The best OSINT browser extensions: 10 tools every investigator should know
The post The best OSINT browser extensions: 10 tools every investigator should know appeared first on ShadowDragon®.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,883 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
5 Capabilities Every Exposure Management Program Needs
Exposure management should help security teams move from visibility to defensible action. That means bringing exposure and asset context together, proving which findings are actually exploitable, factoring measured security control effectiveness into prioritization, understanding how far an attacker could progress, and confirming that remediation really reduced the risk.
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel," Nozomi Networks said in a report
Dark Web Monitoring vs. Compromised Credential Monitoring: What Each Finds and What Each Misses
A company appears for sale on an underground forum. An employee password turns up in an old breach. A fresh infostealer log contains a corporate login and an active browser session. Someone posts a ransomware claim naming the company. All four are external exposure signals. But they are not the same kind of threat, and […] The post Dark Web Monitoring vs. Compromised Credential Monitoring: What Each Finds and What Each Misses appeared first on Lunar Cyber.
Google suspend son bug bounty open source face à l’explosion des signalements IA
Submergé par les rapports IA, Google n’a pas eu le choix : le géant de la Tech met en pause son programme de chasse aux bugs dans ses logiciels open source.
Google halts open-source bug bounty program amid AI spam surge
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports. [...]
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of session forgery stemming from the use of a weak pseudo-random number generator (PRNG) that can lead to a predictable key, which an attacker can then use to gain unauthorized access and
IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale
IQUALIF France Leak, IUT Paris Seine Breach, US IAB Auction, SMTP Credential Dump, and Apache Struts Exploit Sale SOCRadar Dark Web Team identified several new underground posts, including an alleged IQUALIF-based French
Parked Domains: Assess the Risk Before Blocking
Distinguish domain parking, expiration, and malicious behavior. Examine actual use and choose a restriction supported by the evidence.
Falcon Data Security for SaaS Secures Sensitive Data in Microsoft 365
New in Falcon Cloud Security: Third-Party App Insights and AI-Enhanced Remediation
What Is Secure Design Analysis for CI/CD Security?
Secure design analysis is the practice of examining a CI/CD pipeline’s architecture, trust boundaries, and privilege flows before and as it’s built, rather than only scanning the code and artifacts... The post What Is Secure Design Analysis for CI/CD Security? appeared first on VerSprite.
Caught in 4K: The Gentlemen Files
A Russian-speaking Gentlemen ransomware affiliate called Azazel robbed two dozen victims across six countries, then double-crossed his own gang by publishing the loot on a private leak site and pocketing every dollar. CloudSEK traced 50TB of exposed infrastructure and a live AI-driven attack chain. Read how "Caught in 4K" cracked the operation. Authors : CloudSEK TRIAD
RDAP: Read Domain Data During an Investigation
Use RDAP events, statuses, and contacts to document a suspicious domain without misattributing an identity or claiming an unproven compromise.
[HIGH] GHSA-xxv7-2vv3-h682 (CVSS 7.7)
### Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and trigger.dev's control plane will send the alert there with no SSRF protection. The webhook URL is stored as an unvalidated string and is fetched directly from the webapp server, so a
Google Gemini could soon get full access to your Mac’s files, apps and the web
Google's Gemini could soon access any file on your macOS device, open apps, browse the web, and perform actions without asking for permission every time. [...]
Anthropic's super bug-hunting model Mythos is hardcore good at math, as latest vuln under attack shows
Exploitation attempts came from China-hosted IP, VulnCheck researcher says
DMARC XML Reports: Interpret Authentication Failures
Read aggregate DMARC reports, distinguish alignment from authentication, and prioritize anomalies by sending service and business impact.
Mat Bao Corporation
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Mat Bao Corporation was reported by one of those streams. HackNotice may also [...]
THAI LION AIR
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and THAI LION AIR was reported by one of those streams. HackNotice may also [...]
Marana Health Center
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and Marana Health Center was reported by one of those streams. HackNotice may also [...]
Why Cybersecurity Is Essential to Safety Assurance for Physical AI
Physical AI can become unsafe even without experiencing conventional failures. Safety assurance must account for cyber manipulation of the inputs, models, commands, and systems that shape robot behavior.
AI Pentesting Is Changing How Often You Can Test
AI pentesting uses AI agents to find weaknesses in systems you're authorized to test and prove which ones can be exploited. People still set the rules, make the judgment calls and run the formal tests regulators ask for. This guide covers how it works, where it fits with DORA, NIS2 and PCI DSS, and what has to happen after the finding. The post AI Pentesting Is Changing How Often You Can Test appeared first on Zynap.
Horse Armor on a Golden Retriever: Why Compliance Was Never the Cavalry
It’s not that the cavalry isn’t coming. It’s that it was never there in the first place. The “go-to” in cybersecurity during the dot-com era is still the “go-to” in... The post Horse Armor on a Golden Retriever: Why Compliance Was Never the Cavalry appeared first on VerSprite.
NIST IR 8587: Token Security Is Now a Non-Human Identity Problem
Passwords are no longer the only credentials security teams need to worry about after an endpoint is compromised. API tokens, OAuth credentials, personal access tokens, cloud credentials and service-account secrets can provide direct access to infrastructure, repositories, SaaS applications and AI platforms. Many of these credentials have their own lifecycle, which means resetting an employee […] The post NIST IR 8587: Token Security Is Now a Non-Human Identity Problem appeared first on Lu
110 vulnerabilities fixed in Google Pixel devices | Kaspersky official blog
Why Google Pixel gets its own security updates, what vulnerabilities they address, and which flaws Google fixed in September 2026.
The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Exposure Assessment
Blog The NetScaler Zero-Day Siege and Pre-Auth RCE Chains: Technical Analysis and Exposure Assessment On September 27, 2026, Citrix published bulletin CTX697096 with eight NetScaler ADC and Gateway vulnerabilities. Two of them, CVE-2026-88771 and CVE-2026-88772, were already being exploited before fixed builds existed. Both give remote code execution to an unauthenticated attacker. CISA added both […] The post The NetScaler Zero-Day Siege and Pre-Auth RCE Chains : Technical Analysis and Ex
FortiMail Zero-Day Under Active Exploitation
FortiMail Zero-Day Under Active Exploitation Fortinet has confirmed that CVE-2026-104286, a critical path traversal flaw in FortiMail, is being exploited in zero-day attacks, and CISA added it to the Known Exploited Vulnerabilities (KEV) catalog on the same day the advisory went live. Fixed builds are not yet available for most affected branches, so the primary […]
Threat Intelligence RoundUp: September
This blog series highlights the top threat intelligence articles that our readers found the most interesting this month. The post Threat Intelligence RoundUp: September appeared first on DarkOwl, LLC.
Investigating Secret Arms Networks Fueling Sudan's War
Tracing the Supply Lines: How Open-Source Intelligence and Link Analysis Uncovered Secret Arms Networks in Sudan This blog was written by Bashar Deeb from Lighthouse Reports. Lighthouse Reports is part of the Maltego Grants Program, and Bashar works at Lighthouse as an investigative journalist who specialises in Digital Investigations. Lighthouse Reports is an award-winning pioneer of collaborative journalism that works with Europe’s leading media to deliver deeply reported, public interes
The Complete Guide to Vendor Risk Assessment | UpGuard
Vendor risk assessment in 2026: a 3-step process for teams comparing UpGuard, BitSight, and SecurityScorecard. Scope, evidence, and continuous monitoring.
Anatomía de BraZetsu: Cómo los cibercriminales abastecen el ecosistema clandestino
Group-IB descubre BraZetsu, un nuevo malware para Windows basado en Python que funciona como un toolkit maestro para Initial Access Brokers y potencia un marketplace clandestino único, mejorado con IA, para comercializar objetivos comprometidos en Iberoamérica y Latinoamérica.
The hidden cost of security tool sprawl
Security tool sprawl slows teams down. State of Threat Management data shows how connected workflows help them act on known risks faster.
Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains
Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures. The post Osavul Lands $10 Million to Spot Hostile Intent Across Cyber, Physical Domains appeared first on SecurityWeek.
How a vulnerability scanner creates an illusion of protection | Kaspersky official blog
We break down the full vulnerability management cycle: from IT asset inventory and threat prioritization, to patch installation and verification of results.
Threat Intelligence Snapshot: Week 40, 2026
AI-Driven Cyberattack on Dutch Institute for Vulnerability Disclosure (DIVD) Automates Exploitation and Post-Compromise Activity | European Trade Unions and Civil Society Groups Tell European Governments To End All Contract With Palantir The post Threat Intelligence Snapshot: Week 40, 2026 appeared first on QuoIntelligence.
Industrialising AI-Assisted Development: What We Changed and Why
Over the past year the way we build software internally has changed shape. Code is […] L’article Industrialising AI-Assisted Development: What We Changed and Why est apparu en premier sur INTRINSEC.
Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization
Flashpoint was awarded U.S. Patent No. 12,705,360 for its Ransomware Risk model, which rates how closely new vulnerabilities match those used in ransomware attacks. The post Ransomware Risk Model: Flashpoint’s Patented Scoring Method to Inform Vulnerability Prioritization appeared first on Flashpoint.
TeamViewer Fixes Five Remote Access Flaws
TeamViewer Fixes Five Remote Access Flaws TeamViewer has patched five high-severity vulnerabilities in its Full Client and Host applications for Windows, Linux, and macOS. The flaws include local privilege escalation, po
What a Spanish Carding Tutorial Reveals About How Fraudsters Actually Think
By Assaf Morag, Cybersecurity Researcher A 2,200-word tutorial titled “Complete Guide to Carding in Spain (2026)” appeared on the Carder Market forum in April 2026. It is exactly what it sounds like: a beginner’s playbook for credit card fraud targeting the Spanish market, complete with entry fees, expected returns, and step-by-step operational workflows (we are […] The post What a Spanish Carding Tutorial Reveals About How Fraudsters Actually Think appeared first on Flar