Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
AI-powered brand protection is having a moment. Across the market, new platforms promise fully autonomous detection, real-time campaign clustering, and automated takedowns across domains, social media, messaging apps, and more. The pitch is compelling: faster alerts, less manual work, and AI-native defense built for modern deception. But brand monitoring and enforcement are not the same […]
The post From Online Activism to Physical Disruption: How Security Teams Can Spot Escalating Risk appeared first on Ontic.
StyleSmuggler Zero-Day Exploited in Active Attacks Against Magento and Adobe Commerce | Norway, the UK, and the US Reportedly Foiled a Russian Subsea Cable Sabotage Plot The post Threat Intelligence Snapshot: Week 37, 2026 appeared first on QuoIntelligence.
A closer look at the foundation behind Ontic AI and what it makes possible for security teams A few months ago, during a conversation with a client, we heard a question we’ve now been asked dozens of times: “What’s your AI strategy?” It’s the right question. But every time we sat down to answer it,… The post Meet Ontic AI: Built on Connected Intelligence appeared first on Ontic.
By Adrian Cheek, Senior Cybercrime Researcher ReliaQuest Threat Research published a short public advisory about a ShinyHunters campaign on August 17, 2026. This campaign was built on domains following a company[.]claims pattern, and reported that the group had added legal team impersonation to its established help desk and IT pretexts. The advisory had no domains, […] The post Finding and Notifying a ShinyHunters Claims Impersonation Campaign Before It Activated: 61 Domains, 48 Brands app
Blog The Load Balancer as a Backdoor: Investigating DPRK-Linked Tradecraft Inside HAProxy Executive Summary A Linux espionage toolkit identified in two South Korean organizations has revealed an unusual approach to maintaining access within enterprise infrastructure: embedding a backdoor directly into a legitimate HAProxy load balancer. The implant, known as ted, allowed the compromised service to […] The post The Load Balancer as a Backdoor: Investigating DPRK-Linked Tradecraft Inside HAP
Infostealer malware is behind a large share of today's credential compromise — and it usually doesn't start with a breach at all. When a security team hears "data breach," the instinct is to look for the moment a database was exfiltrated or a network was penetrated. But more often, the real starting point is a single endpoint infection, often on a personal device, that has nothing to do with the organization's perimeter. By the time stolen credentials show up in a breach notification or a dark w
Version 6.1 of the Silent Push platform focuses on protecting what matters most to organizations and accelerating what analysts do next. The post Silent Push 6.1: Built to Get There First appeared first on Silent Push.
US agencies claim Chinese companies covertly extracted billions of tokens from OpenAI, Anthropic, Google Gemini, and SpaceX's Grok to reduce development costs.
On September 5, 2026, the Rhysida ransomware group published a massive trove of data allegedly stolen from Berlin's state government after authorities refused a ransom demand. Rhysida claimed the... The post Rhysida Dumps 1.44 Million Files, 5.8TB of Berlin State Government Data After Ransom Refusal appeared first on Blackwired.com.
Government compliance regimes have historically operated on long, manual, document-heavy review cycles. FedRAMP, the authorization program for cloud services used by federal agencies, is in the middle of a structural... The post Threat Modeling Platforms for Government Secure SDLC appeared first on VerSprite.
Financial institutions rarely disagree that risk-based threat modeling is worth doing. What slows them down is the process itself. A manual, workshop-based approach to financial threat modeling can take weeks... The post Fork for Financial Threat Modeling Bottlenecks appeared first on VerSprite.
See how URL Intelligence connects applications, infrastructure, behavior, and risk signals to drive evolution in Internet Intelligence. The post The Evolution of URL Intelligence appeared first on zvelo.
Download the report to explore the findings shaping corporate security in 2026, including: The post Annual CSO Survey 2026 appeared first on Ontic.
Flashpoint’s weekly analysis tracks shifting kinetic and cyber threat radiuses, geopolitical disruptions, and provides critical operational forecasts for the ongoing Middle East conflict. The post The Flashpoint Threat Intelligence Brief: Middle East appeared first on Flashpoint.
The post 10 OSINT analysis techniques to accelerate investigations appeared first on ShadowDragon®.
The post 10 OSINT analysis techniques to accelerate investigations appeared first on ShadowDragon®.
AUSTIN, Tex., Sept. 9, 2026, CyberNewswire – SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) – the AI agents, service accounts, API keys, … (more…) The post News Alert: SpyCloud survey finds machine identity risks outpace defenses, exposing gaps in oversight first appeared on The Last Watchdog.
NETSCOUT’s ENGAGE 26 service provider track to showcase how AI-ready Smart Data, observability, and automation help operators optimize 5G, RAN, cloud-native, and fixed-line networks for smarter, more resilient operations.
Learn how to fully remove apps from your Mac, including cache, settings, and other leftover files, and free up disk space with App Cleaner in Kaspersky Premium.
The impersonation that matters most is the kind organizations never see coming. Here’s what to do about it. Brand impersonation that actually costs organizations money rarely looks like a fake logo or a knockoff social account. It resembles your own infrastructure but was built by someone else. When a domain is registered to look […] The post Brand Impersonation Is an Infrastructure Problem appeared first on Silent Push.
Iran-linked hackers disrupted a UK power plant and water systems across 12 US states this summer. This wasn't espionage — it was a demonstration. The post The Warning Was Already Online: Iran-Linked Attacks on UK Power and US Water appeared first on DarkOwl, LLC.
Silent Push Platform 6.1 features a complete rebuild of its brand and infrastructure impersonation engine, faster investigations, new integrations, and greater global support. The post Silent Push 6.1 Platform Detects Attacker Infrastructure Earlier for Preemptive Action appeared first on Silent Push.
Manage IOC expiration with separate DNS, evidence and STIX validity clocks. Review stale IP blocks, process withdrawals and preserve the audit trail.
An IOC match is an investigation lead. Correlate DNS, network connections and process records to establish what happened on the endpoint.
Track domain reputation over time: distinguish a new phishing report from expected DNS changes, then decide what to verify before restricting access.
QuoIntelligence's report tracks how app developers become an intermediary in the residential proxy supply chain through Software Development Kit (SDK) integration, and what that means for end users left carrying the risk. The post Residential Proxies Hide Inside Everyday Apps. Users Carry the Risk appeared first on QuoIntelligence.
How the Gigabud Android banking trojan abuses Shelter, an open-source app cloner, and what that means for banks, users, and defenders.
11 organizations compromised in 26 seconds. GreyNoise breaks down the AI-enabled campaign against PaperCut that hit 440 instances across 48 countries.
Threat actors are abusing multiple Google services to evade detection, ultimately harvesting credentials or installing ScreenConnect remote access.
Deciding to move on from manual threat modeling for financial institutions is the easy part. Most CISOs and risk managers reach that conclusion on their own, usually after the third... The post How to Replace Manual Threat Modeling for Financial Institutions appeared first on VerSprite.
Canadian researchers have demonstrated GPUThor — a Rowhammer attack that in theory can bypass the ECC memory protection.
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams and identify vulnerabilities that t
Rapid AI growth is making banking systems complex and vulnerable to outages. Improving network telemetry helps banks prevent these system failures and protect the customer experience.
Executive Summary MacSync Stealer is a family of macOS information stealers and remote-access stagers designed to evade detection and sold commercially under a malware-as-a-service (MaaS) model. In the attack chain, MacSync binaries are native stagers and multi-part exfiltration engines. Rather than standalone harvesters, the payloads are lightweight 64-bit Mach-O executables that detach silently from terminal […] The post MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures appear
An Afternoon in East London with a Man Who Steals through the Internet for a Living He agreed to meet on the condition that we describe neither his face nor his voice. The introduction came through a source we’ve worked with before on stories about financial crime, passed along after weeks of encrypted back-and-forth on […]
Set up open-source Nginx bot protection with CrowdSec to block scrapers, headless browsers, AI crawlers, and other unwanted automated traffic.