Your Customer Shouldn’t Be the Canary in a Coal Mine
When an organization gains end-to-end visibility into its network and application environment, teams can spot issues before they become full-blown problems.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Ces prétendus services d’OpenAI, Google ou Anthropic dissimulent une fausse fenêtre de navigateur pour siphonner vos identifiants
Des chercheurs en cybersécurité ont découvert une vaste plateforme de phishing grimée en faux services ChatGPT, Gemini, Claude ou Perplexity. Son arme principale : une fausse fenêtre de navigateur capable de faire passer un site frauduleux pour une page de connexion légitime.
FortiBleed Is Still Active, Locking Organizations Out
FortiBleed Is Still Active, Locking Organizations Out On October 6, 2026, the FBI and the U.S. Secret Service published a joint Cybersecurity Advisory on FortiBleed, the active global credential compromise campaign again
Update Chrome and ChromeOS to fix critical security issues
Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don't delay.
Dark AI: Inside the Underground Market for Malicious LLMs
In mid-2023, a vendor on an underground forum started selling access to a language model with the safety guardrails stripped out. The product was called WormGPT, and it was marketed to people running business email compromise and phishing campaigns. It had a monthly subscription price, a documentation page, and a regular update schedule. That listing […]
A Practical Guide to NERC CIP Compliance Using Picus
What Is NERC and What Does It Stand For? NERC stands for the North American Electric Reliability Corporation. It is a not-for-profit international regulatory authority focused on the reliability and security of the North American bulk power system. In the United States, NERC operates as the Electric Reliability Organization under Federal Energy Regulatory Commission (FERC) oversight.
NHS, Samsung, CIA and More: Inside the Latest Dark Web Breach Claims
Blog NHS, Samsung, CIA and More: Inside the Latest Dark Web Breach Claims Executive Summary Dark web breach claims do not all carry the same level of risk. In recent listings involving NHS England, China Railway 12306, Turkey’s IYS, Samsung, Argentina’s Ministry of Health and RENAPER, and alleged CIA and FBI data, the available evidence […] The post NHS, Samsung, CIA and More: Inside the Latest Dark Web Breach Claims appeared first on ThreatMon.
NXDOMAIN: Diagnose a DNS Security Anomaly
Separate nonexistent names, negative caching, filtering and suspicious activity before treating NXDOMAIN errors as a security incident.
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
Opt What?
All opt-out is spam. If you're not a spammer, don't use the verb "to opt-out" in connection with any of your activities.
Upstate student data breached at third-party software provider, districts say – Yahoo
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Upstate student data breached at third-party software provider, districts say - Yahoo was [...]
Upstate student data breached at third-party software provider, districts say – Yahoo
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Upstate student data breached at third-party software provider, districts say - Yahoo was [...]
Upstate student data breached at third-party software provider, districts say – Yahoo
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Upstate student data breached at third-party software provider, districts say - Yahoo was [...]
Stealer Logs as a Subscription: How Sellers Run the Market Like a Business
Stealer log sellers now run cloud subscriptions, storefronts and daily update cycles. Here is what we saw in October 2026 and where defenders can interrupt it.
The Threat-to-Action Gap Is a Growing Federal Security Risk
How federal security teams can turn fragmented signals into faster, more coordinated decisions and operational response A concerning post appears online shortly before a high-profile event at a federal facility. An analyst identifies the individual behind it, but needs to determine whether they have a history of concerning behavior, any connection to the facility or… The post The Threat-to-Action Gap Is a Growing Federal Security Risk appeared first on Ontic.
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have disclosed details of a "human-operated phishing platform" that impersonates advertising products for artificial intelligence (AI) chatbots like Google Gemini, Anthropic Claude, OpenAI ChatGPT, Perplexity, Meta Muse, and Manus. The products, which claim to offer campaign optimization, spend audits, and business-account connections, are designed with one goal in
Foresight Is the Real Promise of AI in Corporate Security
Recognize emerging risk earlier, understand its impact faster, and act with greater confidence In Part 1 of this series, I discussed how meaningful AI starts with Connected Intelligence. If your data isn’t connected, governed, and contextualized, AI can only deliver a partial picture, no matter how sophisticated the technology. Once you’ve built that foundation, the… The post Foresight Is the Real Promise of AI in Corporate Security appeared first on Ontic.
Dark Forums: The Institution That Survives Its Own Seizures
Between January 2025 and January 2026, law enforcement took Cracked, Nulled, XSS, BreachForums and RAMP. Yet the volume of stolen data in circulation went up. This article traces the criminal forum from pre-Tor carding boards to the platforms running today, and why the forum as an institution outlives the sites that host it. The post Dark Forums: The Institution That Survives Its Own Seizures appeared first on Zynap.
Stop defending alone: shared intelligence beats siloed security
Why does shared intelligence matter? See how threat data sharing speeds response, supports compliance, and scales safely with OpenCTI.
12 best OSINT username lookup tools for investigators
The post 12 best OSINT username lookup tools for investigators appeared first on ShadowDragon®.
GTA 6 before release: fake leaks, “early access”, and other scams | Kaspersky official blog
Scammers are capitalizing on the upcoming GTA VI release by luring gamers with leaked builds and other ways of getting pre-launch access. Here’s how to avoid falling for their tricks.
SOCRadar Alarms in Elastic | Investigate Threats Faster
Investigate SOCRadar Alarms Where Your Analysts Already Work, with SOCRadar and Elastic Your SOC runs on Elastic. Detections, logs, cases and dashboards all live in Kibana, and your analysts have built their muscle memory around it. Then an impersonating domain, a leaked credential or a newly exposed asset shows up in a different console, and […]
CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery
By Assaf Morag, Cybersecurity Researcher ClickFix campaigns have become one of the most effective ways to turn a browser session into code execution. The technique is simple: show the victim a fake verification page, place a command on the clipboard, and convince them to paste it into the Windows Run dialog. CrocoRat, a previously undocumented […] The post CrocoRat Adds a New Twist to ClickFix with DNS Payload Delivery appeared first on Flare | Identity First Threat Intelligence | Unmatche
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure
CyberXero: An AI-Augmented Initial Access Broker Targeting Ukrainian Critical Infrastructure SOCRadar's Threat Research Unit (STRU) has documented CyberXero , a Russian-speaking, financially motivated Initial Access Brok
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Gaining Greater Control and Access Management with Preemptive Cyber Defense
Silent Push 6.2 lets admins easily select users, usage, and defensive intelligence levels from a single page and deploys the platform within ThreatConnect, Microsoft Sentinel, and Palo Alto Cortex XSOAR. The post Gaining Greater Control and Access Management with Preemptive Cyber Defense appeared first on Silent Push.
GDPR and Dark Web Investigations: When European Subjects Show Up in Breach Data
Uncover the relationship between GDPR and dark web investigations, ensuring your analysis remains compliant with regulations. The post GDPR and Dark Web Investigations: When European Subjects Show Up in Breach Data appeared first on DarkOwl, LLC.
SystemWeaver and VicOne Launch Live TARA, Connecting Continuous Vulnerability Intelligence Directly to Automotive Cybersecurity Engineering
VicOne and SystemWeaver launch Live TARA, linking xZETA vulnerability intelligence to automotive threat analysis and risk assessment (TARA) to keep it current.
How Can Digital Risk Protection Services Help Banks Detect External Cyber Threats?
Banks have invested heavily in securing their internal IT infrastructure, endpoints, applications, and networks. However, cyber risks do not always originate inside the organisation. Attackers increasingly target a bank’s external digital presence, including websites, domains, social media accounts, mobile applications, employees, customers, and exposed credentials. A compromised domain, fake banking website, impersonated social media account, […] The post How Can Digital Risk Protection S
Winner of the ECSO STARtup Award 2026
ECSO interviewed Marco Riccardi after QuoIntelligence won the ECSO STARtup Award 2026 as Europe’s Most Promising Cybersecurity Start-up. The post Winner of the ECSO STARtup Award 2026 appeared first on QuoIntelligence.
AI accelerates n-day attacks, as flaw disclosures and exploits double
Attackers are increasingly weaponizing already-disclosed flaws rather than new zero-days, and AI tools may be accelerating how quickly they do it. According to a report from Google’s Threat Intelligence Group (GTIG), attackers have exploited more vulnerabilities in the wild thus far this year than they did all of last year. With the number of flaws disclosed each month sharply rising, AI tools are helping reduce the time it takes to write working exploits for publicly disclosed bugs. GTIG record
From Detonation to Detection: The Sandbox Now Writes the Rules
Understanding what a malware sample does and being able to detect it are two different jobs, and the second one needs a skill many teams are short of. The Group-IB Malware Detonation Platform now produces indicators, Sigma rules, and hunting queries from the behavior it observes.
Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices
Nozomi Networks Labs has identified a botnet dubbed Cling that exploits internet-exposed IoT and networking devices and disguises... The post Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices appeared first on Industrial Cyber.
Picus Offers Singapore-Hosted Security Validation for Local Data Residency
Picus Security offers a Singapore-hosted deployment of the Picus Platform. It allows organizations to keep customer data in Singapore while continuously validating their attack surfaces, security controls, and exposures.
CNAME Cloaking: Investigate a Third-Party Subdomain
Trace CNAME records, identify the provider, and inspect transmitted cookies before deciding whether a subdomain should remain authorized.
ClickFix Smuggles Payloads Through Browser Cache to Bypass Windows Run Limits
A new type of ClickFix attack is using compromised websites to trick users into executing a malicious payload cached in a web browser's cache. "Instead of downloading and executing remote payloads like the typical attack pattern, in this attack, the websites pre-fetch a script payload into the browser cache disguised as a PNG file," the Microsoft Threat Intelligence team said in a post on X.
Request, Aggregate, Bypass: How Attackers Can Evade LLM Safety Classifiers
Cybersecurity Awareness Month 2026
Cybersecurity Awareness Month 2026 arrives with two official themes this year: CISA’s “Securing the Next 250,” aimed at infrastructure resilience, and the National Cybersecurity Alliance’s “Don’t Make It Easy for... The post Cybersecurity Awareness Month 2026 appeared first on VerSprite.
ISPs and Registrars Can Lead the Fight Against AI Deepfake Abuse With Unified Reporting Standards
What starts as a news headline about well-known public figures and celebrities being used in AI deepfakes is quickly becoming a widespread network abuse problem landing directly on the abuse desks of network infrastructure providers. Content note: This article discusses AI-generated non-consensual intimate imagery, extortion, and the harm it can have on adults and minors. […] The post ISPs and Registrars Can Lead the Fight Against AI Deepfake Abuse With Unified Reporting Standards appeared