0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

1,884 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Strong fundamentals make next-gen security possible

Risk management has always been a difficult job, but the current threat landscape has taken the challenge to a new level. I’ve spent years leading cybersecurity efforts at large enterprises, including Hyatt and United Airlines, and in that time I’ve seen cybercriminals grow increasingly creative, leveraging innovative tactics and technology to further their efforts. I’ve also seen security professionals make the mistake of assuming that responding to those new and emerging tactics requires shiny

Threat LandscapeIndustry coverage
New capability

Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20260919)

Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update                            Statistical period: September 12, 2026 ~ September 18, 2026 Antiy AVL SDK

Antiy LabsVendor blog
Announcement

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly subscription. Some attacks use new tricks. Others just reuse what was already lying around. Both work often enough. So the threat landscape is not getting cleaner. It is just

Threat LandscapeIndustry coverage
Incident

CVE-2026-58704: Google Pixel Modem Zero-Day Exploited in Targeted Attacks

Google has released security updates for a high-severity zero-day vulnerability affecting the cellular modem in Pixel devices after finding signs that the flaw is being used in limited, targeted attacks. Tracked as CVE-2026-58704 and scored 8.0 under CVSS 3.1, the issue can allow an attacker to bypass permission checks and escalate privileges without requiring any […] The post CVE-2026-58704: Google Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SOC Prime.

GoogleIndustry coverage
Announcement

Self-modifying AI agents expose a blind spot in enterprise security

As debate over AI safety intensifies, new research is drawing attention to a more immediate risk for enterprises: AI agents that can alter the models they rely on while carrying out routine tasks. Researchers at AI security firm Irregular asked a coding agent to solve a software maintenance problem involving an application built on a local AI model that was returning incorrect answers. Instead of limiting its changes to the application, the agent fine-tuned the open-weight model it used — a mode

IrregularIndustry coverage
Announcement

Why Autonomous Endpoint Management Depends on Trusted Data

Why Autonomous Endpoint Management Depends on Trusted Data Back to Basics: AEM Fundamentals | Part 1 of 5 The market is rushing toward autonomous endpoint management. But most of the conversation skips past the infrastructure and jumps straight to the outcomes. The market is loud, the promises are bold, and the buyers who got burned before are now the ones asking the hardest questions. They don't need another feature list. They need to know what's actually underneath the claims. IT teams have he

IvantiVendor blog
Announcement

Xan-RAT A Closer Look at Its Capabilities and Inner Workings

Blog Xan-RAT: A Closer Look at Its Capabilities and Inner Workings Xan-RAT, also known as Cold Xan RAT, is a Quasar-based remote access trojan with capabilities for remote control, credential theft, surveillance, and data collection. Its source code is publicly available, making it possible to examine how these capabilities are implemented and how the malware […] The post Xan-RAT A Closer Look at Its Capabilities and Inner Workings appeared first on ThreatMon.

ThreatMonVendor blog
Announcement

ISS World Asia Recap: Pushing the Boundaries of OSINT

DarkOwl recap and insights from ISS World Asia on AI-powered investigation platforms and their impact on OSINT and law enforcement. The post ISS World Asia Recap: Pushing the Boundaries of OSINT appeared first on DarkOwl, LLC.

DarkOwlVendor blog
Announcement

Why APAC Enterprises Need Real-Time Threat Intelligence as Singapore, Malaysia, and Thailand Tighten Cyber Compliance in 2026

Cybersecurity compliance APAC 2026 has moved from guidance to enforcement across three of Southeast Asia's largest economies, almost in step. Singapore's Cyber Security Agency issued an updated Cybersecurity Code of Practice 2026 for Critical Information Infrastructure on 29 July 2026. Malaysia's Cyber Security Act 2024 has been active since August 2024, with NACSA now well into audits and incident-reporting enforcement. Thailand's Cybersecurity Act NCSA mandate now covers new cloud and website

CybleVendor blog
Announcement

LLMjacking: When Stolen AI Tokens Turn Your Account Into Someone Else’s Compute

An attacker doesn’t need to hack an AI model to steal its value. Sometimes, all they need is the API key. LLMjacking is the unauthorized use of large language models through stolen credentials, compromised cloud accounts, exposed API keys or unprotected model infrastructure. Instead of paying for access to expensive AI models and compute, attackers […] The post LLMjacking: When Stolen AI Tokens Turn Your Account Into Someone Else’s Compute appeared first on Lunar Cyber.

Webz.ioVendor blog
Announcement

Enterprise Threat Intelligence Buying Guide: How to Choose the Right Solution

Choosing an enterprise threat intelligence solution is about more than just data volume or integrations. The right provider should deliver relevant intelligence, fit existing workflows, and help security teams investigate threats faster. While SOCs may prioritize rapid investigation and enrichment at scale, MSSPs may focus more on multi-tenancy and customer separation. This enterprise threat intelligence […] The post Enterprise Threat Intelligence Buying Guide: How to Choose the Right Solu

Threat IntelligenceIndustry coverage
Announcement

HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack

Group-IB Threat Intelligence analyzes HEAVYGRAM, a Telegram-based Windows backdoor attributed with moderate confidence to the Iran-linked threat actor Handala Hack. Active since Fall 2023, it has been used to surveil Iranian dissidents, journalists and government opponents, enabling remote command execution, data exfiltration, and persistence over Telegram command-and-control.

Group IBVendor blog
Announcement

Top 5 Fraud Prevention Platforms for Banks and Fintechs in 2026

Most fraud platforms only see a threat once it becomes a transaction. This guide compares the top 5 fraud prevention platforms for banks and fintechs in 2026, including Group-IB, Feedzai, Sift, DataVisor, and Kount, and what actually separates them.

Group IBVendor blog
Announcement

Managed Detection and Response Providers for Healthcare and Fintech

Managed detection and response is typically marketed on the strength of continuous, 24×7 coverage, but the actual case for that coverage depends heavily on what kind of threat is being... The post Managed Detection and Response Providers for Healthcare and Fintech appeared first on VerSprite.

VerSpriteVendor blog
Announcement

It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?

It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation. As many leaders in the global finan

IvantiVendor blog
Announcement

The OSINT Framework Every Agency Needs: A Four-Pillar Model for Law Enforcement and Intelligence Agencies

TL;DR An OSINT framework is the operating model an agency uses to turn publicly available information into valuable intelligence. It defines which sources an agency analyzes, what technology is used, how analysts decipher the results and how the function is staffed and governed. This ultimately impacts how much value it provides to an agency’s investigations... The post The OSINT Framework Every Agency Needs: A Four-Pillar Model for Law Enforcement and Intelligence Agencies appeared first on Cog

CognyteVendor blog
Announcement

Threat Intelligence Alone Won't Close the Exploitation Gap

A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can be weaponized against a real target before most security teams have triaged the alert. Attackers are combining that kind of intelligence with AI-assisted exploitation to accelerate the path from exposure to breach faster than most security programs are built to react.

Threat IntelligenceIndustry coverage
Announcement

ZeroFox vs. Doppel: Comparing Two Approaches to Takedown and Disruption

Pull up two external threat platform datasheets side by side and the coverage lists look nearly identical. Domains, social, dark web, app stores, paid ads, executive exposure. Every serious vendor in this category monitors all of it, which means the feature grid stops being useful about ten minutes into an evaluation. The comparison that decides […]

ZeroFoxVendor blog
Announcement

What 747,485 Employee Credential Exposures Reveal About Corporate Cyber Risk

A company does not have to suffer a publicly disclosed breach for its credentials to end up in the hands of attackers. Infostealer malware, breach databases and credential dumps continuously expose employee passwords, browser sessions and other access data outside the corporate perimeter. To see what this looks like in practice, Lunar Cyber analyzed public […] The post What 747,485 Employee Credential Exposures Reveal About Corporate Cyber Risk appeared first on Lunar Cyber.

Webz.ioVendor blog