Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,884 matching stories — in Threat Intelligence — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
### Summary OpenClaw exec approvals could show a shortened command in the approval UI while keeping the full original command for execution. For very long commands, an approver could see and approve a benign-looking prefix while a hidden suffix remained part of the command that would run after appr
## Impact The Edit Fields (Set) node assigned output fields through a dot-notation path setter without restricting the field name, so an authenticated user could name a field after an inherited built-in method path and corrupt a shared global in the main Node.js process. Because that global was use
### Impact In versions 0.6.0 and earlier of astral-tokio-tar, the `unpack_in` API could inadvertently modify the permissions of external (i.e. non-archive) directories outside of the archive. An attacker could use this to contrite a tar archive that maliciously changes directory permissions outside
AI agents deploy malware when given conflicting goals: Anthropic research  adgully.com
Anthropic’s Claude Agents Engage in Simulated Turf War  StartupHub.ai
MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control  SC Media
The Americas carried the heaviest ransomware burden of any region on the planet in the first half of 2026. According to Cyble Research and Intelligence Labs (CRIL), North and South America combined experienced 2,188 documented ransomware attacks between January and June 2026. That single figure — 2,188 attacks — represents more than 57% of the 3,836 ransomware incidents CRIL tracked worldwide, making the Americas the undisputed center of gravity for global ransomware operations. But the Americas
Robot manufacturers face distinct FCC Covered List, the EU Cyber Resilience Act (CRA), and IEC 62443 requirements. Learn how shared security workflows can support readiness across all three.
From Blackwater to Cyber-Privateers: When States Outsource Force On August 12, 2026, President Donald Trump signed a National Security Presidential Memorandum titled " Expanding Capabilities to Combat Transnational Cyber
I spent this summer as a GSoC contributor on GreedyBear under the mentorship of Tim Leonhard, refactoring its hardcoded dashboard into a configuration-driven widget system with a drag-and-drop admin editor and backend persistence.
Mentor: Tim Leonhard
Organization: The Honeynet Project
Project: GreedyBear: Dashboard Modularization
GSoC Proposal
The goal of my project was to modularize the GreedyBear dashboard.
Before this project, every widget - its type, data source, pos
Search for a Roblox executor, Minecraft mod, or game cheat and the security story appears familiar. A player downloads a fake tool, malware runs, and the attacker steals a Discord account, browser cookies, passwords, or cryptocurrency. Recent campaigns reveal a more interesting system underneath that sequence. The newest game-focused stealers increasingly inspect the victim after […] The post Roblox, Minecraft, and Game-Cheat Stealers: How Fake Executors Turn Gamers Into High-Value Identit
IPQS scores whether a signup is fraudulent. isMalicious scores whether infrastructure is malicious. The two get compared constantly because both return a number about an IP address — and they answer different questions.
A 90-day plan for third-party risk transformation: tier vendors, build detection and workflows, then prove exposure is falling with 5 key metrics.
What is corporate security and how does it fit into both physical and cybersecurity? Corporate security is the function responsible for protecting an organization’s people, physical assets, information, and operations from threats that originate both inside and outside the business. For large enterprises, that mandate spans everything from the guard at the front desk to… The post Corporate Security: A Complete Guide (2026) appeared first on Ontic.
The post From Online Activism to Physical Disruption: How Security Teams Can Spot Escalating Risk appeared first on Ontic.
Cyber Risk Quantification measures your cyber risk in money, so your security posture becomes a single number instead of a subjective rating. CRQ is a figure your board can fund decisions on and your clients can hold you to, and one that should fall as your security improves. This guide explains what it is, how it works, and how to bring it down, for security leaders at enterprises and MSSPs. The post Cyber Risk Quantification and Security Posture, Explained appeared first on Zynap.
Why — and for whom — artificial intelligence is now churning out books, how they end up on Amazon, and what risks this poses for readers.
In this post, we preview the critical findings of Flashpoint’s Global Threat Intelligence Report: 2026 Midyear Edition. The post Navigating AI-Driven Cyber Threats: Insights from Flashpoint’s 2026 GTIR Midyear Edition appeared first on Flashpoint.
Threat Actor Abuses Salesforce and ServiceNow Guest Portals at Telecommunications, Financial, and Public Sector Organizations | Germany Warns of Daily Hybrid Warfare After Suspected Drone Attack The post Threat Intelligence Snapshot: Week 33, 2026 appeared first on QuoIntelligence.
Abstract NSFOCUS has now completed a second CyberGym Level 1 evaluation of NSFOCUS AI, this time using GLM-5.3 inference. The new run solved 1,432 of 1,507 tasks, achieving a strict Pass@1 of 95.02% and extending the earlier GLM-5.2 evaluation reported below. In the earlier GLM-5.2 evaluation, NSFOCUS’s self-developed intelligent offensive-and-defensive system NSFOCUS AI achieved a […] The post NSFOCUS AI CyberGym Level 1 Technical Report appeared first on NSFOCUS.
Cybersecurity is a business risk, not just an IT issue. Learn why leadership, awareness, and proactive measures matter. The post Why Cybersecurity Is a Business Issue, Not Just an IT issue! appeared first on DarkOwl, LLC.
MISP is where you store and share indicators. isMalicious is where indicators come from. Teams searching for a MISP alternative are usually looking for a feed, not a replacement platform.
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: August 8, 2026 ~ August 14, 2026 Antiy AVL SDK anti-virus engine released a total of […]
LiteLLM Supply Chain Attack: Inside the AI Breach That Exposed 2,500+ Companies Key Takeaways The LiteLLM breach planted credential-stealing code in two PyPI releases, v1.82.7 and v1.82.8 , live for roughly 40 minutes on
The software supply chain problem has entered a new operational phase. The attacker no longer needs to compromise only source code, package registries, build pipelines, or signing keys. In the... The post AI Supply Chain Attacks: Why Trusted AI Artifacts Are Becoming a Primary Attack Vector appeared first on VerSprite, Threat Modeling and Pentesting Services.
More than a quarter of stolen funds are gone within fifteen minutes of the fraudulent transfer. That number ends the case-file era — and points to where the time can be won back.
Regional APT Threat Situation In April 2026, the global threat hunting system of Fuying Lab detected a total of 29 APT attack activities. These activities were primarily concentrated in regions including East Asia, South Asia, Eastern Europe, North America, and the Middle East, as shown in the figure below. Regarding the activity levels of different […] The post NSFOCUS Monthly APT Insights – April 2026 appeared first on NSFOCUS.
Posture scores and questionnaires measure vendor hygiene, not active targeting. See why compromise intelligence closes the gap TPRM tools miss.
One rented VPS, three payloads — a self-naming dropper, a Docker API scanner, and a Redis module that turns MODULE LOAD into remote code execution — all converging on the same Monero wallet.
A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.
On August 10, 2026, a European research team published a preprint demonstrating that the encrypted “reasoning” or “thinking” blocks returned by frontier LLM APIs (Claude, GPT, Gemini) can be decoded in plaintext.1 They extracted 315,320 reasoning blocks from 6,708 publicly posted agent trajectories across GitHub and Hugging Face. Inside genuine user sessions they found 704 privacy artifacts: 62 API keys, 33 passwords, 24 access tokens, and 30 personal email addresses. Six
A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.
Former Google Threat Intelligence leader joins GreyNoise as SVP of Adversary Operations to advance proactive discovery and disruption of cyber threats.
Silent Push preemptive cyber defense covers the agentic enrichment gap by feeding AI SOCs earlier data, making them faster and right more often. The post What Does Preemptive Cyber Defense Look Like Inside an AI SOC? appeared first on Silent Push.
Security researchers identified a major software supply chain campaign dubbed "ChainDrop," in which a self-propagating worm compromised hundreds of npm packages and spread malicious updates through... The post ChainDrop Supply Chain Attack Compromises Hundreds of npm Packages appeared first on Blackwired.com.
Modern investigations demand more than single source intelligence. When law enforcement agencies track organized crime networks, corporate security teams assess physical threats, or government analysts map terrorist infrastructure, they may draw on commercial satellite imagery, open mapping platforms, mobile location data, social media, aircraft broadcasts, public sensors, and other sources. Geography provides a common layer that helps connect these fragmented signals into a broader intelligence
By Adrian Cheek, Senior Cybercrime Researcher Publicly exposed EV charging infrastructure remains an unresolved cybersecurity problem. Security practitioner Ken Munro has spent years taking apart the machines that charge electric cars. When asked what actually kept him up at night, he did not point to any one broken device. He pointed at all of them […] The post Plugged In and Exposed: The Growing Cybersecurity Threat to EV Charging Infrastructure appeared first on Flare | Identity First T
Technical debt, soaring cloud costs, and hidden security threats are keeping IT leaders awake. Learn how to cut through operational noise and restore control.
SAP Commerce Cloud CVE-2026-58231 Requires Urgent Patching SAP has addressed CVE-2026-58231, a maximum-severity improper authorization vulnerability in the Data Hub Adapter for SAP Commerce Cloud. The flaw carries a CVSS