ManuSec Cybersecurity for Critical Manufacturing 2026
Meet Finite State at ManuSec 2026 to see how manufacturers can secure connected products, prioritize real exposure, and simplify security and compliance across every release.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,798 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
What Is Due Diligence?
Third-party due diligence checks supplier risk before and during a relationship. Learn what evidence to collect, verify and monitor.
WISeQey Issues CEO Letter to Shareholders: Building an Intelligent, Secure Platform for the Intelligence Age
WISeQey Issues CEO Letter to Shareholders: Building an Intelligent, Secure Platform for the Intelligence Age Geneva, Switzerland – October 21, 2026 – WISeQey Corp. (formerly known as WISeKey International Holding AG, “WISeQey”) (Nasdaq/SIX: WQEY), a global quantum cybersecurity and space IoT company, today issued a Letter to Shareholders from its Founder, Chairman and Chief Executive […]
ThreatLocker MDR team intercepts Chimera C2 ClickFix attack
The ThreatLocker MDR team intercepted a ClickFix attack which attempted to implement an active C2 framework and subscribe to a platform titled “ChimeraC2”.
Threat Intelligence Report Oct 13 - Oct 19 2026
Threat Intelligence Report Oct 13 - Oct 19 2026 john.cezar Wed, 10/21/2026 - 03:10 New Threats Detection Added• BlueMoon EK• AdFection• PUP• TryNodeRATNewly Detected Threats11New IDPS Rules Created97Weekly Detected ThreatsThe following threats were added to Crystal Eye this week:Threat name:BlueMoon EKBlueMoonEK is a modular exploit kit that chains exploit together to compromise Google Chrome browsers and Microsoft Windows systems. This exploit chain achieves remote code execution and serves as
SOC 2 Logging Requirements: What to Log and How Long to Keep It
SOC 2 logging requirements explained: which Trust Services Criteria cover logs, what events to capture, how long to keep them, and the evidence auditors ask for.
ESXi Logs to SIEM: How to Forward Them and What to Detect
How to send VMware ESXi logs to a SIEM with esxcli or vSphere, which log files matter, and the detections that catch ransomware and backdoors on the hypervisor.
Ransomware Group SilentRansomGroup Hits: P… H…
Summary In the latest cybersecurity news, P… H… — an organization based in US — has fallen victim to a ransomware attack conducted by… The post Ransomware Group SilentRansomGroup Hits: P… H… appeared first on HookPhish.
Ransomware Group SilentRansomGroup Hits: M… M…
Summary In the latest cybersecurity news, M… M… — an organization based in US — has fallen victim to a ransomware attack conducted by… The post Ransomware Group SilentRansomGroup Hits: M… M… appeared first on HookPhish.
Ransomware Group Global Secret Group Hits: Graves Fireplaces, Inc.
Summary In the latest cybersecurity news, Graves Fireplaces, Inc. — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group Global Secret Group Hits: Graves Fireplaces, Inc. appeared first on HookPhish.
How to encrypt cloud data and protect sensitive files from a breach
Cloud storage makes it easy to back up photos, share documents and reach important files from almost anywhere. That convenience also creates a valuable target. The FBI received 1,008,597 internet-crime complaints in 2025, with reported losses approaching $21 billion. Encryption cannot prevent every scam or account takeover, but it can make stolen files far harder […] The post How to encrypt cloud data and protect sensitive files from a breach first appeared on Total Defense.
RadarFirst vs. OneTrust: Which Platform Fits Your Privacy and AI Risk Needs?
Compare RadarFirst and OneTrust across privacy operations, AI governance, incident management, and compliance workflows to find the right fit for your team. The post RadarFirst vs. OneTrust: Which Platform Fits Your Privacy and AI Risk Needs? appeared first on RadarFirst.
Advisory Alert: Inside the Infostealer Ecosystem Targeting Dominican Higher Education
Reading Time: 5 minsLumu CTI reveals how unmanaged endpoints and stolen session tokens bypass traditional defenses to harvest over 245,000 credentials in Dominican universities. The post Advisory Alert: Inside the Infostealer Ecosystem Targeting Dominican Higher Education appeared first on Lumu Technologies.
Infographic: The State of Agentic Cybersecurity
The modern SOC is undergoing the most significant transformation in a generation. AI agents are no longer a “roadmap item”—they are embedded in your detection, response, and playbook execution. But as the line between human intuition and machine speed blurs, a critical question remains: Can you trust AI agents will perform as expected when faced […]
AI Models are Fueling a New Wave of Cybercrime: A Quantitative Analysis
How threat actors discuss, sell, and use abliterated open-weight models, measured across more than 100,000 Telegram channels and 100 dark web forums. The post AI Models are Fueling a New Wave of Cybercrime: A Quantitative Analysis appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility into Cybercrime.
Webinar: Text, Voice, Video: A Field Guide to Generative AI Social Engineering
The post Webinar: Text, Voice, Video: A Field Guide to Generative AI Social Engineering appeared first on Fable Security.
Lord of the Controls, Part 1: Leaving the Shire of Static PDFs
Lord of the Controls, Part 1: Leaving the Shire of Static PDFs October 20, 2026 | By Travis Howerton “Three Rings for the Cloud Kings under the federal sky, Seven for the Auditors in their halls of stone, Nine for Mortal CISOs doomed to manually reply, One for the Dark Lord on his SharePoint throne… One Trust Center to... The post Lord of the Controls, Part 1: Leaving the Shire of Static PDFs appeared first on RegScale.
How Should You Measure the Impact of AI in the SOC?
How to Measure the Impact of an AI SOC: 5 Metrics That Go Beyond MTTR  Key Overview To measure the impact of AI in the SOC, track five operational metrics instead of speed alone: investigation coverage, analyst review, investigation time, analyst capacity, and decision quality. MTTI and MTTR still matter, but they only show how […] The post How Should You Measure the Impact of AI in the SOC? appeared first on Embed Security.
From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
Qt5 Network is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
Qt5 Network provides networking APIs for Qt applications, including TCP/IP communications, HTTP, and secure network connections. FIPS 140-3 support is available for Qt5 Network with wolfCrypt FIPS, tested for use with Qt5 Network environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure network communications within Qt applications while […]
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4.Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from
The iRhythm data breach never touched a cardiac monitor
Wearable cardiac monitor maker iRhythm Technologies told the Oregon Department of Justice that a June 2026 breach affected 8,179,772 people. The attackers got there without reaching a single device or clinical system, using social engineering to get into the business applications the company runs on.
Health-ISAC co-filed the lawsuit that took down a phishing-as-a-service marketplace
The seller behind YAM Store, a storefront for phishing infrastructure, waited for real organizations' domains to expire, re-registered them, rebuilt their websites, and used them to open Microsoft 365 tenants for resale, according to a federal complaint that Health-ISAC filed as co-plaintiff.
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
Key Takeaways Teams are remediating more than ever, but exposure from the vulnerabilities that matter is still rising faster than they can keep up with. Mean time to exploitation is about −7 days. Mean time to remediate sits around +30 days. Qualys research: closures rose from 73M (2022) to 473M (2025) – 6× – while […]
Your Policies Are Correct. But Are Your Endpoints Secure?
Your policy can be perfectly configured while your endpoint is not.
Polygraf AI named a Top InfoSec Innovator for 2026
Cyber Defense Magazine has named Polygraf AI a Top InfoSec Innovator for 2026, in the Groundbreaking AI Usage Control for Security and Compliance category. The award was announced at CyberDefenseCon 2026 in Orlando. The post Polygraf AI named a Top InfoSec Innovator for 2026 appeared first on Polygraf.
MemCurrent: Designing Persistent Memory for Production Agents
AI tools have made it easy to vibe code agents. Building and maintaining an enterprise...
Can I use Google Analytics on a telehealth site?
Telehealth providers subject to HIPAA should not use Google Analytics on pages that collect, process, or reveal protected health information (PHI). Google does not offer a business associate agreement (BAA) for Google Analytics, meaning the service cannot be treated as a HIPAA compliant solution for handling PHI.
LIVE WEBINAR: Everything wolfSSL Supports for AMD/Xilinx
Adding secure boot and cryptography to an AMD/Xilinx design means working through boot image authentication, key management, hardware acceleration, and Linux integration. Join wolfSSL for a technical walkthrough of its AMD/Xilinx support. Learn which components apply to your target and what’s involved in integrating them. What you’ll learn: wolfSSL builds, hardware acceleration, and PetaLinux integration […]
Cribl SIEM Migration: How Cribl and Realm Compare
Planning a Cribl SIEM migration? See how Cribl and Realm handle each stage, from running two SIEMs at once to cutting volume without losing detections. The post Cribl SIEM Migration: How Cribl and Realm Compare appeared first on Realm Security.
From Users to Agents: AI Identity & Saviynt Zuma Review
The Identity Explosion More Systems and Hybrid Deployment Agents As a New Identity Type We have more identities, more identity types, and more systems integrated into the identity and access management (IAM) feature set than ever before. From workforce (B2E) to external (B2C and B2B) and non-human identity (NHI) covering workloads and machines. The rapid rise in AI adoption has also created new requirements for agentic identity and access management.
What’s New in Xacta 3.1.1: Faster Compliance Automation, Better Risk Visibility, and Centralized Remediation Management
Security and compliance teams are being asked to move faster while managing more data, more systems, and more complex requirements. Xacta® 3.1.1 helps teams meet that challenge with practical improvements across Xacta 360™, Xacta Propagation Utility, Xacta.io™, Xacta.ai™, and Xacta Xchange™. This release makes it easier for teams to turn information into action, with less... Read more The post What’s New in Xacta 3.1.1: Faster Compliance Automation, Better Risk Visibility, and Centralized
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
AI Agent Security: How to Govern What AI Agents Can Access, Connect To and Do
AI agent security governs what agents can access, connect to, and do. Map agentic AI risks, MCP authorization, least privilege, and a four-stage governance program. The post AI Agent Security: How to Govern What AI Agents Can Access, Connect To and Do appeared first on RedAccess.
Privileged Credential Management: Discovery to Rotation
The post Privileged Credential Management: Discovery to Rotation appeared first on Xage Security.
Почему банки слабо переживают за безопасность клиентов?
Top 7 Tips How to Protect Yourself from Phishing Scams
10 Steps to Eliminate Digital Security Risks in Fintech Project
AI in AppSec: What to Build vs. Buy | Endor Labs
Building AI security agents in-house? Learn what to build, what to buy, and what it costs at scale, with a four-level model for the agentic SDLC.
Shadow AI in Healthcare: Why Governance Must Include Incident Response
Manage shadow AI risks in healthcare by connecting AI governance, privacy, and incident response to protect PHI and document defensible decisions. The post Shadow AI in Healthcare: Why Governance Must Include Incident Response appeared first on RadarFirst.