Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,856 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Digital platforms, most notably the peer-to-peer exchange Besira, serve as recruitment and travel-guidance hubs for individuals seeking to undertake Hijrah to IS-held territories, with discussions focused primarily on Islamic State West Africa Province and Islamic State Sahel Province areas in...
For state and local agencies, threat modeling for government agencies is no longer a specialist exercise reserved for a handful of flagship systems. Agencies now run benefits portals, permitting and... The post Scaling Threat Modeling for Government Agencies appeared first on VerSprite.
Le développeur Hizbartech a déguisé une application de discussion sans intérêt en Google Chrome sur le Play Store, et a payé une publicité pour la placer au-dessus du vrai navigateur. Plus de 100 000 téléchargements plus tard, Google a retiré la contrefaçon le 14 octobre.
Learn how you should respond to the CrowdStrike incident and the likely long-term impact it will have on third-party risk management.
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and CFG SERRAMENTI S.r.l. was reported by one of those streams. HackNotice may also [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Aena Hit by Unauthorized Access in Japan, Up to 810,000 Members' Data Potentially [...]
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Sladek Partners was reported by one of those streams. HackNotice may also have [...]
Citizen Lab documented AdFection, the first public technical confirmation of zero-click mercenary spyware delivered through targeted online ads linked to Candiru.
How a live GreyNoise product demo turned into an incident response. Inside a proxyjacking campaign that hit 143 devices across 34 countries.
The Ukrainian military can again use SpaceX’s Starshield satellite service on the move, a Defense Ministry source told Recorded Future News on Thursday, days after sudden restrictions disrupted drone missions along the front line.
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate
Vendor promises fix for separate privilege-escalation flaw in the coming weeks
Microsoft and Health-ISAC, along with the Japan Cybercrime Control Center (JC3) and a coalition of private sector companies, such as Resecurity, Cloudflare, Oracle, Proofpoint, and TRM Labs, announced the disruption of three phishing kits, CoGUI (aka NX or FA), Haozi (aka Phoenix), and Iron Man System. "Since January 2026, the threat actors behind these kits have been responsible for
Data centers aren’t villains; they are part of the network fabric running our digital world. NETSCOUT protects data and AI moving between these environments.
The update collection published by Microsoft on October 13, 2026 includes a total of 1,414 patches. Here’s what you need to know.
CVE-2026-105445: Docker Hub PAT Reassignment Flaw Docker has disclosed CVE-2026-105445 , a critical privilege assignment flaw in Docker Hub that could allow an attacker to reuse a personal access token (PAT) after it was
CVE-2026-89111: Critical SAP Cloud SDK SSRF SAP has disclosed CVE-2026-89111 , a maximum-severity server-side request forgery (SSRF) vulnerability in SAP Cloud SDK for Python that can expose OAuth2 client credentials. Wh
AI-powered penetration testing can uncover complex attack paths, but safety restrictions and network limitations leave many assets and vulnerabilities untested. Picus Security explains how combining agentic pentesting with exposure validation and breach simulation can help close these gaps. [...]
Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.
Les escroqueries en ligne ne commencent pas toujours par une demande d'argent. Certaines se construisent sur plusieurs jours de conversation, le temps de gagner la confiance de leur victime. À Singapour, Google DeepMind développe avec les autorités locales une IA expérimentale capable de repérer ces manipulations directement sur un smartphone, sans envoyer les échanges dans le cloud.
Prioritize What Attackers Will Exploit: 4 Elements of Strong Exposure Prioritization With every new CVE, your team needs to know whether attackers can exploit it in your environment and whether your controls would stop or detect the attack. In this research, Gartner® explains how four elements, from threat intelligence to security control validation, work together so you can prioritize what attackers will exploit.
This Cyble Research & Intelligence Labs (CRIL) weekly vulnerability report covers two views of risk: what attackers tried against Cyble's global honeypot sensors, and what the Cybersecurity and Infrastructure Security Agency (CISA) disclosed for industrial control systems (ICS). The Cyble Global Sensor Intelligence (CGSI) network observed exploitation attempts against about 20 known vulnerabilities. They range from newly disclosed flaws in WordPress, Apache Solr, and Langflow to years-old bugs i
Top RCE Vulnerabilities A remote code execution (RCE) vulnerability is a software flaw that lets an attacker run their own code on a target system from a remote location. Exploiting vulnerabilities like this is now the m
Un pirate soupçonné d'avoir attaqué plusieurs banques sud-coréennes à l'aide de l'intelligence artificielle a laissé ses conversations avec Claude accessibles sur Internet. Une découverte qui a permis aux chercheurs de CrowdStrike de reconstituer ses activités.
The post OSINT for executive protection: reducing risk to executives appeared first on ShadowDragon®.
The post How to use OSINT for brand protection appeared first on ShadowDragon®.
A team at security firm XBOW chained three then-unknown Google Chrome bugs into a single attack that runs code on a Windows computer when the user only loads a web page, the company said. Its researchers built the attack in six days by directing AI agents running OpenAI's publicly available GPT-5.6 Sol model. Google has since confirmed all three bugs, fixed them, and paid XBOW its top $
Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud. Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking
Malware is becoming increasingly sophisticated, making it difficult for organizations to detect emerging threats using traditional signature-based security tools alone. Attackers use techniques such as code obfuscation, polymorphism, and sandbox evasion to bypass conventional security measures. Artificial intelligence (AI) and machine learning (ML) are transforming malware analysis by helping security teams identify suspicious patterns, analyze […] The post Which Malware Analysis Platforms
Why Are Attackers Writing Fake Content for Machines? Attackers have started writing fake content for a new reader: the large language models (LLMs) and AI agents that summarize, recommend, and increasingly act, autonomously, on what they find online. Most drivers don’t question the turn their navigation app tells them to take, because they trust the […]
Blog Four Days to Pay: How Fast Ransomware Gangs Leaked Data in September 2026 September looked quieter than August on paper. ThreatMon counted 762 ransomware victims for the month, down from 1,067 the month before. That drop doesn’t mean much on its own, though. The month still brought attacks on a major Turkish conglomerate, an […] The post Four Days to Pay: How Fast Ransomware Gangs Leaked Data in September 2026 appeared first on ThreatMon.
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.
The European Cybersecurity Organisation (ECSO) has called for a dedicated European industrial policy for space cybersecurity, warning that... The post ECSO outlines six priorities for EU space cybersecurity policy, from secure-by-design systems to threat intelligence sharing appeared first on Industrial Cyber.
ThinkLabs AI, an AI-powered grid intelligence company that empowers critical infrastructure with trustworthy, physics-informed AI, announced on Tuesday... The post ThinkLabs AI names Dragos’ Robert Lee to board to accelerate AI-driven grid planning, modernization appeared first on Industrial Cyber.
Separate a detection pattern, an observed fact, and a STIX Sighting so your IOC pipeline does not turn every recorded event into a threat.
Overview SecLLM-3.6-27B is a specialized cybersecurity model developed by NSFOCUS for complex security tasks. In the CyberGym Level 1 evaluation, SecLLM-3.6-27B achieved a 91.37% task success rate under a fixed task-interaction and tool-execution framework, representing an absolute improvement of 36.86 percentage points over the 54.51% base model. Model Success Rate Absolute Improvement Qwen3.8-27B base model […] The post NSFOCUS SecLLM Model on CyberGym Technical Report appeared first on
Your incident response plan has a category for ransomware. It has a category for insider threat, for business email compromise, for third-party breach. Somewhere in there is probably a line for “emerging threats” that nobody has updated since the tabletop exercise before last. It does not have a category for what happens when an AI agent, acting on a vague instruction and elevated permissions, deletes a production database, exposes a customer table, or reconfigures a server, with no attacker, no
curl 8.23.0 fixes 24 vulnerabilities, led by a high-severity HTTP/2 upload use-after-free (CVE-2026-92392) affecting curl and libcurl 8.12.0 through 8.22.0, and drops SMB support.