Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,115 matching stories — in Security Awareness Training — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Summary In the latest cybersecurity news, Glenhardie Country Club — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group qilin Hits: Glenhardie Country Club appeared first on HookPhish.
Summary In the latest cybersecurity news, Gress Clark Young & Schoepper — an organization based in US — has fallen victim to a ransomware… The post Ransomware Group rhysida Hits: Gress Clark Young and Schoepper appeared first on HookPhish.
Summary In the latest cybersecurity news, idi pharma — an organization based in ES — has fallen victim to a ransomware attack conducted by… The post Ransomware Group Deadlock Hits: idi pharma appeared first on HookPhish.
Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.
For many small and midsize Canadian defense contractors, meeting CPCSC requirements raises an important resourcing question: does compliance justify hiring a full-time specialist? The work typically requires ongoing attention to cybersecurity controls, evidence, documentation, and remediation, but maintaining all of those responsibilities in-house can add considerable cost to a growing organization. A full-time hire is […] The post Do You Need a Full-Time Compliance Hire to Meet CPCSC Requ
Canada’s defense supply chain is changing quickly. With the Canadian Program for Cyber Security Certification (CPCSC) now appearing in select Department of National Defence and Public Services and Procurement Canada contracts, suppliers handling Specified Information must demonstrate their security posture rather than simply describe it. Most teams begin tracking that work in spreadsheets, and at […] The post CPCSC Compliance: When to Move Off Spreadsheets (and What to Replace Them With) a
Update, September 30, 2026: The Department of War suspended CMMC Phase II, the mandate that would have required third-party (C3PAO) Level 2 certification starting November 10, 2026. The 60-day Reform Task Force has now submitted its recommendations on the future of the program, which have not been made public. Self-assessment requirements, SPRS scoring, annual affirmations, […] The post CMMC Level 2 Requirements: What Compliance Software Can (and Can’t) Automate appeared first on Car
Originally Posted on Substack I recently wrote a new short essay: Daniel J. Solove Rethinking Privacy of the Mind: Why Protecting Neural Data Is Insufficient, Wolters Kluwer Cybersecurity Policy Report (Oct. 6, 2026). Abstract Neural data is necessary to protect privacy of the mind but is far from sufficient. In this short essay, I examine […] The post Rethinking Privacy of the Mind: Why Protecting Neural Data Is Insufficient appeared first on TeachPrivacy.
La LFPDPPP de México no usa la palabra capacitación, pero exige medidas que se ejecutan a través de personas. Qué le pide a tu equipo y cómo demostrarlo. La entrada LFPDPPP: qué te exige la ley de protección de datos de México se publicó primero en SMARTFENSE.
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero
Key Takeaways AI is making scams more convincing, but the fundamentals of security haven’t changed. Slowing down, verifying requests through trusted channels, and following established security processes can protect users even when AI-generated content is difficult to detect. MSPs have an opportunity to become their clients’ trusted AI educators. Instead of leading with fear, MSPs can help clients understand how to use AI safely, where the risks are, and what guardrails they should put in place.
Honored as a Leader by G2 for Security Awareness Training and Incident Response Software, named AI Initiative of the Year by a Vendor from CRN Asia, Best Newcomer at CRN MES Fall and recognized with sustainability, employer and regional IT excellence awards across the UK, Germany, France and Qatar
Un contenido de concienciación no avisa cuando envejece. Qué señales indican que dejó de servir y cómo decidir si se actualiza, se reemplaza o se retira. La entrada ¿Cuándo deja de servir un contenido de concienciación? se publicó primero en SMARTFENSE.
Measure a security behaviour and culture programme on behaviour, not attendance. The metrics that matter are phishing simulation click rate, reporting rate, the ratio between them, time to first report, repeat clicker numbers and departmental risk trends. Completion rates belong in the compliance file, not in the board report. Ask most security teams how their […]
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated, immutable, and regularly tested backups that attackers cannot easily reach. [...]
Holm Security uses AI to draft vulnerability tests from vulnerability threat intelligence, and our Security Research team validates every one before it reaches your environment.
Caer en un phishing lleva menos de un minuto. Cómo funciona la respuesta automática a una conducta de riesgo y a quién le habla cada una de sus piezas. La entrada Qué tiene que pasar en los minutos después de un clic se publicó primero en SMARTFENSE.
Building a security behaviour and culture programme means assessing your current human risk, selecting the specific behaviours you want to change, delivering focused education, reinforcing it with simulation and nudges, removing risk through better practices, then measuring behaviour rather than completion. Most organisations reach a working programme within one to two quarters. The hardest part […]
Originally Posted on Substack To what extent should AI be used in scholarship? Which uses are okay? Which aren’t? Should AI ever be used? What impact will AI have on scholarship in the future? I recently had a very insightful conversation about these issues with Nita Farahany (Duke Law) and Orin Kerr (Stanford Law). Relevant […] The post AI in Scholarship: Yes, Sometimes, or Never? appeared first on TeachPrivacy.
CyberSafe Foundation and SANS Institute have launched an AI security fellowship for women in cybersecurity across Africa. The... The post CyberSafe and SANS award AI security fellowships to women cybersecurity professionals across Africa appeared first on Industrial Cyber.
A Mir0Auth attack completely bypasses standard detection signals. The victim signs in through legitimate workflows, leaving no proxy landing pages, harvested credentials,...
Palo Alto Networks firewalls protect networks in organizations of every size, and engineers who can deploy and run them are in steady demand. The platform can look intimidating at first: a long list of features, its own terminology, and a web interface with a lot of moving parts. It becomes much easier when you learn […] The post How to Learn Palo Alto Firewall appeared first on Cybrec.
Originally Posted on Substack I recently posted a new paper draft co-authored with Professor Woodrow Hartzog: Meaningful Data Minimization. You can download it here for free. We welcome your feedback. We argue that data minimization is one of the most important parts of privacy laws, and we explain why it is a crucial antidote to […] The post Meaningful Data Minimization appeared first on TeachPrivacy.
At FDC Summit 2026, Abdelnaser Khanafer, Co-Founder & CTO at dPhish, led an insightful session titled “Closing the Phishing Loop: Detect, Hunt,… The post Closing the Phishing Loop: A New Approach to Phishing Defense first appeared on dPhish.
dPhish was proud to participate in FDC Summit 2026 as a Value-Added Partner, bringing together cybersecurity professionals, technology leaders, and organizations for… The post dPhish Brings New Cybersecurity Experiences to FDC Summit 2026 first appeared on dPhish.
Most of what you ask Claude happens once: you ask, and it answers. But some work repeats on a clock, like a summary of your inbox every Monday morning or a look at the news in your field each day. Claude scheduled tasks hand that work to Claude, so it runs on time whether or […] The post Claude Scheduled Tasks Explained appeared first on Cybrec.
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
If you keep giving Claude the same instructions, for the same report format, the same review checklist, or the same multi-step procedure, you can stop repeating yourself. A skill packages those instructions once, and Claude follows them every time a task calls for it. Writing one takes less than you might think: a folder, one […] The post How to Create a Claude Skill appeared first on Cybrec.
Welcome to parts three and four of our series on AI Invariants. In Part 1 we described the stack and how AI works. In Part 2 we discussed the service models of AI, how we use it, and where the threats are. In this part we discuss the available enforcement points, and then start crafting the invariants themselves.
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
This is the second part of a multi-part (we’ll know how many when we’re done) series on creating Security Invariants for AI. Comments are available on the Google Doc version. You can find Part 1: Understanding the Stack.
Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws. The post In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats appeared first on SecurityWeek.