeared first on Perseus Technologies.
For over three days, we had the opportunity to connect with industry professionals, exchange ideas, and showcase our all-in-one anti-phishing solution at… The post What dPhish’s Recognition at Libya Tech Forum 2026 Means first appeared on dPhish.
During his panel session at Libya Tech Forum 2026, our Co-Founder & CTO, AbdElnaser Khanafeer, explored the rise of Agentic AI and… The post AI-Driven Cyber Defense Architecture: The Future of AI Security first appeared on dPhish.
Information technology and cybersecurity are closely connected. In many organizations, the teams work side by side every day, supporting the same systems, applications, and users. It is no surprise that many cybersecurity professionals begin their careers in IT. Because the The post How Cybersecurity Professionals Think Differently Than IT Professionals first appeared on Transmosis Small Business AI Cybersecurity Software. The post How Cybersecurity Professionals Think Differently Than IT Profes
When people first explore a career in cybersecurity, they often focus on technical skills. They wonder which programming language to learn, what certifications to earn, or which security tools employers expect them to know. While technical knowledge is certainly important, The post Why Problem Solving Is the Most Important Skill in Cybersecurity first appeared on Transmosis Small Business AI Cybersecurity Software. The post Why Problem Solving Is the Most Important Skill in Cybersecurity appeare
Exposure tells you who can be hit. Assessment tells you which attack is running against your industry right now, and who to test first.
KEY TAKEAWAYS Speed is a governance problem: Attackers already move at machine speed, and the organizations keeping pace are not the ones with the most tools. Shadow AI is already in the building: Your team started using AI before your policy did, and that gap is where most incidents begin. Enabled and ready are different things: Owning AI tools is the easy part. Trusting them when something is on the line is the hard part.
AI has enabled cybercriminals to mass-produce polished, personalized phishing content at a speed and scale that wasn’t possible a few years ago.  Back then, employees could spot phishing through teachable signals like typos, email formatting errors, and suspicious sender domains. Today, those signals are largely absent from AI-generated attacks, and IBM’s Cost of a Data Breach 2025 Report puts the time to produce a... The post How to
In June, the U.S. government blocked access to a frontier AI model just days after it launched, citing security. Access came back two weeks later, this time with conditions attached. In between, the government told another company it could only release its newest model to approved customers.Governments now treat the most capable AI models the way they treat advanced chips or encryption: too powerful to allow free movement. Sometimes that means an outright block, sometimes it just means controlli
The attack call is the one that gets written up in the report. But in James Sheppard's experience, it's rarely the most important call he makes. The post The call nobody talks about appeared first on CovertSwarm.
An attacker's first move is mapping your employees' public exposure. Most companies have never run that map on themselves.
Jul 03, 2026 | Why the same employees keep failing phishing simulations, and how adaptive training turns repeat clickers into reporters. Thresholds, escalation models, and what to do instead of punishing.
How unauthorized AI use is outpacing governance—and what organizations can do about it. Artificial Intelligence is rapidly transforming the workplace. Employees are using AI-powered tools to write emails, summarize documents, […] The post Shadow AI: The Hidden Cybersecurity Risk Growing Inside Your Organization first appeared on Global Learning Systems.
The post How to prevent ransomware: a practical guide for organisations appeared first on Guardey.