A 90-Day Communications Continuity Plan for Water Utilities
Cyberattacks on water utilities show why communications continuity must be planned before isolation. Follow this practical 90-day plan to close the gap.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,872 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
CISA's New Guidance Tells Operators How to Communicate While OT Systems Are Isolated
CISA’s best practices for outage communications includes incident response planning, stakeholder updates, and resilient communications during cyber and operational disruptions.
Bridging the cybersecurity gap
Firewalls and EDR miss threats that never hit the perimeter—lateral movement, insider activity, branch traffic. APCON ThreatGuard puts alerts, packet evidence, and a visual network map in one dashboard, with auto-updated detections and mobile alerts. You can't outsource responsibility.
NVIDIA Jetson Linux Initrd Vulnerability Enables Secure Boot Bypass
ONEKEY researchers discovered an NVIDIA Jetson Linux initrd command injection vulnerability that can enable secure boot bypass, root access, and disclosure of LUKS encryption keys.
Sality P2P Botnet Disruption: Peer-List Sinkholing Ends a 23-Year Operation
How defenders dismantled the 23-year Sality P2P botnet: peer-list poisoning, URL pack seizures, EggJagger clipjacking, and IOCs for SALTY SPIDER.
Dissecting RecruitTrap: Browser-in-the-Browser Phishing Adapts to Enterprise Mobile Endpoints
Analysis of the RecruitTrap campaign using Browser-in-the-Browser and mobile flows to harvest corporate credentials and bypass MFA.
Biggest data breaches of August 2026
284 million records claimed at McKesson, 12.9 million verified at Carhartt. The eight biggest data breaches of August 2026, with every number checked against a company statement, filing, or named outlet.
Top CVEs of August 2026
August's CVSS 7.0 was a Lazarus zero-day exploited for five weeks. Its CVSS 10.0 needed no patch at all. The top CVEs of August 2026, ranked by exploitation evidence rather than severity, with remediation steps for all five.
The Rise of Managed Agent Platforms
Figure 1. Managed Agent Platforms remove different barriers between an idea and an operating agent. Segments overlap; placement is not a ranking of vendors, maturity, or market share.* The new software factory and the enterprise governance challenge An executive market analysis for CISOs, Chief AI Officers, and AI product leaders. September 2026. The next wave of enterprise AI is not going to arrive through one centrally approved platform. It is coming through many teams, many builders, and many
Act: How to operationalize data for governed agentic AI-driven action
Learn how agentic AI in manufacturing turns trusted operational insight into safe action, with scoped agent roles, human approval and a full audit trail.
Build and run Datadog workflows from Bits Chat or AI agents
Build, debug, and run Datadog workflows from Bits Chat and AI coding agents using the operational and development context where you’re working.
New BitNinja Agent 3.17.0: Modernized PID Paths and Improved Service Reliability
This BitNinja release modernizes PID handling, improves service startup reliability, reduces CaptchaHttp CPU load, and adds WAF Pro static-file exclusions.
5 ways to optimize AI costs and reduce wasted AI spend
The tokenmaxxing era has left companies grappling with an uncomfortable reality. Now that AI vendors have switched to usage-based billing models, businesses are facing sky-high bills, and IT and finance teams are under pressure to rein in spending without slowing down innovation. The logical first step is to locate areas where that spend is going to waste, but even getting visibility into usage can be overwhelming when it’s spread across departments, users, models, vendors, and agents.If you’re
ISO 42001 Evidence: What Auditors Ask For
Prepare ISO 42001 audit evidence that proves your controls work in practice.
How I think about detection in the pipeline
How to Prepare for a CMMC Audit
Prepare for a CMMC audit with practical steps to confirm compliance scope, map CUI, build assessor-ready evidence, and close last-mile blind spots.
The security attack that hid inside your observability data
Your ops team sees a CPU spike. Your security team sees nothing. The cryptominer runs for six hours. Avoid duplication of cost and time and see how a unified observability and security platform with grounded AI closes the gap.
Elastic and Tencent Cloud deepen strategic partnership to power AI-era search foundation
Tencent Cloud and Elastic announced an expanded strategic collaboration in Shenzhen in August 2026. The companies will deepen their technical and product collaboration to help enterprises establish dedicated AI search for the AI era.
Building Fastly Log Analytics Tools: An Open-Source Approach to Deeper Insights
Gain deeper insights with Fastly Log Analytics. Build an open-source, self-hosted dashboard to own your data, reduce vendor costs, and troubleshoot instantly.
The Best CAASM Tools in 2026 | JupiterOne
This guide breaks down what matters when evaluating a CAASM provider, then ranks the platforms worth putting on your shortlist.
Inside a Dark Web Counterfeit Currency Operation
Executive Summary Key Findings 1. The order counters are a publication schedule, not a transaction feed. All 27 changes we recorded landed inside the 00:00 to 06:00 UTC window, exactly once per vendor per day. Across 92 observed daytime intervals, nothing moved at all. Treating these numbers as live trade volume measures a cron job. […] The post Inside a Dark Web Counterfeit Currency Operation appeared first on Bolster AI.
Smashing Security podcast #483: This AI helps thieves steal your iPhone
You've had your iPhone stolen. A day later, you get a text from Apple saying they've found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She's polite. She's professional. But she is not from Apple. She's not even human. And she's about to break into your iPhone. Meanwhile, OpenAI, Anthropic, and Meta have all announced - with varying degrees of drama - that their AI agents have "broken out of the sandbox" and gone hacking. James takes a ste
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. Learn how attackers move from social engineering to lateral movement using legitimate tools, and how Microsoft Defender helps detect and disrupt the activity. The post Impersonating IT support: how threat actors turn a remote session into enterprise-wide access appeared first on Microsoft S
2026 Cloud Security Index: How Risk Differs Across AWS, Azure, and Google Cloud
Originally published by Intruder. Juggling multiple cloud providers is complicated enough without each one failing in different places. But that's what Intruder’s 2026 Cloud Security Index found: the issues that dominate on AWS barely overlap with those on Google Cloud, and Azure looks different again. For security teams, this doesn't just create more work: it fragments teams' understanding of risk, makes prioritization harder, and can slow down remediation. That matters beca...
Safer Data for a Safer AI World: Why I Joined HYCU
Safer Data for a Safer AI World: Why I Joined HYCU don.jennings@h… Wed, 09/02/2026 - 18:28 September 3, 2026 Image Meta description HYCU's new Chief Product Officer, Anant Chintamaneni, on why agentic AI raises the stakes for data resilience — and why he joined HYCU to help lead it. Platform R-Cloud When I left Google Cloud, I wrote that agentic AI would fundamentally change how organizations build, secure, and operate. I said that's where I'd focus next. It turned out to be HYCU. A
Audit Trail: Meaning, Types, Examples, Importance & Best Practices
In Simple Terms: An audit trail provides traceability and accountability for business and system activity. It tells you who did what, when, and what changed. What Is an Audit Trail? For internal audit and compliance teams, an audit trail provides evidence of who performed an activity, what changed, when it happened, and whether the required... The post Audit Trail: Meaning, Types, Examples, Importance & Best Practices appeared first on ASPIA Infotech.
Wie der Produktpass Compliance neu organisiert
In unserem neuen Gastbeitrag bei Technologie-Medien zeigen wir, welche organisatorischen und technischen Anforderungen damit verbunden sind, von der Integration verteilter Produktdaten über Datenqualität und klare Zuständigkeiten bis hin zum sicheren Datenaustausch entlang der Wertschöpfungskette.
Nikesh Arora Is Right: It’s Time to Rethink Your Cyber Security Architecture
Nikesh Arora spoke the truth yesterday on Palo Alto Networks' fiscal Q4 earnings call. Then he did it again on live television.
Regtech use cases: 7 applications in the financial sector
The 7 main regtech use cases in financial services, what to look for when choosing a platform, and how integration actually works. With real customer results.
OT Cyber Lessons from the Production Floor: What Client Installations Taught Us About Water, Data Centers, and Smart Buildings
Most of what is written about OT cybersecurity is written from a desk; Threat reports, regulatory analyses, reference architectures. We publish that kind of material ourselves, and it matters. But there is a second body of knowledge that is rarely showcased: what actually happens when an engineer arrives on site with a laptop, a bag of patch cables, Rubyk-OT appliances and a two hour maintenance window. We have installed hardware-enforced segmentation in drinking water and wastewater...
CEO fraud and executive impersonation: verify the person behind the wire
The target is rarely the executive. It is the person who processes the request, and the approval chain assumes someone else already checked who asked. The post CEO fraud and executive impersonation: verify the person behind the wire appeared first on Trusona.
Putting Experts on the Problems Only Experts Can Solve
Expert judgment is the scarcest resource in offensive security. Making it accessible to more of the world, continuously, is an engineering problem. The post Putting Experts on the Problems Only Experts Can Solve appeared first on Synack.
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor's edge devices.
Autonomy Was Never the Goal
Why we merged NetSPI and Synack to bet against the loudest idea in security. The post Autonomy Was Never the Goal appeared first on Synack.
The definitive guide to customer identity verification
Trust is the foundation of every digital interaction, but in an era of escalating cyber threats, it must be earned—not assumed. Can you confidently say that the person accessing your service is who they claim to be? Fraudsters are continuously devising new strategies to exploit vulnerabilities, leading to substantial financial losses for companies. Beyond financial The post The definitive guide to customer identity verification appeared first on Telesign.
From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment
Since May 2026, StopAndProtect has quietly compromised thousands of vulnerable WordPress sites in a sophisticated, multilayered campaign uncovered by CheckPoint. The initial vector is social engineering via CAPTCHA prompts, followed by a series of user-induced downloads, and finally, loader and payload execution. It is suspected that an OPSEC failure may have caused the threat actor […] The post From ClickFix to SilentEncryptor: A Simple Yet Destructive Path to Ransomware Deployment appear
The $25 Million Phone Call: How AI Voice Cloning Is Powering CEO Fraud
A finance employee at the Hong Kong office of engineering giant Arup joined what looked like a routine video call. On the screen were several familiar faces, including the company’s CFO, discussing a confidential transaction that required urgent action. Reassured by the people he could see and hear, the employee made 15 transfers totaling roughly ... The $25 Million Phone Call: How AI Voice Cloning Is Powering CEO Fraud The post The $25 Million Phone Call: How AI Voice Cloning Is Powering
Who’s Actually in Charge of Your Cyber Incident Response?
This blog was previously published on Cyber Defense Magazine. When a cyber incident hits, most organizations discover something uncomfortable: the structure they assumed was in place doesn’t quite hold. Security is waiting for IT to apply system and network changes. The CISO is fielding board calls while simultaneously trying to understand what the security team […] The post Who’s Actually in Charge of Your Cyber Incident Response? appeared first on BreachRx.
The Cost Of Cyber Offense Is Collapsing
Our CEO Ido Geffen explains why AI is collapsing the cost of cyber offense, letting attackers scale elite tradecraft. Learn why security programs built on periodic testing must adapt. The post The Cost Of Cyber Offense Is Collapsing appeared first on Novee.
OpenAI AI Agents Escape Testing Environment and Compromise Hugging Face
OpenAI disclosed on August 26, 2026, that its AI models circumvented security controls during internal cybersecurity evaluations in July and compromised parts of OpenAI's research infrastructure and... The post OpenAI AI Agents Escape Testing Environment and Compromise Hugging Face appeared first on Blackwired.com.