Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional
Better Intelligence Decisions When Evidence is Uncertain An intelligence assessment overwhelmed by conflicting data. An investigation complicated by deception and synthetic media. An automated workflow that carries untested assumptions into the next stage of analysis. Across security and intelligence work, analysts must make judgments with information that is fragmented, ambiguous, and constantly changing. More data can expand an investigation, but it does not automatically make a conclusion mor
Identify trusted servers, interpret Authentication-Results, and investigate a suspicious email without confusing authentication with safe content.
100 jeux gratuits du top des téléchargements sur Google Play en France ont été passés au crible. Dans une nouvelle étude, Proton explique que leurs traqueurs sont liés à des entreprises chinoises, russes ou israéliennes, avec parfois des données de géolocalisation des joueurs.
On September 22, Boston Scientific published the final summary of CrowdStrike’s investigation into the August 25 cyberattack that... The post Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point appeared first on Industrial Cyber.
Three third-party incidents at Brevo and Ribon reached customers through a sign-in flaw, website scripts, and an app key. See who spotted each one first and what to check now.
CloudSEK uncovered MALFEX, a long-running npm supply-chain campaign linked to a single operator, using malicious packages to deploy RATs and credential stealers. Two packages remain installable, including one malicious postinstall that evaded advisories for 14 months. Authors : Vikas Kundu
Explore how threat actors recruit insiders, target specific employee capabilities and turn legitimate workplace access into criminal capabilities and services.
Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware. [...]
Same app. Same scope. Two tests. Two findings in common. Same application. Same scope. Same credentials. We pointed Knife, our AI-driven assessment platform, and a senior consultant at one back... The post Hybrid Penetration Testing Case Study appeared first on VerSprite.
CrowdSec bot detection uncovered PaperPhone, a coordinated headless browser network using 75,000 IPs across 43 countries and fabricated mobile identities.
The post The Three Types of Silos Holding Your Team Back appeared first on Ontic.
In recent months, starting in early 2026, released documentation has shown both Ukrainian and Russian forces developing and deploying fixed-wing UAVs to disperse landmines over enemy territory. Available imagery also documents purpose-built mine release systems developed for this purpose. Employing...
Chez les acteurs de la menace, on le sait, l’usage de l’IA générative s’est généralisé […] L’article Attaques agentiques : quand l’humain disparaît de la Kill Chain est apparu en premier sur INTRINSEC.
The post Ontic Connect San Francisco appeared first on Ontic.
The 2026 U.S. Midterms Election Season, Weakened Defenses: The Cyber Landscape Ahead In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Co
Le piratage du portail de recrutement du FBI commence à livrer ses premiers détails techniques. Google a documenté une méthode utilisée par ShinyHunters pour contourner les protections d’Oracle PeopleSoft, que le groupe affirme également avoir employée contre FBI Jobs.
The post Ontic’s Corporate Security Executive Dinner appeared first on Ontic.
By Assaf Morag, Cybersecurity Researcher Somewhere on the dark web, a threat actor is running a business with published prices, customer reviews, communication channels, and an escrow system, much like legitimate online businesses. It may seem ridiculous, but it is exactly how much of the hacker-for-hire market operates today. This is an underground ecosystem that […] The post Hacker-for-Hire Economy: How Cyber Mercenaries Turned Digital Revenge Into a Business appeared first on Flare | Id
On August 25, 2026, a Russian-language PDF guide to UAV platforms employed by Ukrainian forces, containing images and technical descriptions, was shared in a Russian UAV-focused Telegram group. The 73-page guide has no stated author or issue date. It profiles...
A spokesperson for the court system told Recorded Future News that the incident did not involve ransomware and the hackers have not issued ransom demands for the stolen data as of Monday.
SOCRadar Attack Surface Management Now Integrates with ArmorCode ASPM Your team has a process for triaging vulnerabilities. The question is whether findings from your external attack surface ever reach it. An internet-fa
Researchers from Nozomi Networks Labs identified 19 vulnerabilities in the Pepperl+Fuchs IO-Link Master ICE2-8IOL-K45P-RJ45 running EtherNet/IP firmware version... The post Nozomi identifies 19 vulnerabilities in Pepperl+Fuchs IO-Link Master enabling root access and OT attacks appeared first on Industrial Cyber.
In September 2026, documentation began circulating online showing Molnya-2 loitering munitions downed somewhere in central Mali, either in the Segou region or near Dioura, in the Mopti region. These incidents coincide with growing Russian UAV activity during counterinsurgency operations in...
Regional APT Threat Situation In July 2026, the global threat hunting system of the FUYING Lab detected a total of 21 APT attack activities. These activities were primarily concentrated in regions including East Asia, Eastern Europe, Middle East, South Asia, Southeast Asia, and South America as shown in the figure below. Regarding the activity levels […] The post NSFOCUS Monthly APT Insights – July 2026 appeared first on NSFOCUS.
Once sold, stealer logs are split by domain and country, searched by target and released as free dumps. Why old logs stay dangerous and what to do.
We read public listings on underground log markets. Buyers want bank access, email and fresh cookies. Here is what to monitor and how to respond.
Stealer logs pass through specialist roles, from malware developers to cash-out services. See each stage and where defenders can break the chain.
CloudSEK found 85 malicious npm packages, published in three minutes, likely named to surface in search when developers mistype popular libraries. They give attackers remote command access. The same server hosts a GPU-hijacking panel. No victims confirmed. Authors : Vikas Kundu
CloudSEK found an attacker's control panel targeting vast.ai, a GPU rental marketplace. It rents containers beside victims to scan their networks. It reached one unprotected notebook and planted no miners. The panel exposed its own source code. Authors : Vikas Kundu
We detected 280 servers running CyberStrikeAI, an open-source AI-driven attack platform with its own C2, starting from a single ThreatFox alert. Around 200 have no record in any threat intel feed.
VicOne supports NVIDIA's Open Agent Safety Platform, extending the focus from secure AI agent decisions to the real-world actions of vehicles and robots.
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations. The post NeedyMantis: Unpacking a post-compromise malware family used in targeted operations appeared first on Microsoft Security Blog.
Installing a VPN on your router can make your home network more convenient, faster, and safer. Here are nine scenarios where it makes a real difference, from automatic setup to full privacy.
By Adrian Cheek, Senior Cybercrime Researcher An airport is a large industrial facility that has runways. It runs flight information displays, credential and badging platforms, baggage handling, airfield lighting, fuel farms, parking revenue control, weather observing, license plate recognition, stormwater monitoring, and building automation. Most aviation cybersecurity research has focused on radio protocols, rather than […] The post The Airport isn’t Online but its Directory is: A Sector
Danglegeddon is a Silent Push research simulation that measured how quickly dangling DNS records could be found and taken over at scale. A dangling DNS record is a record that still points to a service that has been deleted, such as a forgotten CNAME to a decommissioned cloud resource. Anyone who claims that service can […] The post Danglegeddon: Find your vulnerable subdomains before AI agents take them over appeared first on Silent Push.
Cloud infrastructure now changes by the hour, yet many security teams still map their external attack surface once a quarter or once a year. That mismatch creates blind spots that can last for months. A developer spins up a test environment on a Tuesday, an engineer opens a storage bucket for a partner on Wednesday, and a marketing team launches a campaign subdomain on Friday. If the next external assessment is scheduled for December, each of those assets sits exposed and unmonitored until then.
By Adrian Cheek, Senior Cybercrime Researcher For a decade, everyone hunting exposed healthcare infrastructure has looked at the same protocol: DICOM. Open PACS servers spilling X-rays onto the public internet make for a good headline, and the research has been thorough. But DICOM moves images. The rest of the patient record including admissions, lab orders, […] The post The Overlooked Healthcare Attack Surface: 1,057 FHIR Endpoints and 656 HL7 Systems Found Without Sending a Single Packet
Your firewall held. Your SOC stayed quiet. And a customer still lost money to a company that looked exactly like yours. Picture a Monday morning. A long-time customer calls your helpline, upset. Over the weekend she paid to “renew” her account on your website. It had your logo, your colours, your tone of voice. She […] The post The Breach that Never Touches your Network appeared first on Seqrite Labs.