Make secure access easier wherever work happens
This Cybersecurity Awareness Month, make security the easy choice.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
140 matching stories — announcement, in User and Entity Behavior Analytics — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The Checker You Pay For
How criminals turn spend-management onboarding into fraud infrastructure, and why you may be accountable for the fraud you never see.
When risk rises, security should get smarter, not harder
This Cybersecurity Awareness Month, make security the easy choice.
Comment Reveelium transforme des menaces analysées en connaissance pour les suivantes ?
Une menace remonte dans le SOC. L’analyste l’investigue, échange avec le client pour récupérer les éléments de contexte nécessaires, établit sa conclusion puis clôture l’alerte. L’analyse est terminée, mais elle a aussi produit une connaissance précieuse sur l’environnement du client. Que devient cette connaissance lorsqu’un scénario similaire se présente quelques semaines plus tard ? [...]
Facturation électronique obligatoire : quels risques cyber pour les entreprises ?
Depuis le 1er septembre 2026, la réforme de la facturation électronique est entrée en vigueur en France. Toutes les entreprises assujetties à la TVA doivent désormais être en mesure de recevoir des factures électroniques, tandis que les grandes entreprises et les ETI doivent également les émettre sous ce format. Les PME et micro-entreprises rejoindront [...]
KGB RAT: A Fully Undetectable Windows Trojan Built to Spy, Steal, and Terrorize
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.
Beyond compliance: Improving workforce efficiency in aged care
Aged care providers must balance care quality, workforce pressures, and rising costs with evolving reporting and compliance requirements.
Le CERT ITrust rejoint l’InterCERT France
Après avoir participé à la deuxième promotion de l’incubateur InterCERT en 2024, le CERT ITrust officialise son adhésion à l’InterCERT France, première communauté française de CERT (Computer Emergency Response Team). Une nouvelle étape dans le développement de nos activités de réponse à incident et de notre engagement au sein de l’écosystème cyber français. InterCERT [...]
Agentic AI In Cybersecurity: What Changes When The System Chooses The Next Step
Agentic AI is the breakthrough of the moment, in security as everywhere else: agents that are threat-aware, active, and proactive in investigation. But it is also the technology behind a recent documented autonomous AI intrusion. Both facts are true, and the distance between them is what this article is about.
Splunk security advisory (AV26-1018)
SonicWall and Splunk Patch Critical Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.
Detection Rule Portability
Detection rule portability is the practice of writing and managing threat-detection logic so it moves across SIEM, EDR, and XDR platforms without a full rewrite. What happens to my detection rules when I migrate to a new SIEM platform? Rules written in a platform’s native query language do not travel. SPL stays in Splunk. KQL […] The post Detection Rule Portability appeared first on SOC Prime.
Threat Actor Profile : DragonForce
Executive Summary: DragonForce is a financially motivated ransomware group. It became active in 2023 and later developed a Ransomware-as-a-Service (RaaS) model. Instead of doing all attacks by itself, DragonForce provides ransomware tools and services to affiliates. These affiliates use the tools to attack organizations and share the ransom money with DragonForce. DragonForce uses double extortion. […]
Can You Have a Ransomware Attack With a Zero-Day Vulnerability?
The post Can You Have a Ransomware Attack With a Zero-Day Vulnerability? appeared first on Prolion.
How to Prevent Ransomware: A Guide to Ransomware Prevention
The post How to Prevent Ransomware: A Guide to Ransomware Prevention appeared first on Prolion.
What Is Double, Triple and Multi Extortion Ransomware?
The post What Is Double, Triple and Multi Extortion Ransomware? appeared first on Prolion.
The New Hire Was Never Real. The Access Was.
The Hire That Was Never Vetted Most breaches announce themselves. Ransomware locks screens. Phishing kicks off a chain of alerts. But some of the most damaging intrusions never trip a single traditional control, because they don’t start with a stolen credential or an exploited vulnerability. They start with a job offer. A fabricated identity clears […]
What is Employee Monitoring? Benefits, Types, Best Practices
What is Employee Monitoring? In broad terms, employee monitoring is watching the activity of an individual on the job. The post What is Employee Monitoring? Benefits, Types, Best Practices first appeared on Teramind Blog | Data Security & Workforce Management.
What is the True Cost of Employee Monitoring Software?
Most employee monitoring tools don’t cost what their pricing pages say they do. Between onboarding fees, custom integrations, setup and training, IT overhead, and legal reviews, the true cost can be much higher — and harder to quantify. These extra costs usually aren’t hidden on purpose. More often, they come from the real-world complexity of […] The post What is the True Cost of Employee Monitoring Software? first appeared on Teramind Blog | Data Security & Workforce Management.
45+ Employee Monitoring Software Features and Benefits
Are you struggling to keep up with the lightning-fast adoption of AI and remote work? Traditional data protection tools have a massive blind spot: the endpoint, where rogue applications and Shadow AI operate completely out of sight. In this post, we break down the essential features of modern employee monitoring software. You’ll gain valuable insights […] The post 45+ Employee Monitoring Software Features and Benefits first appeared on Teramind Blog | Data Security & Workforce Manage
Analyzing PureLogs Stealer: Fake Adobe Sign Phishing Uses PNG Steganography and Fileless Execution
Executive Summary Threat actors are actively impersonating Adobe Sign (hxxps://chickplaybox[.]com) to deliver PureLogs Stealer in memory. The campaign relies on complex obfuscation, process environment variable storage, and image steganography to minimize on-disk forensic artifacts. Fingerprinting & Exfiltration:The landing page uses Cloudflare Turnstile and ipapi.co to collect victim IP, hostname, geolocation, and browser metadata, sending real-time alerts to […]