Agentic Cybersecurity Engineering: Up-leveling security roles with AI
Nebulock is the Agentic Cybersecurity Engineering (ACE) platform that unifies threat hunting, detection engineering, insider risk, and alert triage workflows
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
305 matching stories — announcement, in Threat Hunting — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Secure Sensitive Data with Cyera and Akamai Guardicore Segmentation
Protect sensitive data by pairing Cyera's data discovery with Akamai Guardicore Segmentation to enforce dynamic, data-aware microsegmentation rules.
Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic
A fake Web3 accelerator has been observed pushing information stealers and backdoors to Windows and macOS systems using malicious npm packages under the pretext of offering free artificial intelligence (AI) credits for Anthropic Claude and Google Gemini, coding tools, and security audits. "The tools delivered information-stealing malware and backdoors for macOS and Windows machines," Elastic
Supply Chain Alert: Malicious Axios Versions Published to npm | Prophet Security
Supply chain alert: A compromised Axios maintainer account published malicious npm packages. Find IOCs, downgrade instructions, and threat hunting guidance.
Facebook Phishing Email Campaign: How Attackers Are Weaponizing Meta Business Manager Partner Requests | Prophet Security
A facebook email phishing campaign abuses Meta Business Manager partner requests to deliver credential-harvesting links through legitimate facebook.com infrastructure.
Phishing Investigation: A Practical Guide for SOC Analysts | Prophet Security
A practical phishing investigation workflow for SOC analysts: confirm, collect evidence, scope exposure, and remediate across email, BEC, and impersonation.
Web Scanning in Censys ASM Just Got Deeper
When you open your company’s website in a browser, you see the finished product: the navigation, the login form, the interactive widgets. It looks complete because your browser did the heavy lifting to build it. But much of what you see, and a lot of what an attacker can reach, isn’t actually in the raw […] The post Web Scanning in Censys ASM Just Got Deeper appeared first on Censys.
Making data work across boundaries: The next challenge for policing
Police reform depends on making data work across force boundaries. Connecting data where it lives gives policing national reach, keeps local accountability, and makes AI cheaper and faster to scale.
Elastic Security integration with Google Distributed Cloud: Closing the velocity gap in air-gapped environments
As AI-powered threats grow more complex, traditional security operations struggle to keep pace. Google Distributed Cloud AI SecOps, powered by Elastic, brings AI-driven detection, investigation, and response to fully air-gapped environments.
Detection Versioning: The evolution of logic and intent
Diffs and rollbacks show what changed in a detection, not why. Nebulock Detection Versioning keeps the journal, impact assessment, and full state per save.
What a Sentence Forgets: Preserving Context in Document Ingestion
Frostbitten in France: A Danfoss StoreView Internet Exposure Report
Do you want ants? Because this is how you get ants. Executive Summary On the night of 11 October, attackers switched hundreds of French supermarket fridges into defrost mode. If that sounds familiar: in August, the Department of Defense confirmed refrigeration disruptions at US military commissaries, where at least one base reported that all its […] The post Frostbitten in France: A Danfoss StoreView Internet Exposure Report appeared first on Censys.
5 Key Takeaways From Censys’ State of the Internet Report
New research from Censys’ 2026 State of the Internet Report challenges familiar assumptions about where Internet infrastructure lives, how it changes, and what’s exposed.  The report examines the Internet from five angles: AI exposures, ICS exposures, vulnerability response, threat infrastructure, and the Internet at large. Across these perspectives, one thing remains clear: the Internet is […] The post 5 Key Takeaways From Censys’ State of the Internet Report appeared first on Censys
OSINT for executive protection: reducing risk to executives
The post OSINT for executive protection: reducing risk to executives appeared first on ShadowDragon®.
How to use OSINT for brand protection
The post How to use OSINT for brand protection appeared first on ShadowDragon®.
How SecurityScorecard Uses Siren to Model Third-Party Risk & Threat Intelligence
The post How SecurityScorecard Uses Siren to Model Third-Party Risk & Threat Intelligence appeared first on SIREN.
Vibe Coding VS Code Extension Monitors All Developer Activity
P7 DarkSword iOS Exploit Kit Adds Crypto Wallet Data Theft and Remote Commands
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the variants we usually observe, P7 reduces its on-device footprint, adds on-device keychain and crypto-wallet theft, and adds two way C2 communication with the attacker's infrastructure," iVerify said in a new report published Thursday. The name
12 best OSINT username lookup tools for investigators
The post 12 best OSINT username lookup tools for investigators appeared first on ShadowDragon®.
Nebulog: Detection Versioning, Reference Tables, GATES Method, and RBAC
Track why every detection changed, reuse one list across every rule, and scope platform access by role with Nebulock's September 2026 platform releases.
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
Exaforce extends its AI security tool to monitor more than just Claude
Exaforce is offering to help enterprise security teams discover and monitor AI agents using security telemetry they already collect, rather than requiring yet another endpoint sensor. By combining usage data from agentic AI platforms with endpoint, cloud, SaaS and code data, Exaforce AI Security can identify risks, detect suspicious behavior, and respond to threats, the company said. “Exaforce uses data the SOC already collects to inventory every AI app and agent, connect each one to the person,
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials
An attacker was operating inside the network of 3BB, one of Thailand's largest broadband providers, and maintained remote control of internal machines using a legitimate management tool called MeshCentral, threat intelligence firm Hunt.io said. The company uncovered the intrusion by examining a server the attacker had left open on the internet, which held the attacker's own tools and a list of
From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment
Since May 2026, StopAndProtect has quietly compromised thousands of vulnerable WordPress sites in a sophisticated, multilayered campaign uncovered by CheckPoint. The initial vector is social engineering via CAPTCHA prompts, followed by a series of user-induced downloads, and finally, loader and payload execution. It is suspected that an OPSEC failure may have caused the threat actor […] The post From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment appear
Mobile App Vetting for Aviation: Securing the Apps Crews Actually Use
Approving a third-party app once isn't ongoing security. Here's what continuous app risk monitoring looks like for aviation IT teams.
The Crew App on Every Phone: Why Scheduling Tools Are a Real Attack Surface
Crew scheduling and communications apps make a convincing phishing disguise and carry real permission risk of their own. Here's the mechanism.
CTEM Is a Program. Not a Tool.
Last week in Singapore during the Cyber Executive Circle, I posed standing next to a banner with Manuj, pointing at a single line that I The post CTEM Is a Program. Not a Tool. appeared first on Gambit Cyber.