Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
What CISOs Don’t See Until It’s Too Late A lot of CISOs sleep better because a signed IR retainer sits in a folder somewhere. It feels like insurance. A number was negotiated, a contract was signed, a line item appeared in next year’s budget, and the box got checked. Then the incident happens, and the retainer turns out to be a promise that someone will show up. It says almost nothing about how fast they will actually be useful once they do.
How threat actors discuss, sell, and use abliterated open-weight models, measured across more than 100,000 Telegram channels and 100 dark web forums. The post AI Models are Fueling a New Wave of Cybercrime: A Quantitative Analysis appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime.
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
Part 1: The Ecosystem and the Actors By Jon DiMaggio, Cybersecurity Researcher The most dangerous thing about The Com isn’t any single group inside of it, but that the ecosystem replaces them faster than law enforcement can arrest the ones already operating. In 2025 and 2026, law enforcement handed down real sentences to real people […] The post Arachnophobia: How Fear, Branding, and Bad Attribution Distorted The Com appeared first on Flare | Identity First Threat Intelligence | Unmatched
“AI pentesting” now covers very different products. Some platforms plan and run attack chains on their own and return exploitation evidence for every finding. Others are vulnerability scanners with a language model summarizing the output. On a datasheet, or in a scripted demo against a vendor-prepared target, the two can look almost identical. The 30 […]
Japan is facing a dense wave of breach disclosures. Since late September, at least 20 major Japanese companies have reported breaches, including Times Car, Lawson, Yakiniku King, Sourcenext and Burger King Japan, and a ransomware attack on SoftBank’s IDC Frontier cloud took 495 customer organizations offline. Between September 25 and October 8 alone, at least […]
SOCRadar Threat Research Unit (STRU) has uncovered an AI-driven intrusion ecosystem run by affiliates of the INC Ransomware and The Gentlemen Ransomware groups. A single publicly accessible command-and-control server exposed the operators’ AI session databases, their central knowledge base and the source code of Phantom, a new “Autonomous Red Team Kill Chain Framework”. Configuration files, […]
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q3! The post Q3 2026 Product Updates and Highlights appeared first on DarkOwl, LLC.
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and The AME Group Ransomware Attack Exposes IU Health Data - Claim Depot was [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Personify Health Data Breach? Attorneys Investigate Hackers' Claims - ClassAction.org was reported by [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and chooseultimate.com was reported by one of those streams. HackNotice may also have the [...]
Flashpoint joined international law enforcement and private-sector partners in a coordinated operation targeting West African scam networks, resulting in dozens of arrests, millions of fraudulent accounts removed, and over one hundred victims of human trafficking identified. The post Inside Joint Disruption Week: 28 Arrests and 3.7 Million Scam Accounts Removed appeared first on Flashpoint.
Cybercriminals are selling forged identity documents, deepfake videos, and live verification services to help buyers bypass Know Your Client (KYC) checks. Flare examines how these underground services operate and the techniques used to create and maintain fraudulent verified accounts. [...]
Palo Alto Networks’ Unit 42 threat intelligence team uncovered a multistage cyber intrusion against a telecommunications managed service... The post Unit 42 traces Peerstitch malware deployment to FortiOS vulnerability exploited after FortiManager compromise appeared first on Industrial Cyber.
Most SOCs need fast IP reputation in their SIEM before they need attribution-heavy CTI. How to tell them apart, and what to ask any IP reputation vendor.
This report follows a North Korean recruiting scheme that Silent Push found on a Discord server, where a recruiter offered U.S., E.U., and Latin American citizens 35% of a salary to act as the face and the legal identity on job applications. The post Proactively Defending Financial Institutions Against North Korean Remote IT Workers appeared first on Silent Push.
On October 1, 2026, documentation showing a Ukrainian Vyriy 10 FPV drone-based loitering munition equipped with a PG-based improvised warhead and a “Popcorn” initiation system was shared in a Russian combat-focused Telegram group. The loitering munition was reportedly discovered in...
Every vendor in the SOC and IR market wants to own the word “agentic” right now. Almost none of them agree on what it means once the pager actually goes off. Here’s the definition Profero’s practitioners use in casework, and why the difference changes how you investigate. The question we keep getting asked mid-incident Somewhere in the first hour of nearly every AI-related case we open now, someone on the client side asks a version of the same question. Is this an AI inci
OMass’s molecule is vying to become an alternative to a Neurocrine Biosciences drug that is currently the only FDA-approved therapy for congenital adrenal hyperplasia. But Vertex Pharmaceuticals could also compete with a drug candidate from a recent acquisition. The post Startup OMass Secures $310M to Advance Drug for Rare Endocrine Disorder appeared first on MedCity […]
On September 18, 2026, shortly before Friday prayers, a VBIED detonated outside the mosque forming part of the Old Police Lines complex in Kohat, Khyber Pakhtunkhwa, Pakistan. The blast caused extensive damage to the mosque and surrounding structures and was...
Analysis of over 50 million detections from PayPal to Twitch, Google Gemini to Azure shows exposed credentials are everywhere. Imagine a developer’s laptop infected by an infostealer. The malware captures passwords and stored browsing sessions. It can also capture configuration files, settings, and other files containing API keys. A security team may identify the infection […] The post A Study of 49.7 Million Compromised Token Matches Reveals What Password-Stealing Infostealers Find
Mosad is an underground actor primarily involved in the trade and disclosure of sensitive information linked to military, intelligence, government and defense environments. The post Mosad Threat Actor Report appeared first on ThreatMon.
Healthcare AI red teaming and LLM penetration testing are adversarial security tests of the AI systems used in care delivery and operations: testers attack a model, its prompts, its data... The post Healthcare AI Red Teaming and LLM Penetration Testing appeared first on VerSprite.
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of the Windows backup program that checked for an update during one of those windows would download and run a backdoor. Google Threat Intelligence Group, Mandiant, and ManageEngine's Threat Analysis
