Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,853 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
36% of exploited CVEs were attacked within a day of publication. What 500,000 servers saw at SANS 2026: borrowed cloud IPs, early zero-days, old CVEs.
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q3! The post Q3 2026 Product Updates and Highlights appeared first on DarkOwl, LLC.
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
IBM Verify Identity Access 11.0.3.1 and IBM Security Verify Access 10.0.9.3 Appliance could allow a physically proximate attacker to gain elevated privileges due to the use of hard-coded credentials.
IBM Langflow OSS 1.0.0 through 1.12.4 contains three message endpoints that perform no ownership verification. Any authenticated user can bulk-delete another user's messages, overwrite message content to inject malicious prompts, or hijack an entire conversation session by reassigning its session ID
IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper authentication.
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and The AME Group Ransomware Attack Exposes IU Health Data - Claim Depot was [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Personify Health Data Breach? Attorneys Investigate Hackers' Claims - ClassAction.org was reported by [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and chooseultimate.com was reported by one of those streams. HackNotice may also have the [...]
Flashpoint joined international law enforcement and private-sector partners in a coordinated operation targeting West African scam networks, resulting in dozens of arrests, millions of fraudulent accounts removed, and over one hundred victims of human trafficking identified. The post Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed appeared first on Flashpoint.
The post Protecting the Federal Workforce: Connecting the Dots Before a Threat Escalates appeared first on Ontic.
The post The Corporate Security Benchmark: See Where You Stand appeared first on Ontic.
We break down a real-world breach of a cloud ERP system, and explain how to avoid the key mistakes.
Drupal has patched two critical remote code execution (RCE) vulnerabilities affecting Drupal core and the contributed Entity List module. The first flaw, tracked CVE-2026-108097, affects the core Field UI module, while CVE-2026-108099 affects Entity List. Neither is directly exploitable through the affected component alone, but Drupal warns that multiple serious exploit paths exist through contributed […]
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts. [...]
ConnectWise is investigating unauthorized access to application identities associated with Cloud Backup, formerly SkyKick, after researchers detected the applications authenticating into customer Microsoft 365 environments. A vendor-controlled Microsoft 365 application credential was compromised and used to obtain Microsoft Graph access tokens in customer tenants. ConnectWise subsequently disabled seven application identities and suspended Cloud Backup, SaaS […]
Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service... The post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.
SOCRadar Dark Web Team identified several underground posts, including an alleged ZoomInfo database sale involving 185 million records, an alleged TryCircle customer data leak, and an alleged Vicente López municipal database exposure. Other posts advertised a previously compromised HDB Financial Services dataset and an unverified X (Twitter) user database leak claim. Alleged ZoomInfo Database Sale […]
Most SOCs need fast IP reputation in their SIEM before they need attribution-heavy CTI. How to tell them apart, and what to ask any IP reputation vendor.
This report follows a North Korean recruiting scheme that Silent Push found on a Discord server, where a recruiter offered U.S., E.U., and Latin American citizens 35% of a salary to act as the face and the legal identity on job applications. The post Proactively Defending Financial Institutions Against North Korean Remote IT Workers appeared first on Silent Push.
Check the product, version, justification, and evidence in a VEX advisory before closing a CVE alert or postponing a patch.
On October 1, 2026, documentation showing a Ukrainian Vyriy 10 FPV drone-based loitering munition equipped with a PG-based improvised warhead and a “Popcorn” initiation system was shared in a Russian combat-focused Telegram group. The loitering munition was reportedly discovered in...
Every vendor in the SOC and IR market wants to own the word “agentic” right now. Almost none of them agree on what it means once the pager actually goes off. Here’s the definition Profero’s practitioners use in casework, and why the difference changes how you investigate. The question we keep getting asked mid-incident Somewhere in the first hour of nearly every AI-related case we open now, someone on the client side asks a version of the same question. Is this an AI inci
OMass’s molecule is vying to become an alternative to a Neurocrine Biosciences drug that is currently the only FDA-approved therapy for congenital adrenal hyperplasia. But Vertex Pharmaceuticals could also compete with a drug candidate from a recent acquisition. The post Startup OMass Secures $310M to Advance Drug for Rare Endocrine Disorder appeared first on MedCity […]
On September 18, 2026, shortly before Friday prayers, a VBIED detonated outside the mosque forming part of the Old Police Lines complex in Kohat, Khyber Pakhtunkhwa, Pakistan. The blast caused extensive damage to the mosque and surrounding structures and was...
Separate revocation, expiration, and domain reputation. Verify the exact certificate, status freshness, and behavior observed by the client.
Analysis of over 50 million detections from PayPal to Twitch, Google Gemini to Azure shows exposed credentials are everywhere. Imagine a developer’s laptop infected by an infostealer. The malware captures passwords and stored browsing sessions. It can also capture configuration files, settings, and other files containing API keys. A security team may identify the infection […] The post A Study of 49.7 Million Compromised Token Matches Reveals What Password-Stealing Infostealers Find
Handle a password-protected archive without opening it on a user workstation: collection, isolation, hashes, and a documented decision.
Mosad is an underground actor primarily involved in the trade and disclosure of sensitive information linked to military, intelligence, government and defense environments. The post Mosad Threat Actor Report appeared first on ThreatMon.
Healthcare AI red teaming and LLM penetration testing are adversarial security tests of the AI systems used in care delivery and operations: testers attack a model, its prompts, its data... The post Healthcare AI Red Teaming and LLM Penetration Testing appeared first on VerSprite.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis
Every Cybersecurity Awareness Month campaign rests on four habits: Strong passwords, Multifactor authentication, Spotting phishing, and keeping software updated. All four assume a person is the one signing in, reading the message and clicking install. At a growing number of companies that person is now an AI agent, and AI agent security has no equivalent of the annual training. The National Cybersecurity Alliance's theme this year is "Don't Make It Easy for Them," built on the idea that small ha
By Assaf Morag, Cybersecurity Researcher In 2026, a businessman in Lima began receiving photographs of his home, business, and relatives alongside threats against his family. Peruvian police learned that the criminals had obtained the information through a data lookup that turned a telephone number or national identity number into details about the victim and his […] The post How an Average of $6 Can Buy Personal Information: Inside Latin America’s “Identity-as-a-Service” Markets app