Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
766 matching stories — in WAF / DDoS / App Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
See how 1001Pneus stopped competitor price scrapers hiding behind residential IPs, freeing its 50-person team from bot firefighting with DataDome.
We are thrilled to announce that Blackwall has secured $100 million at a valuation of $2.2 billion. This C Round was led by AVP, with participation from our existing investors at Dawn Capital, MMC Ventures and Tera Ventures. This new round of financing accelerates our objective to build a global traffic management ecosystem around its […]
Shopify phishing has evolved from the laughable “Dear Shopify Merchant” email into one of the most reliable account-takeover vectors in ecommerce. On the same pattern, Shopify shops have recently been hit with a checkout hijack campaign running through HulkApps, Swym, and Selleasy extensions, where shoppers on legitimate stores were redirected to a fake payment page ... Read more
Learn when to use RUM and synthetic monitoring for SLIs, what each source misses, and how to interpret their results together.
Datadog built Turnstile to evaluate signed attestations and enforce software supply chain policies before container images are deployed.
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Protect sensitive data by pairing Cyera's data discovery with Akamai Guardicore Segmentation to enforce dynamic, data-aware microsegmentation rules.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
Jusqu'à 10 000 euros par jour et par domaine non bloqué, voilà ce que réclamait beIN Sports à plusieurs intermédiaires techniques, dont NordVPN, Surfshark et Cloudflare. Malgré des sites de streaming illégal toujours accessibles, le tribunal judiciaire de Paris a rejeté ses demandes. Une nouvelle décision qui précise les limites des obligations imposées aux fournisseurs de VPN.
Learn how ShinyHunters exploits Oracle PeopleSoft to steal sensitive data. Understand the attack risks, potential impact, and security measures to protect enterprise systems. The post ShinyHunters Exploits Oracle PeopleSoft to Steal Sensitive Data appeared first on Fidelis Security.
The October 2026 Ubuntu DDoS attack took Canonical websites and the Ubuntu Security API offline. What CISOs can learn about proving DDoS protection holds. The post Ubuntu Down Again: What Happened in the October 2026 DDoS Attack? appeared first on MazeBolt.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
DORA does not explicitly mandate standalone DDoS testing, and it prescribes no DDoS-specific schedule. What it requires is a risk-based digital operational resilience testing programme. For financial entities that depend on internet-facing services, a controlled DDoS simulation can provide direct evidence that availability protections perform as expected under attack. That distinction decides how firms act […]
Effective DDoS defence starts with understanding why your organisation is being targeted. A spike in traffic tells you what is happening, but not necessarily who is behind it or what they want to achieve. Understanding the motivation behind an attack can provide critical context for incident response, threat assessment, and defence strategy. DDoS attacks serve […]
En six mois, plus de 20 000 sous-domaines Cloudflare ont été associés à un réseau d’escroqueries au faux support Microsoft. Derrière ces adresses renouvelées en permanence, une organisation cybercriminelle active depuis 2017.
Connecting the French supermarket refrigeration attack to everyday critical-infrastructure risks, this post explores how robust vulnerability management, patch governance, and WAF-layer defenses protect internet-facing operations.
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.
What a DDoS simulation proves about deployed protection, what it cannot prove, and why attack volume is not a measure of how realistic a simulation is. The post DDoS Simulation: What It Proves About Your Protection, and What It Cannot appeared first on MazeBolt.
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a
Microsoft’s October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including exploited Windows Shell zero-day CVE-2026-96951. See AppTrana coverage. The post Windows Shell Zero-Day and 1,413 Fixes: Microsoft October 2026 Security Update appeared first on Indusface.
During the traditional shopping season, shopping stores are a high-risk target and even CSPs are not dismissed as completely secure. To reduce the risk on them, they cannot rule out the use of a security service.
Want to plan a “no cyberattack on data” holiday? Learn what holidays experience the highest volume of attacks by reading our in depth analysis!
Continuous DDoS validation defined: how the evidence loop works, why independence matters, and how it differs from point-in-time red team testing. The post Continuous DDoS Validation: Definition, How It Works, and How It Differs From Point-in-Time Red Team Testing appeared first on MazeBolt.
OSS tool to reverse binaries, apps, etc. with natural language, new hunting toolkit by Cisco Talos, testing Jev on identity resolution
Threat research is always a bit of a cat-and-mouse game, and it’s often made more so when an actor survives years in the face of scrutiny. The actors behind the so-called Help Traffic Distribution System (TDS) are one such case. They’ve been active since at least April 2017 and have been largely unaffected by the […] The post Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection appeared first on Infoblox Blog.
Unified visibility helps state agencies protect critical digital services by linking citizen experience to network, application, and infrastructure performance for faster troubleshooting and improved service reliability.
DataDome’s latest report uncovers a 41.5% surge in AI agent traffic, a 4.7x jump in agentic browser requests, and a shifting agent mix. Learn more.
Meta’s Muse hit 29M requests in 12 days. See DataDome's Q3 2026 AI agent traffic data for insights on agentic browsers, top AI agents, and risks for your site.
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co
The Week At A Glance This week’s incidents highlighted the real-world impact of exposed control systems and rapidly exploited enterprise […] The post Weekly Threat Report October 7–13, 2026: French Supermarket Refrigeration Attacks, Ivanti Connect Secure Zero-Day Chain, and AI-Agent Incidents appeared first on .
Overview Recently, NSFOCUS CERT monitored that GitLab released a security update to fix the GitLab Remote Code Execution Vulnerability (CVE-2026-97229). Due to insufficient validation of regular expressions in GitLab’s CI/CD configuration, unauthenticated attackers can construct special regular expressions within the CI/CD configuration to trigger an integer overflow during compilation, thereby executing arbitrary code with the […] The post GitLab Remote Code Execution Vulnerability
Discover smart ways to mitigate live video piracy, slow down restreamers with clever CDN tricks, and protect your streams.
Learn how Kubernetes Dynamic Resource Allocation raises GPU utilization, and what to watch to confirm it’s actually reducing your GPU costs.
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
For the ten years I have watched this industry, hunting business logic vulnerabilities has been notoriously expensive and exceedingly difficult. Every attempt to bring the cost down has hit the same wall. Now, for the first time, we as an industry have the capability to meaningfully lower the ceiling on what this work costs. I ... Read more
In 2026, the most interesting conversation happening in the pentesting industry is around autonomous pentesting. For the first time, a handful of vendors, Astra included, are shipping platforms that detect business-logic vulnerabilities and the class of flaws that have traditionally required significant human context to reach. That capability has been the industry’s white whale for ... Read more
Ivanti has disclosed CVE-2026-104935, a high-severity vulnerability in Ivanti Connect Secure (ICS) that is being actively exploited in real-world attacks. The flaw carries a CVSS score of 8.6 and enables unauthenticated attackers to bypass authentication and execute arbitrary commands on vulnerable VPN appliances. The vulnerability came to light after Volexity investigated a compromised Ivanti Connect […] The post CVE-2026-104935: Ivanti Connect Secure Zero-Day Exploited for Unauthenticate