Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,884 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Spamhaus DROP and SBL are the standard for mail and network DNSBL blocking. isMalicious adds REST enrichment, URL scoring, CVE context, and STIX feeds. Most mature stacks use both at different layers.
Mythos readiness is a security program's proven ability to withstand attacks weaponized at the speed of frontier AI models such as Anthropic's Claude Mythos, where disclosure-to-exploit is measured in hours rather than weeks. A Mythos-ready organization can show which controls hold, which do not, and what evidence backs each decision to patch, mitigate, monitor, or accept.
Blog The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 Every year, a large share of breaches starts with an attacker exploiting a vulnerability in software the target is running, and it is now one of the most common ways into a network. What follows depends on where the flaw sits. A vulnerable VPN […] The post The Top 10 Vulnerabilities Threat Actors Exploited Most in 2026 appeared first on ThreatMon.
A threat actor leaked Stripe customer data and 662 valid API keys on pwnforums. See how iCOUNTER helps identify third-party risk in real time.
A Siren sensor caught a command-injection attempt against a fake admin endpoint, sent under a spoofed GPTBot and Amazonbot User-Agent. Here's what that costs an attacker, why it works, and how to detect it without trusting the header at all.
Rover caught the public CVE-2025-0108 exploit path in Siren telemetry. Here is how one double-encoded traversal crosses Nginx and Apache to bypass PAN-OS management authentication.
The post Ontic’s Connected Lunch Exchange appeared first on Ontic.
By Assaf Morag, Cybersecurity Researcher As competition in the underground phishing market increases, so does the quality of the products and services offerings, particularly among the Phishing as a Service (PhaaS) category. EvilTokens is completely reshaping how PhaaS affiliate programs operate: rather than offering initial access alone, it also provides malicious analytics services informed by […] The post What is EvilTokens?: The PhaaS Platform That Tells Attackers What to Do After They
Replace long-lived cloud secrets with GitHub Actions OIDC while constraining claims, permissions, environments, reusable workflows, and incident response.
Turn Kubernetes audit logs into detections for privilege abuse, secret access, persistence, risky exec, and control-plane compromise.
Exposing AnonyMousKIT: AI-Powered PhaaS Supply Chain The SOCRadar Threat Research Unit (STRU) has conducted an "inside-out" analysis of AnonyMousKIT , an AI-powered Phishing-as-a-Service (PhaaS) ecosystem specifically en
Recently, Silent Push researchers ran a dangling DNS takeover simulation to show how easily forgotten infrastructure becomes an entry point. The full findings are now live in our latest research report. Dangling DNS records get left behind when infrastructure changes and nobody cleans up the pointer. Attackers already scan for these gaps, and they are […] The post Danglegeddon: The Full Research Report Is Now Available appeared first on Silent Push.
Blog The Rise and Fall of BreachForums: A Cybercrime Empire Collapses Quick Summary: BreachForums emerged in March 2022 as RaidForums’ successor and became the world’s dominant stolen data marketplace. Founded by Conor Fitzpatrick (pompompurin), it attracted major threat actors including ShinyHunters and IntelBroker. The platform collapsed between 2023-2026 through cascading administrator arrests, FBI seizures, a […] The post The Rise and Fall of BreachForums: A Cybercrime Empi
Imobiliare.ro, Klark.ai, Fortinet VPN, E-Commerce Skimming, and Solimut SQLi SOCRadar Dark Web Team identified several new underground posts involving alleged database leaks, exposed remote access, and access-for-sale ac
Cisco Crosswork, Secure Workload CVEs Patched Cisco released security updates for Cisco Crosswork and Cisco Secure Workload , addressing nine vulnerabilities across the two product families. The updates include five maxi
How Cybercriminals Are Repackaging Infostealer Data Over the last year, the underground economy has undergone a significant transformation. Cybercriminals are no longer focused on distributing massive collections of raw infostealer logs, they are increasingly investing time in organizing and enriching stolen information into service-specific compilations. These datasets are no longer random collections of credentials extracted […]
John Watters and Roman Sannikov break down SharePoint exploits, Gunra ransomware, and identity-driven attacks across recent cybersecurity coverage.
Financial institutions face a critical security gap. Discover why deep OS-level visibility is essential to establish device trust and protect sensitive data.
The Russo–Ukrainian War, characterized by the widespread use of fixed-wing loitering munitions and weaponized multirotor drones for strike missions and a wide range of other operational tasks, has led to numerous developments and adaptations of weapons and munitions to enable...
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
By Flare Research In July 2026, Hugging Face was breached by an autonomous agent swarm that had broken out of an OpenAI Sandbox and was attempting to succeed at ExploitGym, a cyber benchmark. Based on the chain of thought, the agents believed that Hugging Face contained answers to challenges that they weren’t able to complete […] The post The Age of Autonomous Attacks is Here appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime.
Kaspersky experts have discovered a trojan that infects car head units and makes them part of a botnet. Here’s how the infection works.
How Did BFSI Perform in Prevention and Detection in 2026? BFSI prevention effectiveness stands at 67% in thePicus Blue Report 2026, down nine points from the 76% recorded in the previous edition. Financial institutions logged 65% of simulated attacks, meaning the attacker behavior was recorded somewhere in their telemetry, but alerted on only 16%, so fewer than one in six attacks reached a security team as an alert. This year's figures come from more than 338 million attack simulations that Picu
Ransom Busters Presents Itself as a Ransomware Recovery Company Amid Suspected Links to Ransomware Affiliates | Estonia PM Says Arson Attack on Defense Contractor May Be Linked to Russia The post Threat Intelligence Snapshot: Week 34, 2026 appeared first on QuoIntelligence.
On August 18, the “2026 IDC China Artificial Intelligence and Data Summit,” hosted by IDC, was grandly held in Beijing, bringing together numerous industry elites and technology leaders. With its solid technical foundation and mature, proven industry solutions in AI security, NSFOCUS was named to the “2026 IDC China AI Top 50” list, joining the […] The post NSFOCUS Named to the 2026 IDC China AI Top 50 appeared first on NSFOCUS.
Ransomware rarely appears out of nowhere. Before encryption, extortion, or data theft begins, attackers often spend time establishing access, stealing credentials, moving laterally, and identifying valuable systems. These activities occur during the ransomware pre-execution phase, when malicious activity may be difficult to distinguish from legitimate administration. For security teams, understanding ransomware attack vectors, ransomware initial access methods, and how ransomware evades detectio
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: August 15, 2026 ~ August 21, 2026 Antiy AVL SDK anti-virus engine released a total of […]
Artificial intelligence is not creating an entirely new cybersecurity problem. It is accelerating the old ones. Attackers still want access, persistence, privilege, money, influence, and operational disruption. What has changed... The post AI-Powered Attacks, Autonomous Defense, and the Fragility of Modern Digital Supply Chains appeared first on VerSprite, Threat Modeling and Pentesting Services.
A vendor's security can change the day after you assess them. This guide covers what Third-Party Risk Management (TPRM) is, how continuous exposure monitoring keeps up with that, and what it means for security teams and MSSPs, especially in regulated industries. The post Third-Party Risk Management (TPRM): A Security Guide appeared first on Zynap.
Flashpoint’s monthly analysis of insider threat recruitment, illicit access advertising, and threat actor activity targeting enterprise environments. The post Insider Threat Report: Dark Web Recruitment & Access Trends appeared first on Flashpoint.
BreachForums was one of the most influential English-language cybercrime forums of the last decade, serving as a major marketplace for stolen data, initial access, cybercrime services, and collaboration between threat actors. The post What Happened to BreachForums appeared first on ThreatMon.
NETSCOUT named a Leader and Ace Performer in the QKS Group Spark Matrix™ Distributed Denial of Service (DDoS) Mitigation based on technology and customer impact.
Silent Push preemptive cyber defense analysts explored the full lifecycle of proxy networks, focusing on PEER2PROFIT and ASTROPROXY in our latest research. The post How Peer2Profit and Astroproxy Turn Your Bandwidth Into Someone Else's Product appeared first on Silent Push.
Payment was authorised. The transaction was, technically, legitimate. It was also part of a $187 million criminal network, and the payment was the worst place to fight it.
Overview On August 10, 2026, MATS Research, the ELLIS Institute Tübingen, the Max Planck Institute for Intelligent Systems, and other institutions jointly published the paper Stealing Reasoning Traces from Proprietary LLM APIs. The research reveals a common architectural flaw in the reasoning model APIs of three major AI providers, Anthropic, OpenAI, and Google, which allows […] The post AI Security Incident Case: Encrypted Reasoning Blocks of Proprietary LLMs Can Be Stolen via Cross-Model
CloudSEK’s BRIDGEHEAD investigation exposes a 40-package npm typosquatting campaign that abuses WSL to reach Windows hosts and deploy a concealed Rust-based stealer. The malware targets cryptocurrency wallets, browser credentials, cookies and Telegram sessions, while executing largely in memory and using public infrastructure for reconnaissance and exfiltration, making detection and takedown significantly harder. Authors : Vikas Kundu
At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google's AI into its brain, and jailbroke it by telling it - with a completely straight face - that it was a Pokemon. What followed involved a wall, a blue ice chest, and anyone in the room wearing white shoes. Oh, and did we mention you can buy a flamethrower attachment? Meanwhile, in Salzburg, 280 gold statuettes of Mozart have vanished from the streets. This has happened to the same artist before. Organi
A threat actor operating under the alias "TheHatman" has claimed to have stolen approximately 3.64 million employee and tenant records from the Azure and Entra environments of multiple major... The post Massive Azure Credential Theft Campaign Targets Fortune 500 Companies appeared first on Blackwired.com.