OAuth Token Theft Through Microsoft's Front Door
A sideloaded package turns a Microsoft-signed binary into an OAuth token theft tool. No phishing domain, no spoofed UI, no browser. Here's how to detect it.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
CARBONATO: a botnet built around an AI agent
ThreatDown researchers uncovered CARBONATO, a Docker botnet built around an AI agent that compromises exposed Docker daemons, spreads across reachable hosts, and gives operators a Telegram-controlled tool for post-compromise activity. The post CARBONATO: a botnet built around an AI agent appeared first on ThreatDown.
Introducing the Agentic Skills Marketplace: Curated AI Capabilities for the Modern SOC
For years, SOC Prime has focused on one core problem: curating behavioral detection rules that cover both the threats that never go away and the new ones that emerge every day. As agentic AI changes how security teams work, we see the same opportunity opening up in a new area — and we’re expanding our […] The post Introducing the Agentic Skills Marketplace: Curated AI Capabilities for the Modern SOC appeared first on SOC Prime.
Zoho for your industry: Where business software meets industry knowledge
Generic business software has come a long way. Today, a good CRM, a solid finance tool, or a reliable helpdesk can transform how a business operates, and for many teams, that's exactly where the journey begins. But as businesses grow and deepen their roots in a particular industry, their needs grow more specific.Zoho has spent over two decades...
The 2026 State of AI Code Quality Report: Verification Is the New Bottleneck
AI-related production failures stopped being hypothetical some time ago. In our new research, 89% of organizations report having had an AI-related production incident, and only 3.7% of engineering leaders say their existing processes are sufficient to maintain quality and governance as agents take on more work. Today we’re publishing the 2026 State of AI Code […] The post The 2026 State of AI Code Quality Report: Verification Is the New Bottleneck appeared first on Qodo.
Jev, System One Models, and the Jevons Paradox: Why Cheaper Decisions Make Runtime AI Security Mandatory
Jev, System One Models, and the Jevons Paradox: Why Cheaper Decisions Make Runtime AI Security Mandatory TypeSafe AI’s September 15 announcement of System One Models and its first model, Jev, marks an important shift in how enterprises will use machine intelligence. Just as important, it does not stand alone. TypeSafe coined the System One label, but other vendors are already shipping comparable low-latency, structured-decision APIs. One example is milliseconds.ai, which describes itself as “sma
Private 5G Could Hit $84.7B as AI Moves to the Edge
$84.7 billion in private LTE and 5G network spending by 2031, up from $17.3 billion this year. I read that as a forecast of something other than revenue. It is a forecast of how many things will be connected, and of how different those things will be from each other. AI is what changed the […] The post Private 5G Could Hit $84.7B as AI Moves to the Edge appeared first on OneLayer.
Your SIEM Has a Credential Risk Blind Spot. Now You Can Close It.
Dashlane Omnix® sends browser-native credential risk telemetry into Microsoft Sentinel, Splunk, Panther, Datadog, and CrowdStrike. The post Your SIEM Has a Credential Risk Blind Spot. Now You Can Close It. appeared first on Dashlane Blog
Fake Claude Max giveaway hides a Google account phishing trap
A convincing offer of a free Claude Max subscription uses a fake browser window to steal Google login information.
Inside NINA: Zynap’s Multi-Agent AI Engine
NINA is live for every Zynap customer. Our multi-agent AI engine investigates the threats facing your organization in real time, tells you what to patch first and designs, builds and repairs the workflows that respond. It works with the tools you already run, the agents you build and the models you choose, and you decide what runs on its own. The post Inside NINA: Zynap’s Multi-Agent AI Engine appeared first on Zynap.
The Sound Approach to Resilience: Turning Risk into Confidence with Cowbell Resiliency Services (CRS) and AI
With Cybersecurity Awareness Month kicking off next month, businesses of all sizes face a familiar challenge: digital risks evolve faster than traditional security checkups can track. Digital risks are real, but they are manageable with sound protection and proactive guidance. Cybersecurity isn’t just a policy you file away until a claim happens, but an ongoing […] The post The Sound Approach to Resilience: Turning Risk into Confidence with Cowbell Resiliency Services (CRS) and AI ap
Inside a Data Breach Investigation with Fidelis: Connecting Network, Endpoint, and Deception Evidence
See how Fidelis connects network, endpoint, and deception evidence to reconstruct attacks, determine breach scope, investigate data impact, and contain threats. The post Inside a Data Breach Investigation with Fidelis: Connecting Network, Endpoint, and Deception Evidence appeared first on Fidelis Security.
Unstructured Data Security: How to Protect Enterprise Files Across Hybrid Environments
Unstructured Data Security: How to Protect Enterprise Files Across Hybrid Environments Enterprise files are distributed across file servers, NAS, M365, SharePoint, and cloud storage. As a result, organizations often struggle to apply consistent security controls to sensitive information in hybrid environments. Unstructured data security addresses this challenge by protecting enterprise files according to [...] The post Unstructured Data Security: How to Protect Enterprise Files Across Hybrid Env
Secure External File Sharing: A Checklist for Regulated Enterprises
Secure External File Sharing: A Checklist for Regulated Enterprises External collaboration is inevitable. Enterprises regularly share their financial records, contracts, technical documentation, customer information, and other sensitive files with auditors, contractors, suppliers, and business partners. However, the real challenge is maintaining control once a file crosses organizational boundaries. For regulated businesses, secure external [...] The post Secure External File Sharing: A Checklis
How Concurrence governs clinical AI at a trillion-token scale with Unity Gateway
Healthcare AI has little margin for error. AI agents helping coordinate patient care...
AI Residency: Where Do Your Prompts, Embeddings and Enterprise Files Go?
AI Residency: Where Do Your Prompts, Embeddings and Enterprise Files Go? Enterprise AI causes more data movement than many organizations realize. While the source document may reside on a file server, NAS, SharePoint, or cloud storage, the information derived from it moves between extraction services, vector databases, AI models, command prompts, logs, and [...] The post AI Residency: Where Do Your Prompts, Embeddings and Enterprise Files Go? appeared first on FileOrbis.
What Is RDP? A Complete Guide to Remote Desktop Protocol and Its Uses
Imagine sitting at your kitchen table and opening files, running programs, and fixing settings on a computer in an office hundreds of miles away, just as if you were in front of it. That is what Remote Desktop Protocol makes possible every day for millions of IT teams, remote workers, and businesses. If you’ve ever […]
ShinyHunters claims FBI breach was revenge for “false” report
The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics.
How Is AI Reshaping Ethics & Compliance? From Regulatory Overload to Provable Ethical Behavior
For compliance professionals, the pressure is coming from every direction. AI regulations are multiplying (the EU AI Act, emerging state-level mandates, sector-specific guidance) and boards are no longer satisfied with “we have a policy.” They want proof: evidence that your compliance program is actually shaping behavior and building an ethical culture. Traditional manual processes can’t ... The post How Is AI Reshaping Ethics & Compliance? From Regulatory Overload to Provable Ethical Behav
Data Encryption Best Practices for Edge Environments
The news from the last few years is littered with stories about security breaches from electronic point-of-sale malware attacks on large US retailers, leaked online credit card payment details, sensitive defense documents being published, to celebrity private photos being stolen. Why is this happening, and are these organizations really following data encryption best practices? [...] The post Data Encryption Best Practices for Edge Environments appeared first on StorMagic.
Hugging Face Incident Puts Security Fundamentals in Spotlight
The recent Hugging Face incident has been widely discussed as an AI safety story. Public reporting focused on the notion that increasingly capable AI systems were able to identify and exploit vulnerabilities, expand their access beyond intended boundaries, and ultimately reach external systems. That framing is understandable because it touches on questions that have long […] The post Hugging Face Incident Puts Security Fundamentals in Spotlight appeared first on Forescout.
The Need for Smarter Network Security in the AI-Driven Era
In the Agentic-AI era, security decisions still depend on network fundamentals grounded in complete device intelligence and trusted guardrails. The post The Need for Smarter Network Security in the AI-Driven Era appeared first on Forescout.
Vijil Labs - A New Path to Scalable, Verifiable AI Governance
How do organizations deploy more agents with greater autonomy when oversight and audit are limited by human review? New Vijil research develops a neuro-symbolic approach that makes agent behavior auditable, oversight scalable, and flags policy violations more reliably than the strongest LLM-as-Judges.
Trust Is the Gate: The CISO Consensus Catches Up
We argued that what gates agent autonomy is not capability but trust. Mayfield's 2026 survey of 60-plus security leaders says the CISO consensus has caught up.
Rogue RMM Abuse: How Attackers Exploit Remote Access Tools
The Huntress SOC uncovered phishing attacks that trick employees into installing rogue RMM tools like ScreenConnect for persistent access. Learn how to spot it.
KnowBe4 Shuts Down Shadow AI with Agent Security Innovation
New Agent Risk Manager browser extension performs active discovery of new and unknown domains allowing security admins to block, warn or allow the sites
Introducing the Incode Age Center, which brings trust and transparency directly to end users
Introducing the Incode Age Center, a public resource on how online age verification works, what happens to your data, and what to do if a check fails.
Create ransomware-resistant backups to protect your files and digital life
Ransomware can turn family photos, tax records, schoolwork, and important documents into unreadable files within minutes. Criminals encrypt the data, demand payment for a decryption key, and may threaten to publish stolen information. Regular backups give you another recovery option. If ransomware damages the files on your computer, you may be able to wipe the […] The post Create ransomware-resistant backups to protect your files and digital life first appeared on Total Defense.
Ransomware Group medusalocker Hits: Abv
Summary In the latest cybersecurity news, Abv — an organization based in BG — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group medusalocker Hits: Abv appeared first on HookPhish.
Ransomware Group medusalocker Hits: Seznam
Summary In the latest cybersecurity news, Seznam — an organization based in CZ — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group medusalocker Hits: Seznam appeared first on HookPhish.
Ransomware Group medusalocker Hits: Aokkef
Summary In the latest cybersecurity news, Aokkef — an organization based in FR — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group medusalocker Hits: Aokkef appeared first on HookPhish.
545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent
Autonomous security agents are getting good at finding bugs. Nobody has a good way to measure how good. Point one at a realistic target and what comes back is a report the agent wrote about itself: confident prose, a list of findings, and no way to tell which of them happened. Someone with a security background then sits down and checks every claim against the target. Which findings are real,
ISO 27001 automation: what you can automate, and what still needs a human
ISO 27001 automation uses software to run the repeatable parts of an information security management system (ISMS): collecting and validating evidence, drafting policies, scoring risk, monitoring controls, and mapping the work against the standard. The judgment calls stay with a person: whether a control is adequate, whether evidence is sufficient, whether a risk is acceptable. […] The post ISO 27001 automation: what you can automate, and what still needs a human first appeared on Copla.
Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ... The post Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks appeared first on Cycode.
Vendor Management Policy Template: How to Build One That Works
Most vendor management policies get written once, approved, filed in a shared drive, and never opened again until an auditor asks for it. That's not a documentation problem. It's a sign the policy wasn't built around how vendor decisions actually get made day to day, so nobody thinks to check it when a real decision comes up.
BlueKit and the Next Generation of Phishing Infrastructure
In April 2026, researchers called it “still in development.” By June, it was running 70 live hostnames a week and had doubled its template library to 87 brand impersonation kits. Eight weeks is not a long time in cybersecurity product development. It is, apparently, plenty of time to build a phishing operation. When Varonis Threat […] The post BlueKit and the Next Generation of Phishing Infrastructure appeared first on Allure Security.
Endpoint Cybersecurity Validation in 2026
In 2026, it's not enough for enterprises to have endpoint controls in place. They need to know they're correctly scoped, effective in their environments, and still working after the next change. The post Endpoint Cybersecurity Validation in 2026 appeared first on Remedio.
Priorisierung mit Kontext: Wie Enginsight den Environmental Score nutzbar macht
IT-Security-Teams arbeiten mit begrenzten Kapazitäten. Entwicklerzeit ist knapp, Wartungsfenster begrenzt und neue Schwachstellen erscheinen schneller, als bestehende geschlossen werden können. Unter diesen Voraussetzungen ist Priorisierung keine Frage des Komforts, sondern operative Notwendigkeit. Das meistgenutzte Werkzeug dafür ist der Common Vulnerability Scoring System Score, oder kurz: CVSS-Score. Was dabei selten hinterfragt wird, ist jedoch, dass CVSS […] Der Beitra
How to set up a company iPhone 18 Pro with UEM: the CEO wants it ready by Friday
How to set up a company iPhone 18 Pro with Apple Business Manager and UEM: automated enrollment, iOS 27 update deferral and corporate eSIM. H1 (already included in the article): How to set up a company iPhone 18 Pro with UEM: the CEO wants it ready by Friday. The post How to set up a company iPhone 18 Pro with UEM: the CEO wants it ready by Friday first appeared on Applivery.
Corporate & Industrial Espionage: What Is It? Cases, Detection & Prevention
Years of research and investment can fall into a competitor’s hands in a few clicks. Espionage targets the assets that give your business an edge and make your offering unique: product roadmaps, source code, formulas, chip designs, customer lists, and other trade secrets. To prevent espionage, it’s critical to ensure that your organization’s data is […]