Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.
The European Cybersecurity Organisation (ECSO) has called for a dedicated European industrial policy for space cybersecurity, warning that... The post ECSO outlines six priorities for EU space cybersecurity policy, from secure-by-design systems to threat intelligence sharing appeared first on Industrial Cyber.
ThinkLabs AI, an AI-powered grid intelligence company that empowers critical infrastructure with trustworthy, physics-informed AI, announced on Tuesday... The post ThinkLabs AI names Dragos’ Robert Lee to board to accelerate AI-driven grid planning, modernization appeared first on Industrial Cyber.
Separate a detection pattern, an observed fact, and a STIX Sighting so your IOC pipeline does not turn every recorded event into a threat.
Overview SecLLM-3.6-27B is a specialized cybersecurity model developed by NSFOCUS for complex security tasks. In the CyberGym Level 1 evaluation, SecLLM-3.6-27B achieved a 91.37% task success rate under a fixed task-interaction and tool-execution framework, representing an absolute improvement of 36.86 percentage points over the 54.51% base model. Model Success Rate Absolute Improvement Qwen3.8-27B base model […] The post NSFOCUS SecLLM Model on CyberGym Technical Report appeared first on
Your incident response plan has a category for ransomware. It has a category for insider threat, for business email compromise, for third-party breach. Somewhere in there is probably a line for “emerging threats” that nobody has updated since the tabletop exercise before last. It does not have a category for what happens when an AI agent, acting on a vague instruction and elevated permissions, deletes a production database, exposes a customer table, or reconfigures a server, with no attacker, no
Online privacy is changing as a result of browser fingerprinting. The way it works is worrisome to regulators & technology companies, making them pay more attention to it. Unlike what happens with conventional tracking cookies, which store identifiers in a browser, fingerprinting makes use of characteristics of a device to know how it is different […] The post Google’s Fingerprinting Policy Shift Raises Online Privacy Concerns appeared first on PrivacySavvy.
By Mark MacDonald, Director, Product Marketing It’s one of the most famous lines in movie history. Chief Brody, chumming the water off the back of the Orca, a battle-hardened fishing boat, gets his first full look at the nemesis in Jaws. He backs slowly into the cabin in shock and says… “You’re going to need […] The post Navigating the Waves of AI-Powered Identity Attacks: Lessons From One Year of Identity Exposure Management appeared first on Flare | Identity First Threat Inte
ASTRO was assessed as a Rust-based command and control framework intended for Windows, Linux, and macOS. A seven-crate workspace, 102 agent source files, and more than 200 command variants were described in the supplied analysis. The post ASTRO C2 Technical Analysis appeared first on ThreatMon.
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to "act immediately." A fix for the third is still pending, according to Volexity. Volexity, which reported the flaws to Ivanti,
Researchers in Hong Kong have developed a method to remotely capture the audio signal from headphones by picking up electromagnetic emissions.
EkoParty 2026 took place in Buenos Aires, Argentina, from October 7 to 9, 2026. EkoParty is one of the largest and most respected information security conferences in Latin America. The... The post EkoParty 2026 Recap: A MIPS Router Talk, a CTF and a High Table in Buenos Aires appeared first on VerSprite.
Saved filters in OpenCTI let you build a filter once, share it with your team, and reuse it in dashboard widgets. One definition, every view.
n0n Group Puts Dozens of Global Ports and Shipping on Its Leak Site A month after its first leak site postings, the n0n extortion group has turned its attention to global shipping. On October 12, 2026, the group added 38
New research examines the challenges shaping enterprise threat intelligence programs, what teams are prioritizing for the months ahead, and how they are approaching agentic AI plans and budgets. The post The Enterprise Threat Intelligence Report: 2026 appeared first on Flashpoint.
A cyberdefense researcher at the Center for Security Studies (CSS) at ETH Zurich has identified gaps in satellite... The post Space sector faces satellite cybersecurity blind spots, calls for stronger threat intelligence and information sharing appeared first on Industrial Cyber.
French Supermarket Cyberattack: Exposed OT Behind France’s Food Supply Supermarkets across France opened on Monday, October 12, to warm freezers and spoiled stock. Overnight, attackers had taken control of refrigeration
A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded "Don't Get Played," was held as a side event during TOKEN2049 week in Singapore and co-hosted by groups operating under the names "Apex Accelerator" and "Stone Venture." According to a police report filed by one attendee with the Singapore Police Force, the organizers allegedly pressured guests to install software that would have handed the organizers remote
A user opens a browser tab, pastes data into a chat assistant, and nothing is installed. A developer adds a coding assistant as an editor extension, and nothing shows up in the installed programs list. Someone downloads a local model runtime, a program that runs models directly on the machine instead of sending data to an external service, because they were told not to send company data
AI is changing the game in ransomware. Read more to learn how this technology impacts cybersecurity and defense strategies today. The post AI Is Rewriting the Ransomware Playbook appeared first on DarkOwl, LLC.
Key Takeaways CVE-2026-88771 is a pre-authentication command injection in Citrix NetScaler ADC and Gateway that grants root command execution. Attackers exploited the flaw as a zero-day, and CISA added it to the KEV Catalog on September 27, 2026. The bug resides in ns_monuploadd_err.pl, a root Perl maintenance script that passes log line content to the shell. Attackers plant payloads by submitting a crafted username in an unauthenticated login request, which NetScaler writes to its logs. A semic
Share defanged IOCs while retaining usable evidence: separate display, conversion, validation and submission to external services.
There is no single best penetration testing firm for a regulated enterprise. There is a best fit for your regulator, your scope, and how your team fixes what the test... The post Best Penetration Testing Firms Compared for 2026 appeared first on VerSprite.
Attackers abused exposed Danfoss refrigeration controllers to trigger continuous defrost at 250-350 French supermarkets, spoiling stock, while a separate Ahold Delhaize incident took Albert Heijn systems offline.
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Defacement https://atiyegallery.ir/S4uD1Pwnz.htm was reported by one of those streams. HackNotice may also have [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and hiqbio.com was reported by one of those streams. HackNotice may also have the [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Blueberry Pediatrics was reported by one of those streams. HackNotice may also have [...]
Visualizing the time relationships between security events
Threat modeling for regulated enterprises has to do two jobs at once: rank risk by business consequence so architecture reviews focus on what matters, and leave behind reasoning an auditor... The post Fork: Threat Modeling for Regulated Enterprises appeared first on VerSprite.
The Credit Union Cybersecurity Handbook Protect member data and essential banking services with a practical guide to credit union cybersecurity. Written for U.S. credit union security leaders, IT teams, executives, and boards, this handbook covers cyber threats, ransomware, NCUA compliance, third-party risk, and security maturity.
Learn how zvelo’s URL, SaaS app, phishing, and malicious threat intelligence can inform policies that govern AI agent actions before execution. The post AI Agent Security: URL, SaaS App & Threat Intelligence appeared first on zvelo.
Turn External Threat Intelligence into Machine-Speed Response with SOCRadar and Torq Your Dark Web monitoring just flagged a set of employee credentials for sale. The alarm is accurate, it is timely, and it is now sittin
Techies at 'Russia's Google' work around the clock as users await access to funds and network connectivity falls to 30% of normal
Researchers have tricked six widely used AI agent frameworks into running tool calls written by an attacker, simply by asking the underlying model to repeat the call back. The technique, which the researchers call “Repeat-After-Me,” worked on LangChain’s LangGraph, Microsoft Agent Framework, Microsoft’s AutoGen, Google’s Agent Development Kit 2.0, AWS’ Strands Agents and CrewAI, according to researchers from Pennsylvania State University, Université Montpellier and Dartmouth College. “A seemingl
ZeroFox Signals Research began scoping the 2026 federal election domain threat surface in June and has observed it continuously since early July. For three months we have been observing it, enriching it, and following how election-adjacent domain infrastructure is being registered, held, and in a few cases reconfigured in ways that warrant watching ahead of […]
The Operational Technology Information Sharing and Analysis Center (OT-ISAC) and the Singapore University of Technology and Design (SUTD)... The post OT-ISAC, SUTD combine research and industry threat intelligence to strengthen OT cybersecurity preparedness appeared first on Industrial Cyber.