Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,883 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams and identify vulnerabilities that t
Rapid AI growth is making banking systems complex and vulnerable to outages. Improving network telemetry helps banks prevent these system failures and protect the customer experience.
Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session.
Executive Summary MacSync Stealer is a family of macOS information stealers and remote-access stagers designed to evade detection and sold commercially under a malware-as-a-service (MaaS) model. In the attack chain, MacSync binaries are native stagers and multi-part exfiltration engines. Rather than standalone harvesters, the payloads are lightweight 64-bit Mach-O executables that detach silently from terminal […] The post MacSync: The Evasive macOS Stealer Exploiting ClickFix Lures appear
An Afternoon in East London with a Man Who Steals through the Internet for a Living He agreed to meet on the condition that we describe neither his face nor his voice. The introduction came through a source we’ve worked with before on stories about financial crime, passed along after weeks of encrypted back-and-forth on […]
Adverse media screening is now a board-level discipline. In our four-market research, 93% of financial services leaders said it is either critical or very important to their operations, and 90% plan to increase their investment in it over the next 12 months.   While intent is there, execution isn’t. Most firms still run periodic adverse media […] The post Screen smarter: 5 tips to deploy AI in adverse media screening appeared first on Ripjar.
A 2026 Gartner® Peer Insights™ Customers’ Choice for Adversarial Exposure Validation Picus is a Customer's Choice in the 2026 Gartner® Peer Insights™ Voice of the Customer for Adversarial Exposure Validation (AEV). 98% of reviewers would recommend Picus, the highest overall ratings amongst Customers' Choice vendors in the report. Read the full report to see how security teams rate the all-in-one platform built for AEV.
Every time a customer fills out a form on your website, signs up for a newsletter, or completes a purchase, they hand your business a piece of themselves. A name, an email address, a payment detail, sometimes something more sensitive like health or financial history. What you do with that information, and how well you […] The post What Is Privacy Protection and Why Is It Important for Businesses? appeared first on Seqrite Labs.
Your customers recognize your brand by its name, logo, website, mobile apps, and digital presence. Cybercriminals exploit this trust by creating fake domains, websites, and malicious apps that closely resemble legitimate brands. A fake website may differ from the real domain by just one character. A malicious mobile app may copy the company’s logo and […] The post How Can I Detect Fake Domains and Apps Impersonating My Brand appeared first on Seqrite Labs.
Group-IB's 2026 data shows ransomware accelerating across APAC. See where response plans fail, and the 5-pillar framework built to hold under pressure.
Qatar is racing toward a knowledge-based, fully digital economy. Smart infrastructure, cloud-first government services, a financial sector that's increasingly API-driven, and critical energy assets like QatarEnergy's LNG operations layering more connected OT/ICS systems every year. That pace of transformation makes Qatar an attractive target in the cyber realm, right now. Attackers don't need to compromise everything; they just need one high-value foothold, and Qatar's expanding digital footprin
How Investigative Capabilities Help Countries Strengthen AML/CFT Effectiveness and Move Off the FATF Grey List TL;DR Being placed on the FATF grey list (a.k.a. Jurisdictions under Increased Monitoring) puts a government under sustained pressure to prove it can fight financial crime. The grey list identifies countries with strategic deficiencies in their anti-money laundering (AML) and... The post You Can’t Legislate Your Way Off the FATF Grey List appeared first on Cognyte.
Blog 760,000 Leaked Logins and Five Spy Campaigns: Inside Pakistan’s Worst Cyber Year Yet Pakistan’s government portals, universities, and hospitals spent 2026 under near-constant pressure from state-backed spies on one side and profit-driven criminals on the other. ThreatMon tracked all of it for its Pakistan Cyber Threat Landscape Report 2026, and the numbers underneath the […] The post 760,000 Leaked Logins and Five Spy Campaigns: Inside Pakistan’s Worst Cyber Year Yet
In this article we point out weaknesses in a live ClickFix operator's infrastructure. We showcase a method to preemptively detect threats by monitoring certain points of it.
CloudSEK researchers uncovered BigBear 2.0, a global Microsoft 365 phishing-as-a-service operation targeting hundreds of organizations across 40+ countries. The investigation exposed the attacker’s admin panel, affiliate network, phishing infrastructure, and thousands of stolen credentials and session cookies, revealing how modern AiTM attacks can hijack authenticated sessions even after MFA. Authors :
DPULSE 2.0.1 now includes Lunar Domain Exposure directly inside its domain OSINT reports, adding 12 months of infostealer and data-breach exposure data to its existing reconnaissance workflow. A domain scan can tell you a lot about an organization: its infrastructure, subdomains, IP addresses, technologies, open services, certificates and vulnerabilities. What it usually cannot tell you […] The post DPULSE Integrates Lunar Domain Exposure API for Infostealer and Breach Intelligence appeare
The volume of published incident research involving agentic AI is increasing, and the analysis that follows each report tends to concentrate on the same attribute: speed. The recent investigation from Unit 42, the threat intelligence and incident response group at Palo Alto Networks, is a representative case. A human operator delegated tactical execution to frontier [...] The post Dissecting Attacks Is Only Valuable If It Informs Controls: What the Unit 42 agentic AI investigation should change
Researchers have found a way to hack Boeing 737 systems with a device that costs less than US$100. Here’s how the Bus Driver attack works, and how realistic a threat it actually is.
Six hours. That's the incident notification window under the UAE's Information Assurance Standard v2. Once a breach is detected, the framework requires incident notifications within 6 hours of detection, alongside quarterly compliance updates and annual maturity assessments. Saudi Arabia's regulators aren't far behind — SAMA's cybersecurity framework and the Kingdom's PDPL both converge on a 72-hour notification standard, and the NCA's Essential Cybersecurity Controls point organizations toward
An AI agent holds credentials, calls APIs and acts on systems you answer for, whether they're yours or a client's. Learn where LLM security ends and AI agent security starts, which actions need a human gate, and what to do when the agent itself is the incident. The post AI Agent Security: A Guide for Security Teams and MSSPs appeared first on Zynap.
Fusion is a capability you mature into, not a team you hire. Here is the honest maturity path, the metrics that fund it, and the on-ramp that costs no headcount, startable this quarter.
Secure SDLC frameworks such as BSIMM and OWASP SAMM describe which security activities organizations perform, but say comparatively little about how to prioritize among findings once those activities are running.... The post How PASTA Threat Modeling Supports Secure SDLC appeared first on VerSprite, Threat Modeling and Pentesting Services.
Security teams do not generally suffer from a shortage of identified findings; they suffer from an inability to tell, among many findings, which represent credible attack vectors worth acting on.... The post Advanced Threat Modeling: Methods That Find Real Attack Vectors appeared first on VerSprite, Threat Modeling and Pentesting Services.
The DomainTools App for Splunk 5.8 adds IrisQL search and live IP Risk and IP Hotlist feeds, so you can expose phishing campaigns and block risky IPs faster.
China Nexus Quartermaster Infrastructure Enables Espionage Against Research, Defense, Energy, Healthcare and Financial Networks | Germany Says Russia Responsible for Drone Attack at Leipzig Airport The post Threat Intelligence Snapshot: Week 36, 2026 appeared first on QuoIntelligence.
Shadow IT can increase business risk, but NETSCOUT Smart Data can help IT organizations detect unauthorized applications thanks to scalable visibility.
Security teams need threat intelligence that helps them move quickly from a suspicious indicator to the context, evidence, and next action. ANY.RUN’s August updates focus on making that process faster and more practical, while expanding detection coverage across host, file, and network activity. The release brings a more connected Threat Intelligence Lookup experience, broader threat […] The post Release Notes: Faster TI Investigations, Fresh Threat Research, and 650+ Threat Coverage Updat
A month of CISA KEV additions read against our CVE catalog: 18 of 26 exploited vulnerabilities score under 1% on EPSS today, 4 had no CVSS score when CISA added them, and CISA gave 18 of them a three-day deadline. The numbers, the method, and what they mean for a patch queue.
Supply chain attacks in 2026 are no longer an edge-case risk buried in a vendor questionnaire — they are a primary breach vector that regulators, incident responders, and CISOs now treat as a first-order threat. Verizon's 2026 Data Breach Investigations Report found third-party involvement in 48% of breaches, up 60% year over year, following the 2025 edition, which already recorded a jump from 15% to 30%. Every vendor integration, every open-source dependency, and every managed file transfer too
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: August 29, 2026 ~ September 4, 2026 Antiy AVL SDK anti-virus engine released a total of […]
When a machine gets infected by an infostealer like LummaC2 or Vidar, the malware leaves behind a specific set of output folders. Most threat actors focus on the easy, structured targets: browser cookies, saved passwords pulled from SQLite databases, and crypto wallet extensions. Passwords live in predictable places on an operating system, making them simple […] The post The Token Haystack: Parsing and Verifying Exposed Tokens in Stealer Logs appeared first on Lunar Cyber.
This blog provides a deep-dive into the phishing kit created by Chenlun known as the Outsider Phishing Kit. It is a well established kit in the Chinese community with over 267 ready-made phishing templates targeting over 54 countries worldwide.
CVE-2026-35029 (CVSS 8.7) lets authenticated LiteLLM users rewrite /config/update, read files via /get_image, and take over the AI gateway. Patch 1.83.0+.
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. Learn how attackers move from social engineering to lateral movement using legitimate tools, and how Microsoft Defender helps detect and disrupt the activity. The post Impersonating IT support: how threat actors turn a remote session into enterprise-wide access appeared first on Microsoft S
OpenAI disclosed on August 26, 2026, that its AI models circumvented security controls during internal cybersecurity evaluations in July and compromised parts of OpenAI's research infrastructure and... The post OpenAI AI Agents Escape Testing Environment and Compromise Hugging Face appeared first on Blackwired.com.
Threat modeling for financial institutions has traditionally been conducted as a periodic, manual exercise scoped around individual applications. This paper examines whether that model remains defensible given current breach-cost and... The post Threat Modeling for Financial Institutions appeared first on VerSprite, Threat Modeling and Pentesting Services.
