Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Between June and August 2026, Ukrainian authorities documented several cases of Russian intelligence-directed IED attacks and planned operations in different areas across Ukraine. The cases involved Ukrainian agents recruited by Russian intelligence services, primarily through Telegram channels, personal contacts, and...
The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threats that were detected and blocked on industrial control systems.
VulnCheck uncovers DARKLANTERN and SPEAKINGSTONE, unauthenticated Nim backdoors pre-installed in ZBT (Zbtlink) OEM router firmware. TTPs and IoCs inside.
The first in CloudSEK's "Caught in 4K" series, where we pull ransomware operations out of the shadows and show exactly how they work. A misconfigured server opened a window straight into an Aurora ransomware operator's playbook: attacker tools, AI-assisted planning, and a look inside the actual negotiation panel where a victims and the operator settled on payment. In partnership with TRM Labs, we traced that payment on-chain, into a wider laundering network moving money across multiple victims.
In this post we examine how modern hacktivism has evolved into a tool of global hybrid warfare, analyzing crowdsourced attack tactics, media-driven propaganda, and real-world impacts across Ukraine, the Middle East, European Union, and NATO nations. The post The Evolution of Hacktivism in Hybrid Warfare: Modern Tactics and Real-World Impact appeared first on Flashpoint.
Adverse media screening is typically framed as a critical component of regulatory compliance in jurisdictions around the world and is essential for firms seeking to protect themselves against serious financial and criminal penalties. However, while adverse media serves as a valuable early warning system against criminal risks such as money laundering and terrorist financing, it’s worth remembering that […] The post Using Adverse Media Screening to Protect Against Reputationa
The GTA VI Leak by CyberLeek Explained GTA VI has been slipping out from behind Rockstar's usually airtight walls in daily doses. An anonymous figure calling itself CyberLeek has been releasing gameplay clips, map images
Deepfake as a Service (DFaaS) refers to two different things in 2026, and the overlap in naming is genuinely confusing. On dark-web marketplaces, it means synthetic voice, video, and identity... The post What Is Deepfake as a Service in 2026? appeared first on VerSprite, Threat Modeling and Pentesting Services.
By Bill Bradley, Product Marketing Powerful brands elicit a feeling of trust, a promise of service delivered, and an expectation of what you will get. Adversaries take advantage of that powerful connection as a means to collect username and password pairs for account takeover and payment card information for financial fraud. With AI and pre-built […] The post Lookalike Domains are an Identity Problem, Not Just a Domain Problem appeared first on Flare | Identity First Threat Intelligence |
The post Google dorks: the ultimate list of search operators and commands appeared first on ShadowDragon®.
In part three of NETSCOUT's summaries of our surveys at Cisco Live 2026 we cover how top executives and IT contributors view the business impacts caused by network disruptions.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into the CIA Triad. The post What is the CIA Triad? appeared first on DarkOwl, LLC.
Malgré des solutions de filtrage de plus en plus performantes, des e-mails malveillants continuent d’atteindre […] L’article Lutte contre le Phishing : comment Intrinsec et GLIMPS automatisent le traitement des signalements utilisateurs est apparu en premier sur INTRINSEC.
The use of turbojet engines in loitering munitions is expanding, with documentation showing their integration into a growing number of platforms, particularly in the Russian-Ukrainian theater and within Iran and its Axis of Resistance proxy network. Russia has integrated turbojet...
Group-IB Threat Intelligence performed enrichment and APT hunting based on recent public data about the Tortoiseshell APT group, leading to the discovery of new samples sharing similarities with known Tortoiseshell malware and additional operational infrastructure.
Key Takeaways ModeloRAT is a Python-based Windows Remote Access Trojan first observed in January 2026 targeting domain-joined hosts. The CrashFix campaign delivers it through a fake NexShield Chrome extension that crashes the browser, then shows a repair prompt. C2 traffic uses HTTP port 80 with RC4 encryption, zlib-compressed JSON, and adaptive beaconing intervals. Eight command types give operators full remote code execution, payload deployment, self-update, and clean implant termination. The
In this episode AI is creating new possibilities for corporate security, but readiness depends on far more than adopting a new tool. Ontic CEO and co-founder Lukas Quanstrom joins Manish to explain why connected, governed data and clearly defined workflows are essential for trustworthy AI outcomes. They discuss the difference between using AI for efficiency… The post Connected Data, Trusted Decisions: Building an AI-Ready Security Program with Lukas Quanstrom appeared first on Ontic.
Mobile EDR explained: what it is, how it differs from MDM and MTD, and why aviation's crew and ground device fleets need OS-level visibility.
A device compromised during high-risk travel can bring persistent access home invisibly. Here's a practical post-trip security checklist.
In late April, a client sent Profero’s IR team a file they didn’t like the look of. We wrote about what we found in part one: an unfamiliar .NET backdoor, WindowsAudit.exe, running as LocalSystem and using Discord as its main control channel. In part two, we covered what came next: building a monitor around the attacker’s own infrastructure, pulling their loot dump, and identifying more than two dozen victim organizations. Last week, that case became something we hadn’t p
Threat Modeling as a Service (TMaaS) is a managed, on-demand security offering that identifies, analyzes, and prioritizes threats to applications, APIs, and cloud systems delivered by an external team of... The post What Is Threat Modeling as a Service in 2026? appeared first on VerSprite, Threat Modeling and Pentesting Services.
By Bill Bradley, Product Marketing I’ve recently spent time at identity-focused conferences and couldn’t miss all the messaging about agentic solutions. It got me thinking: agents are just bots with a better PR team. For over a decade, “bot” has been a dirty word. Botnets. Credential-stuffing bots. Bot traffic you pay to filter out. There […] The post Is an Agent a Bot with Better PR?: 5 Questions to Ask About NHI appeared first on Flare | Identity First Threat Intelligence | U
On August 21, 2026, Brazilian Military Police discovered five IEDs fitted with RC initiation systems incorporated into defensive obstacles by the Terceiro Comando Puro in Cidade Alta, part of the Complexo de Israel in northern Rio de Janeiro. The devices...
WhatsApp Says One Billion Users Are Now Protected by Passkeys The milestone signals that phishing-resistant authentication has moved into the consumer mainstream, while new controls target registration code theft and sca
Can you trust a website just because your browser isn’t showing any warnings? Here’s how to recognize gray-area websites, check whether a page is safe, and protect your data and devices.
Group-IB expone una operación mexicana de PhaaS dirigida a más de 20 instituciones financieras, con capacidades de phishing en tiempo real, vishing con IA y RAT para dispositivos móviles.
Poland’s CERT recently published a follow-up report on a cyberattack that shut down a steam turbine and water treatment system. Omnis Cyber Intelligence could’ve detected and stopped this before an outage occurred.
VicOne shows how BADBOX-linked malware used DoFun Android head units, weak MQTT security, and trusted OTA updates to push silent, persistent installs.
Earlier this year, we introduced Ivanti Innovators Hub to bring together support, knowledge and community into a more unified experience. That launch established a strong foundation for a more effortless and predictable experience. Now, we're building on it with new enhancements designed to make the Hub more personalized, connected and relevant, with integrated learning opportunities, stronger community engagement and more tailored experiences. A more personalized experience Th
Password managers were designed around a simple security model: even if an attacker reaches a server, steals a database, or intercepts encrypted data, strong client-side encryption keeps the stored passwords protected. Modern infostealers attack a different layer of that model by targeting the environment where those secrets become usable. Recent malware increasingly focuses on the […] The post Password Manager Stealers: How Malware Targets 1Password, Bitwarden, LastPass, Dashlane, and Bro
For years, cybersecurity teams have communicated risk through labels such as “High,” “Medium,” and “Low.” Those ratings can help security teams prioritize vulnerabilities, but they often leave CFOs with a more important question unanswered: What does the risk actually mean for the business financially? That question has become harder to ignore as the threat landscape accelerates. Cyble’s 2025 threat predictions, published as the year unfolded, provide a useful illustration. More than 80% of the
Spamhaus DROP and SBL are the standard for mail and network DNSBL blocking. isMalicious adds REST enrichment, URL scoring, CVE context, and STIX feeds. Most mature stacks use both at different layers.
Mythos readiness is a security program's proven ability to withstand attacks weaponized at the speed of frontier AI models such as Anthropic's Claude Mythos, where disclosure-to-exploit is measured in hours rather than weeks. A Mythos-ready organization can show which controls hold, which do not, and what evidence backs each decision to patch, mitigate, monitor, or accept.
Blog The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 Every year, a large share of breaches starts with an attacker exploiting a vulnerability in software the target is running, and it is now one of the most common ways into a network. What follows depends on where the flaw sits. A vulnerable VPN […] The post The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 appeared first on ThreatMon.
A threat actor leaked Stripe customer data and 662 valid API keys on pwnforums. See how iCOUNTER helps identify third-party risk in real time.
A Siren sensor caught a command-injection attempt against a fake admin endpoint, sent under a spoofed GPTBot and Amazonbot User-Agent. Here's what that costs an attacker, why it works, and how to detect it without trusting the header at all.
The post Ontic’s Connected Lunch Exchange appeared first on Ontic.
By Assaf Morag, Cybersecurity Researcher As competition in the underground phishing market increases, so does the quality of the products and services offerings, particularly among the Phishing as a Service (PhaaS) category. EvilTokens is completely reshaping how PhaaS affiliate programs operate: rather than offering initial access alone, it also provides malicious analytics services informed by […] The post What is EvilTokens?: The PhaaS Platform That Tells Attackers What to Do After They
Replace long-lived cloud secrets with GitHub Actions OIDC while constraining claims, permissions, environments, reusable workflows, and incident response.
Turn Kubernetes audit logs into detections for privilege abuse, secret access, persistence, risky exec, and control-plane compromise.