Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
713 matching stories — announcement, in WAF / DDoS / App Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Picture a security operations center (SOC) in the age of AI. Alerts are pouring in and AI agents are doing exactly what they were built to do: pulling endpoint telemetry, querying threat intelligence, searching identity logs, summarizing findings and opening cases. Then the AI workflows get slower, and suddenly token budgets are running low. Investigation […] The post Agentic Denial of Service Attack: The Emerging AI Risk Hiding in Plain Sight appeared first on Infoblox Blog.
See how 1001Pneus stopped competitor price scrapers hiding behind residential IPs, freeing its 50-person team from bot firefighting with DataDome.
The Missing Context behind Every Vulnerability Finding Vulnerability management teams rarely have too few findings. What they’re usually missing is context. A scanner can report that an IP address has dozens of critical vulnerabilities. Before anyone can act on that, someone still has to answer a more basic set of questions: What is this device? […] The post What if Your Analyst Could Just Ask? Connecting Tenable Findings to Infoblox Network Identity with MCP appeared first on Infoblox Blo
NETSCOUT’s 1H 2026 DDoS Threat Intelligence Report reveals a DDoS landscape defined by growing scale, multivector complexity, direct-path attacks, residential proxy abuse, and increasingly commercialized attack services.
Never having been attacked says nothing about whether DDoS protection works. How to make the case for DDoS testing, and how to justify the budget. The post We Have Never Been Attacked. Do We Still Need DDoS Testing? appeared first on MazeBolt.
Shopify phishing has evolved from the laughable “Dear Shopify Merchant” email into one of the most reliable account-takeover vectors in ecommerce. On the same pattern, Shopify shops have recently been hit with a checkout hijack campaign running through HulkApps, Swym, and Selleasy extensions, where shoppers on legitimate stores were redirected to a fake payment page ... Read more
Explore hybrid post-quantum TLS, X25519MLKEM768 and how Nexusguard is validating and progressively deploying PQC readiness across supported infrastructure.
Learn when to use RUM and synthetic monitoring for SLIs, what each source misses, and how to interpret their results together.
Datadog built Turnstile to evaluate signed attestations and enforce software supply chain policies before container images are deployed.
A large-scale scam operation impersonating Microsoft uses a malicious traffic distribution system (TDS) run by a Russian organization and abuses thousands of Cloudflare links.
Protect sensitive data by pairing Cyera's data discovery with Akamai Guardicore Segmentation to enforce dynamic, data-aware microsegmentation rules.
The persistent, stealthy FortiGate implant was deployed against a telecommunications organization. The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.
Jusqu'à 10 000 euros par jour et par domaine non bloqué, voilà ce que réclamait beIN Sports à plusieurs intermédiaires techniques, dont NordVPN, Surfshark et Cloudflare. Malgré des sites de streaming illégal toujours accessibles, le tribunal judiciaire de Paris a rejeté ses demandes. Une nouvelle décision qui précise les limites des obligations imposées aux fournisseurs de VPN.
A practical method for comparing DDoS testing vendors: turn every proposal into a coverage number, and judge every claim, including ours, on arithmetic. The post How to Compare DDoS Testing Vendors Based on Actual Coverage appeared first on MazeBolt.
Learn how ShinyHunters exploits Oracle PeopleSoft to steal sensitive data. Understand the attack risks, potential impact, and security measures to protect enterprise systems. The post ShinyHunters Exploits Oracle PeopleSoft to Steal Sensitive Data appeared first on Fidelis Security.
The October 2026 Ubuntu DDoS attack took Canonical websites and the Ubuntu Security API offline. What CISOs can learn about proving DDoS protection holds. The post Ubuntu Down Again: What Happened in the October 2026 DDoS Attack? appeared first on MazeBolt.
Security researchers have found a new malware that hides inside Fortinet firewalls. The malware is called PEERSTITCH. It is an ARM64 implant that runs in the memory of the device. Palo Alto Networks’ Unit 42 shared the findings on October 14, 2026. Its team studied an attack on a telecommunications managed service provider. Hackers steal […] The post New PEERSTITCH Malware Bypasses Security Checks on Fortinet VPNs appeared first on PrivacySavvy.
Ivanti, Cisco, and Palo Alto Networks all had vulnerabilities in edge devices come under fire this week. Now BeyondTrust joins the group.
DORA does not explicitly mandate standalone DDoS testing, and it prescribes no DDoS-specific schedule. What it requires is a risk-based digital operational resilience testing programme. For financial entities that depend on internet-facing services, a controlled DDoS simulation can provide direct evidence that availability protections perform as expected under attack. That distinction decides how firms act […]
Effective DDoS defence starts with understanding why your organisation is being targeted. A spike in traffic tells you what is happening, but not necessarily who is behind it or what they want to achieve. Understanding the motivation behind an attack can provide critical context for incident response, threat assessment, and defence strategy. DDoS attacks serve […]
En six mois, plus de 20 000 sous-domaines Cloudflare ont été associés à un réseau d’escroqueries au faux support Microsoft. Derrière ces adresses renouvelées en permanence, une organisation cybercriminelle active depuis 2017.
Connecting the French supermarket refrigeration attack to everyday critical-infrastructure risks, this post explores how robust vulnerability management, patch governance, and WAF-layer defenses protect internet-facing operations.
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Remote Support (formerly Bomgar) as a zero-day in late August 2026. The vulnerability, tracked as CVE-2026-102764 (CVSS score: 9.3), is a case of improper origin validation in an internal messaging component that could be exploited by a
Microsoft’s October 2026 Patch Tuesday fixes 1,413 vulnerabilities, including exploited Windows Shell zero-day CVE-2026-96951. See AppTrana coverage. The post Windows Shell Zero-Day and 1,413 Fixes: Microsoft October 2026 Security Update appeared first on Indusface.
During the traditional shopping season, shopping stores are a high-risk target and even CSPs are not dismissed as completely secure. To reduce the risk on them, they cannot rule out the use of a security service.
OSS tool to reverse binaries, apps, etc. with natural language, new hunting toolkit by Cisco Talos, testing Jev on identity resolution
Threat research is always a bit of a cat-and-mouse game, and it’s often made more so when an actor survives years in the face of scrutiny. The actors behind the so-called Help Traffic Distribution System (TDS) are one such case. They’ve been active since at least April 2017 and have been largely unaffected by the […] The post Inside Help TDS: Hotejka, Cloudflare Pages and Predictive Detection appeared first on Infoblox Blog.
Unified visibility helps state agencies protect critical digital services by linking citizen experience to network, application, and infrastructure performance for faster troubleshooting and improved service reliability.
DataDome’s latest report uncovers a 41.5% surge in AI agent traffic, a 4.7x jump in agentic browser requests, and a shifting agent mix. Learn more.
Meta’s Muse hit 29M requests in 12 days. See DataDome's Q3 2026 AI agent traffic data for insights on agentic browsers, top AI agents, and risks for your site.
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is being exploited in the wild. The flaw affects the product’s Advanced Malware Protection (AMP) feature and stems from improper handling of email attachments when the File Reputation service is enabled. By sending an email co
The Week At A Glance This week’s incidents highlighted the real-world impact of exposed control systems and rapidly exploited enterprise […] The post Weekly Threat Report October 7–13, 2026: French Supermarket Refrigeration Attacks, Ivanti Connect Secure Zero-Day Chain, and AI-Agent Incidents appeared first on .
Discover smart ways to mitigate live video piracy, slow down restreamers with clever CDN tricks, and protect your streams.
Learn how Kubernetes Dynamic Resource Allocation raises GPU utilization, and what to watch to confirm it’s actually reducing your GPU costs.
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
For the ten years I have watched this industry, hunting business logic vulnerabilities has been notoriously expensive and exceedingly difficult. Every attempt to bring the cost down has hit the same wall. Now, for the first time, we as an industry have the capability to meaningfully lower the ceiling on what this work costs. I ... Read more
In 2026, the most interesting conversation happening in the pentesting industry is around autonomous pentesting. For the first time, a handful of vendors, Astra included, are shipping platforms that detect business-logic vulnerabilities and the class of flaws that have traditionally required significant human context to reach. That capability has been the industry’s white whale for ... Read more