Q2 2026 Product Updates and Highlights
This blog features highlights and screenshots from the DarkOwl product team on updates the team has made in Q2! The post Q2 2026 Product Updates and Highlights appeared first on DarkOwl, LLC.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
SQLite Database Analysis Tips and Tricks with DB Browser
Learn practical SQLite database analysis techniques using DB Browser for SQLite. Discover tips used by mobile forensic analysts to investigate data faster.
SQLite Database Analysis Tips and Tricks with DB Browser
Learn practical SQLite database analysis techniques using DB Browser for SQLite. Discover tips used by mobile forensic analysts to investigate data faster.
Threat Intelligence Snapshot: Week 29, 2026
Russia Exploits European IP Cameras To Track Military Logistics | Iran Threatens to Block More Vital Seaways The post Threat Intelligence Snapshot: Week 29, 2026 appeared first on QuoIntelligence.
The Security Team’s Guide to Data Privacy Compliance: GDPR, CCPA, and LATAM’s New Wave
GDPR, CCPA, and Latin America's new laws all lean on the same security foundation. This is what data privacy compliance asks of a security team, where the regimes overlap, and what it changes for MSSPs and enterprise teams covering clients across borders. The post The Security Team’s Guide to Data Privacy Compliance: GDPR, CCPA, and LATAM’s New Wave appeared first on Zynap.
Resilience Is the Foundation of Modern Security Strategy
Cybersecurity is shifting from prevention to resilience as AI-driven, machine-speed attacks outpace traditional defenses, requiring visibility, automation, and intelligence to ensure continuity, rapid response, and business stability.
LUMINAR 2026 Threat Landscape Report Audio Brief
Cybercrime Goes Silent and Automated. In this episode you’ll learn key insights to strengthen detection, prioritize threats and stay ahead of emerging attack pattern trends from thousands of real-world incidents. The full report provide SOC teams, threat hunters, CISOs, security leaders and cybersecurity teams with a clear view of the risks and the solutions that they can implement. Read... The post LUMINAR 2026 Threat Landscape Report Audio Brief appeared first on Cognyte.
How to Evaluate Digital Risk Protection Vendors and Companies
Cyber threats no longer stop at the network perimeter. Today, attackers target brands wherever they have a digital presence, websites, social media, mobile apps, email, cloud platforms, and even the dark web. From phishing websites and fake social media profiles to credential leaks and domain impersonation, these attacks can erode customer trust, disrupt business operations, […] The post How to Evaluate Digital Risk Protection Vendors and Companies appeared first on Seqrite Labs.
ClickLock Stealer: Paste Once, Lose Everything
Analyzing a new threat targeting macOS users in Europe, North America and MEA
Operation Fake KickOff: Attackers Abuse Recruiters and SaaS to Harvest Work Credentials
Intel 471 investigated an ongoing, multi-stage phishing operation that systematically abuses legitimate software-as-a-service (SaaS) sales and marketing, and cloud platforms to orchestrate corporate credential theft.
How SaaS and AI Risk Intelligence Shape ACP Authorization
In ACP decisioning, authorization means understanding what permission enables enables before execution begins. See how SaaS App and AI risk intelligence shape that context. The post How SaaS and AI Risk Intelligence Shape ACP Authorization appeared first on zvelo.
How Machines Are Taking Over Network Traffic
The explosion of AI traffic is quietly redefining how networks behave. Discover how technology leaders are adapting infrastructure to protect business outcomes.
Emerging Threat: QuimaRAT
QuimaRAT is a newly identified Java-based Remote Access Trojan (RAT) that is being marketed under a Malware-as-a-Service (MaaS) model, and providing threat actors with a cross-platform remote access framework capable of targeting Windows, Linux, and macOS systems.
Can PII Be Removed from the Dark Web? What Security Teams Need to Know
Can PII be removed from the dark web? Not the same way it comes off a public data broker site. When an executive’s home address shows up on a people-finder site, you submit an opt-out, the listing comes down, and you monitor for its return. The dark web doesn’t offer anything like this. It’s decentralized […]
Threat Hunting Case Study: Scattered Spider
Scattered Spider skips malware and breaks in with a phone call and a legitimate remote access tool, here's how to hunt for it.
July 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discove
Why AI Moves Faster Than the Controls Built to Manage It
AI is outpacing traditional governance, creating an observability gap. Real-time evidence helps leaders understand, explain, and defend AI decisions while maintaining accountability, trust, and confidence at scale.
Operation ShadowRecruit: A Recruitment-Themed Malware Campaign Leveraging ControlR and Google Sheets to Target Indian Job Seekers
Contents Introduction Key Targets Industries Affected Geographical focus Infection Chain Initial Findings Looking into the Decoy Document Technical Analysis Stage 1 – Initial Infection through LNK file Stage 2 – PowerShell Downloader Analysis Stage 3 – The .NET Dropper – Document.exe Analysis Stage 4 – Decoy Delivery and SheetAgent RAT Analysis Infrastructure & Attribution Conclusion […] The post Operation ShadowRecruit: A Recruitment-Themed Malware Campai
Continuous Audit Evidence Automation for SOC 2, PCI DSS, and FedRAMP
Your cloud, identity, logging, and deployment systems are already producing audit evidence. The challenge is whether that evidence is mapped, retained, and retrievable when auditors ask for it. Learn how continuous audit evidence automation helps SOC 2, PCI DSS, and FedRAMP teams reduce manual collection and improve audit readiness. The post Continuous Audit Evidence Automation for SOC 2, PCI DSS, and FedRAMP appeared first on VerSprite, Threat Modeling and Pentesting Services.
The Scam Will Go On: Beware of Fake Offers for Celine Dion Concert Tickets
Group-IB discovers a sophisticated multi-layered scam scheme targeting fans with fake ticket sales on two fronts: social network platforms and fraudulent websites impersonating official distributors.
From Paper Preannouncement to Crossing the Line—An Empirical and Ethical Analysis of the Anthropic Incident
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese Report Summary: This research was triggered by rumors from Reddit user LegitMichel777 that Claude Code contained Spyware. Antiy researchers analyzed the architecture of Anthropic’s client-model service interaction, conducted local behavior analysis and privacy protocol comparisons across various […]
Enterprise Mobile Security Requires Organizational Visibility
Learn why enterprise mobile security requires more than consumer spyware detection. Explore mobile EDR, workforce visibility, BYOD & identity protection.
Understanding Illicit Ecosystems: How Dark Web Forums Structure Cybercrime
In this post, we analyze how dark web forums operate, breaking down Flashpoint's tiered classification system and examining how specialized, hybrid platforms function together as an interconnected cybercrime supply chain. The post Understanding Illicit Ecosystems: How Dark Web Forums Structure Cybercrime appeared first on Flashpoint.
Identity Due Diligence: The Missing Piece of M&A Risk Assessment
Every Acquisition Inherits More Than Assets When organizations evaluate an acquisition, they invest significant time validating the target company’s financial health, legal obligations, operational maturity, and growth potential. They examine: Revenue and profitability Customer contracts Intellectual property Regulatory compliance Technology infrastructure Outstanding liabilities Increasingly, cybersecurity has become another critical workstream during due diligence. However, many […
Tidal Cyber Advances Threat-Led Defense to Transform Asset Visibility and Vulnerability Prioritization
Tidal Cyber Advances Threat-Led Defense to Transform Asset Visibility and Vulnerability Prioritization New capabilities center asset visibility, vulnerability prioritization, and defensive coverage around procedures and real adversary execution
Inside the Matching Engine: How Distributed Tokenization Identifies Compromised Cards Without Exposing Them
Discover how Distributed Tokenization identifies compromised cards at pre-authorization without exposing raw card data — a technical deep-dive for fraud operations and risk teams.
From Fake Domains to Deepfake Scams: One Target, Two Tools
Brand impersonation has evolved from typo-squatted domains and fake login pages to cloned executive voices and fabricated videos. A look at why the old brand-monitoring playbook is falling behind, and what a threat-intelligence-driven defense actually looks like.
SSO Vishing And SaaS Data Theft: Domain Monitoring Before The Helpdesk Call
ShinyHunters-style SSO vishing shows how fake login domains, MFA enrollment abuse, and SaaS access can become data theft. Domain monitoring gives defenders early warning.
Tomorrowland 2026, Belgium: People of Tomorrow, Targets of Today
Tomorrowland 2026 sold out fast, and scammers moved faster. CloudSEK uncovered a dozen fake ticket shops and travel sites mimicking the festival, complete with countdown timers and fake "biometric checks." Some sites harvest identity data and payments; others quietly earn commissions. Read the full breakdown of how each scam works. Authors : Shobhit Mishra
Mobile Smishing Defense: URL Scanners And Domain Reputation For July 2026
Mobile phishing keeps gaining operational relevance. Security teams need URL scanning, domain reputation checks, DNS pivots, and employee reporting workflows built for SMS and chat.
Fix the TLS 1.3 Hostname Visibility Gap with IP Categorization
For years, security vendors made a quiet assumption: when a device on your network opens a TLS connection, the Server Name Indication (SNI) field in the ClientHello will tell you exactly where it’s going. That hostname became the foundation of every DNS filter, every next-gen firewall policy, every URL classification decision that happens at the […]
China Edge Device Campaigns: Passive DNS And Certificates For Early Warning
Dutch intelligence warnings about Chinese cyber capability reinforce a practical defense priority: monitor edge devices, VPNs, routers, DNS history, and certificate reuse.
Unpacking GigaWiper: The 'Frankenstein' Backdoor Assembled from Multiple Malware Families
Microsoft dissects GigaWiper, a Golang backdoor fusing Crucio ransomware, FlockWiper, and a raw-disk wiper into one implant with RabbitMQ/Redis C2.
Threat Intelligence Snapshot: Week 28, 2026
TeamPCP Weaponizes Supply Chain Access to Enable Vect Ransomware Deployment | Intelligence Services Warn Russia Is Preparing Possible Provocation in Baltic States or Poland The post Threat Intelligence Snapshot: Week 28, 2026 appeared first on QuoIntelligence.
What We’ve Been Building in Q2: XTM Platform, OpenCTI and OpenAEV Updates.
Explore Filigran's Q2 2026 XTM Platform updates: XTM One's agentic AI, smarter OpenCTI automation, and expanded OpenAEV multi-tenancy.
What We’ve Been Building in Q2: XTM Platform, OpenCTI and OpenAEV Updates.
Apparently, not even a FIFA World Cup or sweltering heatwaves can slow the Filigran team down. Unfazed, we stayed in full delivery mode, making sure that our users get contextual, actionable intelligence faster than ever before. This quarter's highlight? The launch of XTM One, our Agentic AI orchestration layer that unifies OpenCTI and OpenAEV into a continuous, autonomous threat management workflow. But that's just the headliner: we also released smarter automation and richer analyst tooling in
Open-Source WAF for Nginx on Ubuntu with CrowdSec
Deploy an open-source WAF for Nginx on Ubuntu with CrowdSec. Install the AppSec component, enable virtual patching, and block attacks step by step
CISA Warns of Active Exploitation of Microsoft SharePoint Remote Code Execution Vulnerability
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that threat actors are actively exploiting CVE-2026-45659, a high severity remote code execution vulnerability affecting on... The post CISA Warns of Active Exploitation of Microsoft SharePoint Remote Code Execution Vulnerability appeared first on Blackwired.com.
Category and Classification Intelligence in ACP Decisioning
Low risk does not mean appropriate. Learn how category and classification intelligence provides governance context for ACP decisioning. The post Category and Classification Intelligence in ACP Decisioning appeared first on zvelo.
From IT Asset Discovery to Automated Action: Closing the IT Operations Loop
Organizations today invest heavily in discovery tools, expecting that increased visibility will solve their IT challenges. Yet when an incident hits, a patch fails or an audit looms, many teams must pause to reconcile spreadsheets, validate inventories and confirm ownership before they can act. Visibility alone doesn’t close the gap between insight and execution. The real value of discovery appears when visibility is governed and connected directly to the systems that run your business — enablin