Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

324 matching stories — in Threat Hunting — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Machine vs. machine: The new reality of cybersecurity in ANZ

Frontier AI has accelerated cyber threats to machine speed, leaving many ANZ organisations vulnerable. Our latest research reveals how fragmented data and visibility gaps hinder defence and why a unified platform is essential to battle threats.

Announcement

Forging India's Digital Future: Elastic{ON} Comes to Mumbai

Join us at Elastic{ON} Mumbai to explore search, full-stack observability, and security, and how Elastic acts as the context engine that grounds agentic AI in your enterprise data, transforming regulatory mandates and data into an AI advantage.

Announcement

What the ERMAC Source Leak Says About HookBot

Executive Summary ERMAC and HookBot are two branches of one Android banking trojan sold as a service. They forked from a shared code base and each evolved in the direction its developers took it, but the core they run is close enough that a single constant in the source decides which name the panel shows. […] The post What the ERMAC Source Leak Says About HookBot appeared first on Censys.

Announcement

Siren Adds Cybercrime and National Security Experts Kenrick Bagnall and Andrew Borene to Advisory Board

GALWAY, Ireland — August 14, 2026 — Siren, the sovereign AI investigations company, today announced the appointment of cybercrime investigator Kenrick Bagnall and national security expert Andrew Borene to its Advisory Board. The two bring a combined six decades of experience in law enforcement, cybercrime, intelligence and national security  and both have been active in … Continue reading "Siren Adds Cybercrime and National Security Experts Kenrick Bagnall and Andrew Borene to Advisor

Announcement

Threat Hunting Case Study: The Gentlemen

Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

Announcement

Mirai and Its Heirs: A Decade of Structural Neglect in IoT Security

Nearly ten years after its source code was leaked, Mirai’s methodology is still working largely unchanged. The original botnet scanned the Internet for devices running default credentials and unpatched services, then weaponized them at scale. Its descendants do the same thing against the same device categories: consumer routers, DVRs, and IP cameras. What has changed […] The post Mirai and Its Heirs: A Decade of Structural Neglect in IoT Security appeared first on Censys.

New capability

Introducing Censys Investigator: Run Every Lead Like You’ve Got Hours

Today we’re announcing Censys Investigator in closed beta: an AI-powered threat investigation feature that automates pivoting, infrastructure mapping, and host profiling. Give it a network observable (single, bulk list, or intel report), and it runs the investigation in parallel across Censys’ internet-wide intelligence, then returns ranked, evidence-backed findings. The key here: it operates on top […] The post Introducing Censys Investigator: Run Every Lead Like You’ve Got Hours ap

Announcement

Your NDR Is Capturing Evidence of Threats You Haven’t Found Yet

How Corelight and Stairwell Close the Loop on Network File Intelligence Every day, your network detection and response platform is extracting files from the wire through executables transferred over SMB, scripts pulled via FTP, email attachments traversing unencrypted channels. It flags known-bad files, matches against current threat intelligence, and moves on. What it cannot do […] The post Your NDR Is Capturing Evidence of Threats You Haven’t Found Yet appeared first on Stairwell.

Announcement

How to Prevent a Ransomware Attack: 5 Steps to Find Threats Before Encryption Starts

Ransomware is often treated like a moment-in-time crisis: systems lock up, operations stop, and the organization moves into emergency response. But by the time files are encrypted, the attack has usually been underway for days, weeks, or longer. Modern ransomware operations often include phishing, exploitation, credential theft, remote access, malware staging, lateral movement, data theft, […] The post How to Prevent a Ransomware Attack: 5 Steps to Find Threats Before Encryption Starts app

Announcement

Stairwell Deep Dive: Understanding YARA at Scale

Why the Best Threat Hunting Tool Is Underused, and What Continuous File Intelligence Fixes TL;DR YARA remains one of the most practical and expressive tools defenders have for identifying malware, but most teams still use it only surgically. The limitation is not the language. It is the operating model. YARA works best when it can […] The post Stairwell Deep Dive: Understanding YARA at Scale appeared first on Stairwell.