Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,858 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Key Takeaways CVE-2026-94127 is an unauthenticated heap buffer overflow in F5 BIG-IP APM enabling remote code execution. The OAuth UserInfo handler allocates 0x4100 bytes but copies an attacker-controlled Authorization header without enforcing that limit. The overflow corrupts a neighboring callback pointer, enabling a stack pivot and a return-oriented programming chain. The chain appends a command to tmm.finish, which Bash runs after TMM crashes, bypassing SELinux restrictions. The Picus Platfo
Multi-factor authentication makes stolen passwords harder to use. But attackers have another option: steal the session that was created after the user completed authentication. When a user signs in to email, a SaaS application, a cloud console or another web service, the application usually creates a session cookie or token. That artifact tells the service […] The post Session Hijacking: How Stolen Cookies Bypass MFA and How to Stop It appeared first on Lunar Cyber.
Prove You’re Ready for Mythos-Class AI Attacks Mythos-class AI has compressed the time from vulnerability disclosure to working exploit from weeks to hours. Security teams need a faster way to determine what is actually exploitable and whether their defenses can stop it.
Operation Master: Deconstructing a Multi-Tiered Intrusion and Monetization Pipeline SOCRadar Threat Research Unit (STRU) has uncovered an end-to-end cybercrime operation dubbed Operation Master, in which a threat actor c
By Sukant Kumar, Cybersecurity Researcher Most credential stealers stop at theft, but TWEAKOS keeps going: it steals the account, prices it, discounts it 5% a day until someone buys it, and settles the sale in Telegram Stars, all inside the same Telegram bot that received the stolen data in the first place. Theft, inventory, and […] The post TWEAKOS Uncovered: A Telegram-Driven Stealer and C2 Ecosystem for Discord and Telegram Tokens appeared first on Flare | Identity First Threat Intellig
NETSCOUT’s Omnis Streamer now includes a built-in MCP server, giving AI agents and LLMs real-time access to Smart Data for AI workflows and autonomous troubleshooting.
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that's dressed up as a system service. The delivered app has the package name "com.corp.mdm" Corp MDM
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar Your analysts start the morning in their threat intelligence platform, working the feeds, cases, and detections in front of them. What they
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127 , a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerabili
Compare the top 10 CNAPP vendors for enterprises, including Wiz, CrowdStrike, and Fidelis Halo®, with a full feature and fit comparison. The post Top CNAPP Vendors and Which One Should You Pick appeared first on Fidelis Security.
New Android Trojan RemControl Targets Retail Bank Customers in Europe and Canada | Poland Suspects Fire at Starlink Station Was Act of Sabotage The post Threat Intelligence Snapshot: Week 39, 2026 appeared first on QuoIntelligence.
Revolut Customer Data Breach Exposes Sensitive Personal and Financial Information After Attacker Impersonates Government Agency | Suspected Sabotage Disrupts Dutch Trains, After Similar Incident in France Causes Derailment The post Threat Intelligence Snapshot: Week 38, 2026 appeared first on QuoIntelligence.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into encryption. The post What is Encryption? appeared first on DarkOwl, LLC.
Blog Tracking Nightmare Eclipse: Exploits, PoCs, and Endpoint Security Risks TL;DR / Key Findings Identity: Abdelhamid Naceri’s vulnerability research predates the Nightmare Eclipse releases. Earlier disclosures identify him as halov and halove23; his 2026 proof-of-concept projects are published through MSNightmare. Employment dispute: Naceri links his public disclosures to his dispute with Microsoft. His account distinguishes […] The post Tracking Nightmare Eclipse: Exploits, PoCs, and En
Google fait passer Chrome à la version 154 sur Windows, Mac et Linux. Cette mise à jour comble 108 failles de sécurité, dont 11 critiques. Aucune n'était exploitée au moment de la publication du correctif.
See if CrowdSec’s IP blocking or Suricata’s deep inspection fits your Linux server. Avoid alert fatigue with the right enforcement strategy.
One employee reaches a phishing page. The tab closes, the domain is blocked for every browser in the company, and the targeted password is already being reset. The new Group-IB Browser Agent brings the corporate browser under XDR coverage, checking every page against predictive Threat Intelligence in real time.
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: September 19, 2026 ~ September 25, 2026 Antiy AVL SDK anti-virus engine released a total of […]
Most threat modeling platforms produce technical findings. Healthcare application security teams need something more specific: a documented, defensible risk assessment that connects those findings to protected health information, clinical impact,... The post Fork: A Threat Modeling Platform for Healthcare Application Security appeared first on VerSprite.
Google confirmed on September 18, 2026, that a Gemini AI model accessed the systems of three real companies during a cybersecurity evaluation conducted in May. The testing was performed by... The post Google Confirms Gemini AI Breached Three Firms During Security Testing appeared first on Blackwired.com.
Analysis of a publicly accessible server exposed a significant portion of the infrastructure associated with threat actors operating under the identities Blackhatsect0r and DXQRTXX. The post Blackhatsect0r & DXQRTXX Global Operations appeared first on ThreatMon.
By Adrian Cheek, Senior Cybercrime Researcher To reach a hospital’s medical images the hard way, you need a DICOM (Digital Imaging and Communications in Medicine) client and some knowledge of a protocol designed in the 1980s for machines that were never supposed to face the internet. To reach a growing number of them the easy […] The post 40% of Exposed Medical Image Consoles Answer without a Password appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility
Find NETSCOUT at SCTE TechExpo26, Booth B430, from September 29 through October 1. See firsthand how curated, multidomain NETSCOUT Smart Data powers smarter operations, strengthens security, and protects network and service availability.
NINA is live for every Zynap customer. Our multi-agent AI engine investigates the threats facing your organization in real time, tells you what to patch first and designs, builds and repairs the workflows that respond. It works with the tools you already run, the agents you build and the models you choose, and you decide what runs on its own. The post Inside NINA: Zynap’s Multi-Agent AI Engine appeared first on Zynap.
Verification began in 2009 as a fix for impersonation. A platform confirmed an account was real and marked it. That is still what most people assume the badge means, and it is why a fake profile carrying your firm’s name or your CEO’s headshot gets the benefit of the doubt when it shows up in […]
Ransomware attacks remain the most damaging cyber threat facing the European Union, with operators continuing to disrupt organizations... The post ENISA Threat Landscape 2026 highlights ransomware, vulnerability exploitation, AI-enabled attacks across EU organizations appeared first on Industrial Cyber.
In May, an Israeli security firm called Irregular put Google’s Gemini through a capture-the-flag exercise, testing how well the model could find its way through systems belonging to fictional companies. Perhaps unsurprisingly, Gemini didn’t stay inside the exercise. Google has confirmed that, through an unintended connection to the open internet, the model reached three real […]
Group-IB uncovers RemControl, a new Android banking trojan targeting European, Middle Eastern and Canadian banks, whose criminal infrastructure was unknowingly built by AI.
In this episode Cyber threats don’t stay online—and insider threats don’t stop at the employee roster. Former FBI Deputy Director Paul Abbate joins Fred Burton to explore what these shifting boundaries mean for corporate security. Drawing on nearly three decades at the FBI and his advisory work at FTI Consulting, Paul discusses cyber-physical convergence, the… The post Evolving Insider Threats and Cyber-Physical Convergence with Former FBI Deputy Director Paul Abbate appeared first on Onti
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first “LLM-as-C2” architecture that can fully automate the command-and-control (C2) chain. Dubbed CLOSEDQUORUM, the malware binary relies on a panel of large language model (LLM) judges to map and execute the
Every large organization generates a constant stream of security-relevant information: a protest forming near an office, a threatening social media post aimed at an executive, a supply route disrupted by severe weather, an access badge reported stolen. A global security operations center, or GSOC, is the function that takes in all of that information, figures… The post Global Security Operations Center (GSOC): A Complete Introduction appeared first on Ontic.
In this post, Flashpoint analysts examine Process Parameter Poisoning—a novel EDR evasion technique we validated in Rust—and detail how abusing undocumented process parameters allows attackers to inject code and bypass standard security products. The post Process Parameter Poisoning: Inside a Novel EDR Evasion Technique appeared first on Flashpoint.
Threat actors stole the contents of 170 private repositories using an OAuth token stolen from a former employee's computer through the TanStack npm supply chain attack.
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
Check Point Software released emergency hotfixes to address a critical Security Management Server vulnerability that could let attackers run arbitrary scripts. [...]
