Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
SIEM Threat Enrichment Is Too Late — Fix It with Tenzir + alphaMountain
Today we’re announcing an integration with Tenzir that moves URL enrichment out of the SIEM and into the security data pipeline — where it can actually change outcomes. Most SIEM threat enrichment strategies share the same flaw: they start after data has already landed. DNS queries, web proxy logs, network events — they flow into […]
Why SIM Swapping Remains a Blind Spot for Enterprise Security Teams
SIM swaps bypass traditional mobile security controls & intercept authentication workflows. Learn why enterprise detection requires carrier-confirmed visibility
How SIM Swapping Attacks Lead to Account Takeovers
Learn how attackers use SIM swaps to bypass MFA, abuse account recovery workflows, and escalate into enterprise account takeovers.
Why SIM Swapping Remains a Blind Spot for Enterprise Security Teams
SIM swaps bypass traditional mobile security controls & intercept authentication workflows. Learn why enterprise detection requires carrier-confirmed visibility
Shadow IT and Discovery AI Blind Spots: What Legacy Tools Miss
Ask three teams what assets exist in your environment, and you’ll get three different answers. Most organizations don’t lack tools. They lack agreement on what actually exists in their environment. Asset, endpoint and cloud data exist — but it’s fragmented, stale and trusted differently by teams across every department and function. The reason for this disconnect? In the AI era, environments are changing faster than legacy discovery is built to handle. Cloud workloads spin up and disappear in mi
How OSINT Teams Use Identity Intelligence to Accelerate Investigations
Information Is Everywhere. Attribution Is Rare. Open-source intelligence (OSINT) has become one of the most valuable disciplines in modern investigations. OSINT teams of Investigators can access an unprecedented volume of information from: Social media platforms Public records Data breaches Forums and communities News sources Technical infrastructure Online marketplaces The challenge is no longer finding information. […]
alphaMountain Now Classifies 92 Web Filtering Categories
Your DNS filter sees every query your network generates. But seeing a query and understanding it are two different things. Most URL classification systems were built around a specific assumption: the host being queried is a website, and the website has content worth categorizing. That assumption held reasonably well for a long time. Block social […]
The new era of supply chain attacks: how developer ecosystems became the front line
Software supply chain attacks are no longer isolated incidents or niche threats targeting obscure open-source projects. Over the past year, they have evolved into a sustained, industrialized threat campaign aimed directly at developer ecosystems, CI/CD pipelines, cloud-connected repositories, and cryptocurrency infrastructure. In recent months, multiple software supply chain attacks have targeted developer ecosystems, spanning npm, PyPI, Docker Hub, OpenVSX, Visual Studio Code Marketplace, GitHu
Sand Dune Collapse in the AI Era
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese Overview Antiy CERT pointed out in its report “Sandstorm-style Poisoning Targeting Developer Tool Supply Chains – Sample, Technical, and Tactical Analysis of TeamPCP Organization” that the organization is different from the traditional hidden supply chain attack method, […]
How Agentic AI is Transforming Infrastructure and Operations
Infrastructure and Operations (I&O) teams have long operated under a familiar paradox: the faster the business scales, the more pressure I&O absorbs. Every new application deployment, every endpoint added, and every cloud workload spun up generates more complexity, more risk and more tickets. The traditional responses to this pressure — more headcount, more tooling, more scripts, more APIs — have delivered incremental relief at best. Yet, the core structural problem, the underlying archi
What Commercial Fleet Operators Should Know About ELD Data Integrity
VicOne's CyberThreat Research Lab review of common Android ELD apps shows why commercial fleets should look beyond the dashboard and treat ELD data integrity as a security priority.
The Anubis Ransomware Attack on the Adriatic Port Authority
Chinese Origin Threat Actors Target FIFA World Cup 2026
As the FIFA World Cup 2026 begins, a highly sophisticated, Chinese-origin threat operation is targeting global football fans. Utilizing pixel-perfect website clones, a multi-tenant reseller network, and an active Man-in-the-Middle framework, these actors intercept payment details and bypass SMS-based two-factor authentication in real time to completely compromise accounts. Authors : Gagan Aggarwal
Making the Business Case for Your CTI Budget
The 2026 SANS Cyber Threat Intelligence Survey confirms that CTI is considered essential at the executive level. Can your CISO see how the CTI program is shaping decisions and measurably reducing risk?
Scaling Threat Modeling for Banking Apps
A practical guide for mid-sized financial institutions moving beyond manual threat modeling For mid-sized financial institutions, threat modeling services for financial institutions are no longer a niche application security exercise.... The post Scaling Threat Modeling for Banking Apps appeared first on VerSprite, Threat Modeling and Pentesting Services.
How to Use an IP Reputation Score API: What the Data Means and How to Act on It
🔍 Want to look up an IP reputation score right now? Enter any IP address into threatYeti and get a full reputation score, threat breakdown, and infrastructure context — no account required. Free, instant, no rate limit for manual lookups. Every security product that touches network traffic needs to make a decision: is this IP […]
Inside a WooCommerce Payment Skimmer: How Carders Moved From Phishing Pages to Checkout Backdoors
Cybercriminals are now targeting real e-commerce checkout pages, not just fake websites. This report reveals how a WooCommerce skimmer silently steals card details during genuine payments. Read the full report to understand the hidden risk. Authors : Shobhit Mishra
June 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discove
When AI Moves: Why the EU Machinery Regulation Matters for Physical AI Security
The EU Machinery Regulation applies from January 20, 2027. For robots and software-defined machines, cybersecurity is now part of the safety lifecycle.
We Said Wait. The Wait Is Over.
Update (June 2026): Two corrections since this went out. First, AES-128. We told you to move off it and filed that under the quantum threat. That was wrong. Grover’s algorithm does not halve AES-128 in any practical sense, because it cannot be parallelized without giving the speedup back, and NIST, Germany’s BSI, and Filippo Valsorda all agree AES-128 stays safe against quantum computers. We still prefer AES-256 on new designs, but for classical margin and uniformity, not because of
Silent Ransom Group (SRG): Uncovering DNS Fast Flux Infrastructure
Frontier AI: When exploit timelines collapse, prioritization matters
Frontier AI: When exploit timelines collapse, prioritization matters Jill Magda Thu, 06/04/2026 - 13:51 The AI Frontier of Cyber Risk When AI collapses exploit timelines, prioritization matters Vendors and partners drive growth, but they also introduce cyber risk. Attackers often target weak links in your supply chain. Bitsight helps you stay in control at every stage: onboarding, monitoring, and response. Bitsight helps by monitoring over 40M organizations worldwide with the world's l
How to use reverse phone number lookup for OSINT
The post How to use reverse phone number lookup for OSINT appeared first on ShadowDragon®.
[tl;dr sec] #331 - How Adversaries Use AI, Skill Issues, Using IDEs for C2
Google's deep dive on how threat actors are using AI, bypassing malicious skill scanning, using VS Code dev tunnels for command and control
NIS2 is Here: Securing Your Supply Chain and Incident Handling with Threat Intelligence
The EU's NIS2 Directive demands proactive risk analysis and supply chain security. Discover how Threat Landscape's darknet monitoring ensures NIS2 compliance.
4 Ways GreyNoise Improves SOC Outcomes
Learn four practical ways GreyNoise improves SOC outcomes—from reducing alert volume and surfacing targeted threats to identifying compromised hosts.
Threat Hunting Case Study: FileFix
FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.
Attack Surfaces from Pwn2Own Automotive 2026: Key Findings for Security Teams
This blog highlights three attack surfaces from Pwn2Own Automotive 2026 and what they reveal about emerging risks in EV chargers, IVI systems, and connected vehicle security.
How AI is being used in threat intelligence today
The conversation around AI in threat intelligence has matured considerably. Teams are no longer asking whether to adopt AI, most already have. The real question now is whether adoption is translating into operational impact, or whether it remains sitting at the edges of existing workflows. What is becoming clear from organizations actively embedding AI into their intelligence programs is that it is reshaping how intelligence is produced. The analyst remains central, but the nature of their work
GlobalProtect exploited for Weeks: Who Protects the Firewall?
The Firewall protects the network, what protects the Firewall? Or, as those canny Romans had it: Quis custodiet ipsos custodes? (Who watches the watchmen?)
SURBL is a Key Input into ICANN Domain Metrica
ICANN Domain Metrica provides a global view of domain abuse. It relies on key threat intelligence providers to identify domains participating in abusive activity. One of the key contributors to the Domain Metrica report is SURBL.
Understanding the Agent Control Plane (ACP)
The Agent Control Plane is gaining attention as autonomous AI ecosystems grow more complex. See how its core components are taking shape. The post Understanding the Agent Control Plane (ACP) appeared first on zvelo.
How an Unauthenticated MCP Server Led to SSRF, LFI, and AWS Credential Theft
A real-world AIVigil finding from a customer environment. One unprotected AI integration endpoint with no login required. An attacker chained Server-Side Request Forgery, Local File Inclusion, and live AWS credential exfiltration into a potential full infrastructure takeover. This is how it happened, and how AIVigil found it first. Authors : CloudSEK Editorial
How to conduct an OSINT background check (2026 guide)
The post How to conduct an OSINT background check (2026 guide) appeared first on ShadowDragon®.
We Added a Detection Rule. We Were Not Expecting This.
Most users never see the command line Claude Desktop runs under the hood. It’s not hidden; it’s just buried in a process list. But if you look, you’ll find something alarming: /path/to/claude --output-format stream-json --verbose --input-format stream-json --max-thinking-tokens 31999 --effort high --model claude-opus-4-7[1m] --debug-file /path/to/debug.log --permission-prompt-tool stdio --resume <session-id> --allowedTools Task,TaskCreate,TaskUpdate,TaskGet,TaskList,TaskS
Law Enforcement & National Security Challenges 2026
From policing challenges to mission outcomes across federal and homeland security agencies Law enforcement, federal agencies and national security organizations face an increasingly complex threat landscape in 2026. Traditional policing challenges now intersect with homeland security priorities, geopolitical tensions and digital-native threats that evolve faster than legacy operational models can keep pace. In this blog... The post Law Enforcement & National Security Challenges 2026 appeared fir
Gentlemen Ransomware
Gentlemen ransomware uses credential abuse, defense evasion, and double extortion tactics to compromise enterprise environments and increase pressure on victims.
Ripjar Recognised as Category Leader in Chartis Watchlist and Adverse Media Quadrants 2026
Ripjar has once again been recognised as a Category Leader in two Chartis RiskTech Quadrants for 2026: This marks the third consecutive year Ripjar has been recognised as a Category Leader in both quadrants, reaffirming our position at the forefront of AI-native watchlist screening and adverse media monitoring. The Chartis “Watchlist and Adverse Media Monitoring […] The post Ripjar Recognised as Category Leader in Chartis Watchlist and Adverse Media Quadrants 2026 appeared first on Ripjar.
Your Third-Party Risk Program Is Running on a Clock That Already Ran Out | iCOUNTER
The 2026 Verizon DBIR found third parties in 48% of confirmed breaches — up 60% year over year. Learn why point-in-time TPRM assessments are failing and what continuous vendor risk management requires.