Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,701 matching stories — announcement, in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft will make passkeys the default authentication experience in Entra ID beginning September 1, 2026, and will fully retire its native SMS and voice multifactor authentication (MFA) delivery services on February 1, 2027. According to Microsoft, the transition is part of Microsoft’s broader effort to eliminate phishable credentials as enterprises expand cloud usage, remote access, […]
A newly disclosed universal deserialization gadget chain shows how a single unsafe Marshal.load operation can reportedly produce remote command execution in Ruby 4.0.6, underscoring the persistent danger of exposing Ruby’s native serialization mechanism to attacker-controlled data. According to research published by elttam, the chain also works unchanged on Ruby versions as far back as 3.3. […]
A newly disclosed Windows attack technique, dubbed “Download More RAM,” can undermine Virtualization-Based Security (VBS), bypass Hypervisor-Protected Code Integrity (HVCI), and disable endpoint protections including Microsoft Defender and third-party EDR products. The attack was presented at USENIX Security 2026 and is tracked by Microsoft as CVE-2026-23670. Unlike a conventional Windows kernel exploit, Download More RAM […]
Description ## Summary The `cloneServer.json.php` endpoint in the CloneSite plugin constructs shell commands using user-controlled input (`url` parameter) without proper sanitization. The input is directly concatenated into a `wget` command executed via `exec()`, allowing command injection. An at
### Summary An authorization bypass in the OAuth provider allows any authenticated low-privilege user to create OAuth clients even when the deployment configures clientPrivileges to restrict client creation. The option contract explicitly includes a create action, but the create paths never invoke t
During ML-DSA verification the serialized hint values are decoded as specified in algorithm 22 `HintBitUnpack` of [FIPS 204, subsection 7.1](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf#%5B%7B%22num%22%3A120%2C%22gen%22%3A0%7D%2C%7B%22name%22%3A%22FitH%22%7D%2C657%5D). The algorithm requ
The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026. According to Cyble Research and Intelligence Labs (CRIL), North and South America combined experienced 2,188 documented ransomware attacks between January and June 2026. That single figure — 2,188 attacks — represents more than 57% of the 3,836 ransomware incidents CRIL tracked worldwide, making the Americas the undisputed center of gravity for global ransomware operations. But the Americas
Robot manufacturers face distinct FCC Covered List, the EU Cyber Resilience Act (CRA), and IEC 62443 requirements. Learn how shared security workflows can support readiness across all three.
From Blackwater to Cyber-Privateers: When States Outsource Force On August 12, 2026, President Donald Trump signed a National Security Presidential Memorandum titled " Expanding Capabilities to Combat Transnational Cyber
I spent this summer as a GSoC contributor on GreedyBear under the mentorship of Tim Leonhard, refactoring its hardcoded dashboard into a configuration-driven widget system with a drag-and-drop admin editor and backend persistence.
Mentor: Tim Leonhard
Organization: The Honeynet Project
Project: GreedyBear: Dashboard Modularization
GSoC Proposal
The goal of my project was to modularize the GreedyBear dashboard.
Before this project, every widget - its type, data source, pos
Search for a Roblox executor, Minecraft mod, or game cheat and the security story appears familiar. A player downloads a fake tool, malware runs, and the attacker steals a Discord account, browser cookies, passwords, or cryptocurrency. Recent campaigns reveal a more interesting system underneath that sequence. The newest game-focused stealers increasingly inspect the victim after […] The post Roblox, Minecraft, and Game-Cheat Stealers: How Fake Executors Turn Gamers Into High-Value Identit
IPQS scores whether a signup is fraudulent. isMalicious scores whether infrastructure is malicious. The two get compared constantly because both return a number about an IP address — and they answer different questions.
A 90-day plan for third-party risk transformation: tier vendors, build detection and workflows, then prove exposure is falling with 5 key metrics.
What is corporate security and how does it fit into both physical and cybersecurity? Corporate security is the function responsible for protecting an organization’s people, physical assets, information, and operations from threats that originate both inside and outside the business. For large enterprises, that mandate spans everything from the guard at the front desk to… The post Corporate Security: A Complete Guide (2026) appeared first on Ontic.
The post From Online Activism to Physical Disruption: How Security Teams Can Spot Escalating Risk appeared first on Ontic.
Cyber Risk Quantification measures your cyber risk in money, so your security posture becomes a single number instead of a subjective rating. CRQ is a figure your board can fund decisions on and your clients can hold you to, and one that should fall as your security improves. This guide explains what it is, how it works, and how to bring it down, for security leaders at enterprises and MSSPs. The post Cyber Risk Quantification and Security Posture, Explained appeared first on Zynap.
Why — and for whom — artificial intelligence is now churning out books, how they end up on Amazon, and what risks this poses for readers.
In this post, we preview the critical findings of Flashpoint’s Global Threat Intelligence Report: 2026 Midyear Edition. The post Navigating AI-Driven Cyber Threats: Insights from Flashpoint’s 2026 GTIR Midyear Edition appeared first on Flashpoint.
Threat Actor Abuses Salesforce and ServiceNow Guest Portals at Telecommunications, Financial, and Public Sector Organizations | Germany Warns of Daily Hybrid Warfare After Suspected Drone Attack The post Threat Intelligence Snapshot: Week 33, 2026 appeared first on QuoIntelligence.
Abstract NSFOCUS has now completed a second CyberGym Level 1 evaluation of NSFOCUS AI, this time using GLM-5.3 inference. The new run solved 1,432 of 1,507 tasks, achieving a strict Pass@1 of 95.02% and extending the earlier GLM-5.2 evaluation reported below. In the earlier GLM-5.2 evaluation, NSFOCUS’s self-developed intelligent offensive-and-defensive system NSFOCUS AI achieved a […] The post NSFOCUS AI CyberGym Level 1 Technical Report appeared first on NSFOCUS.
Cybersecurity is a business risk, not just an IT issue. Learn why leadership, awareness, and proactive measures matter. The post Why Cybersecurity Is a Business Issue, Not Just an IT issue! appeared first on DarkOwl, LLC.
MISP is where you store and share indicators. isMalicious is where indicators come from. Teams searching for a MISP alternative are usually looking for a feed, not a replacement platform.
LiteLLM Supply Chain Attack: Inside the AI Breach That Exposed 2,500+ Companies Key Takeaways The LiteLLM breach planted credential-stealing code in two PyPI releases, v1.82.7 and v1.82.8 , live for roughly 40 minutes on
The software supply chain problem has entered a new operational phase. The attacker no longer needs to compromise only source code, package registries, build pipelines, or signing keys. In the... The post AI Supply Chain Attacks: Why Trusted AI Artifacts Are Becoming a Primary Attack Vector appeared first on VerSprite, Threat Modeling and Pentesting Services.
More than a quarter of stolen funds are gone within fifteen minutes of the fraudulent transfer. That number ends the case-file era — and points to where the time can be won back.
Regional APT Threat Situation In April 2026, the global threat hunting system of Fuying Lab detected a total of 29 APT attack activities. These activities were primarily concentrated in regions including East Asia, South Asia, Eastern Europe, North America, and the Middle East, as shown in the figure below. Regarding the activity levels of different […] The post NSFOCUS Monthly APT Insights – April 2026 appeared first on NSFOCUS.
Posture scores and questionnaires measure vendor hygiene, not active targeting. See why compromise intelligence closes the gap TPRM tools miss.
One rented VPS, three payloads — a self-naming dropper, a Docker API scanner, and a Redis module that turns MODULE LOAD into remote code execution — all converging on the same Monero wallet.
A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.
On August 10, 2026, a European research team published a preprint demonstrating that the encrypted “reasoning” or “thinking” blocks returned by frontier LLM APIs (Claude, GPT, Gemini) can be decoded in plaintext.1 They extracted 315,320 reasoning blocks from 6,708 publicly posted agent trajectories across GitHub and Hugging Face. Inside genuine user sessions they found 704 privacy artifacts: 62 API keys, 33 passwords, 24 access tokens, and 30 personal email addresses. Six
A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.
Former Google Threat Intelligence leader joins GreyNoise as SVP of Adversary Operations to advance proactive discovery and disruption of cyber threats.
Silent Push preemptive cyber defense covers the agentic enrichment gap by feeding AI SOCs earlier data, making them faster and right more often. The post What Does Preemptive Cyber Defense Look Like Inside an AI SOC? appeared first on Silent Push.
Security researchers identified a major software supply chain campaign dubbed "ChainDrop," in which a self-propagating worm compromised hundreds of npm packages and spread malicious updates through... The post ChainDrop Supply Chain Attack Compromises Hundreds of npm Packages appeared first on Blackwired.com.
Modern investigations demand more than single source intelligence. When law enforcement agencies track organized crime networks, corporate security teams assess physical threats, or government analysts map terrorist infrastructure, they may draw on commercial satellite imagery, open mapping platforms, mobile location data, social media, aircraft broadcasts, public sensors, and other sources. Geography provides a common layer that helps connect these fragmented signals into a broader intelligence
By Adrian Cheek, Senior Cybercrime Researcher Publicly exposed EV charging infrastructure remains an unresolved cybersecurity problem. Security practitioner Ken Munro has spent years taking apart the machines that charge electric cars. When asked what actually kept him up at night, he did not point to any one broken device. He pointed at all of them […] The post Plugged In and Exposed: The Growing Cybersecurity Threat to EV Charging Infrastructure appeared first on Flare | Identity First T
Technical debt, soaring cloud costs, and hidden security threats are keeping IT leaders awake. Learn how to cut through operational noise and restore control.
Log into ZeroFox analytics and you’ll find dashboards waiting. But you don’t work by org chart. You work by intent: what am I trying to get done right now? That’s how the Essentials suite is built. That’s how the Essentials suite is built. Every dashboard is tagged to an intent, a job, not a department. […]
Blog The Rise of Ransomware in July 2026: What Companies Need to Know Ransomware did not slow down in July 2026. If anything, the threat landscape became more fragmented, more targeted, and harder to predict. ThreatMon’s latest ransomware research identified activity linked to six distinct ransomware groups, affecting organizations across multiple countries and industries. The […] The post The Rise of Ransomware in July 2026: What Companies Need to Know appeared first on ThreatMon.