Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,326 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Revolut Compromised
UK fintech Revolut confirmed a breach of sensitive customer data, which quickly appeared on the darknet. DarkOwl breaks down what happened The post Revolut Compromised appeared first on DarkOwl, LLC.
Hackers Abuse YouTube Gaming Channels and SEO Poisoning to Deploy RATs and Chrome Hijacker
Cybercriminals are increasingly turning trusted online platforms into malware delivery channels. Gaming videos, software tutorials, search results, and file-download pages can all be manipulated to make malicious installers appear legitimate. According to Cybersecurity News, hackers abused YouTube gaming channels and search-engine optimization poisoning to distribute malware disguised as gaming tools, performance optimizers, drivers, and useful The post Hackers Abuse YouTube Gaming Channels and
The New OWASP GenAI Top 10 and Why Network Security Matters
Economic Zero: The Vulnerability Nobody Can Afford to Find
AI discovery turns vulnerability hunting into a purchasing decision. The budget runs out at the part that protects you. “Software will always have vulnerabilities you haven’t found” has held as a working truth for as long as anyone in security has had a job. Security programs took the assumption as a foundation: triage, rank, accept […] The post Economic Zero: The Vulnerability Nobody Can Afford to Find appeared first on Backline.
The Trust Layer: How Versa Delivers AI-Driven NetOps with Explainability and Zero Trust Guardrails
Your Help Desk Is Calling: Fake IT Support on Microsoft Teams
Security Advisory Your Help Desk Is Calling: Fake IT Support on Microsoft Teams Campaign Spring Ring Identities 26 Contacted 150+ Companies 10+ CVE / Patch None The Short Version Palo Alto’s Unit 42 published research at the end of August on a campaign they’re calling Spring Ring. Between January and April, someone registered a batch […]
The Illusion of the AI SOC
Why security copilots are stalling against machine-speed attackers and what genuinely autonomous defense requires instead. Talk to any CISO or SOC director off the record, and the confession is almost always the same: they bought into the generative AI hype, deployed a much-advertised “Security Copilot,” and now their analysts are simply babysitting another conversational chatbot. The post The Illusion of the AI SOC appeared first on Seceon Inc.
CVE-2026-76461: Critical Cisco Secure Email Gateway Zero-Day Enables Root RCE
Cisco has patched CVE-2026-76461, a critical zero-day vulnerability in Secure Email Gateway appliances that is already being exploited in the wild. The flaw carries a CVSS score of 9.8 and enables an unauthenticated remote attacker to execute arbitrary commands with root privileges on the underlying operating system simply by sending a specially crafted email through […] The post CVE-2026-76461: Critical Cisco Secure Email Gateway Zero-Day Enables Root RCE appeared first on SOC Prime.
IT Road industrialized digital trade integration and interoperability for an entire country
A North African Single Window operator wanted to fully digitalize its country’s foreign trade processes by building a nationally interconnected platform that brings together every stakeholder involved in import and export operations: ports, customs, banks, logistics operators, and government entities, …
IBM security advisory (AV26-922)
Meet the Expletive: Todd Bane, Director of Professional Services
Meet Todd Bane, Director of Professional Services at Expel. He came up through bank IT and the Pentagon, and he restores tractors.
Securing Mobile Business & BYOD Environments: A Comparison of Microsoft Intune and Soliton MailZen
It is an obvious fact that mobile devices are central to modern business operations. But giving employees and contractors secure […] The post Securing Mobile Business & BYOD Environments: A Comparison of Microsoft Intune and Soliton MailZen appeared first on Soliton Systems.
Making Google Workspace Work for Your Business: Security, Compliance, and More
Google Workspace is a popular alternative to Microsoft 365 for many organizations. Generally speaking, it’s simpler to set up and maintain, and the user experience The post Making Google Workspace Work for Your Business: Security, Compliance, and More appeared first on Corsica Technologies.
Cybersecurity Testing Methodologies Compared
The global average cost of a data breach reached $4.44 million in 2025, the first decline in five years. IBM attributes this largely to faster detection and containment, driven by AI-assisted security tooling and more mature incident response programs.¹ That decline is meaningful, but it does not erase the underlying question that keeps security leaders up at night: if an attacker came for your organization today, would your security program catch it in time? For buyers comparing cybersecurity t
What’s New in M365 for MSPs — September 2026
A roundup of the Microsoft 365 changes that matter most to MSPs this September, from a critical SharePoint Server security patch to new Copilot governance controls and a Power Apps price increase.
Exiger Executive Forum | The Rise of Autonomous Supply Chains
This Exiger Executive Forum examines what autonomous supply chains mean in practice. Leaders will explore AI-driven action, risk, security, and the balance between speed and control. The post Exiger Executive Forum | The Rise of Autonomous Supply Chains appeared first on Exiger.
We Can’t Stop the AI Race. We Can Make It Safer and More Secure.
This weekend, the AI industry had an unusual conversation about speed. To summarize, Anthropic CEO Dario Amodei argued that frontier... The post We Can’t Stop the AI Race. We Can Make It Safer and More Secure. appeared first on Skyhigh Security.
ScreenConnect's Worm-Like Flaw (CVE-2026-84869): Why Patching the Server Isn't the End of the Story
A critical ScreenConnect flaw is letting attackers turn active remote-support sessions into a worm. Here's what MSPs need to do beyond patching, and why the SOC layer matters once a rogue session has already run.
Microsoft DNS Vulnerability: Why Hybrid DNS Matters
Microsoft’s September DNS vulnerabilities highlight the limits of relying on a single DNS technology. Discover how Hybrid DNS and technology diversity can strengthen resilience while teams patch and validate affected systems. The post Microsoft DNS Vulnerability: Why Hybrid DNS Matters appeared first on EfficientIP.
Browser Extension Security: How to Manage Malicious and Abandoned Extensions
Your endpoints are managed. Your network is monitored. Your browser is not. This matters more than it used to. Applications, identity, SaaS access, and now AI tools all converge in the browser, yet most organizations still govern it the way they always have with default settings and good intentions. Nowhere is that gap more visible […]
VPN Kill Switch: What It Is, How It Works, and Why a Firewall Is Better
A VPN kill switch cuts your internet when the VPN fails, but most do it reactively after the drop has already happened. This guide explains how kill switches work, where leaks can still slip through, and why a proactive firewall offers stronger protection.
Operational Resilience: IT Security Risks with Reduced Staffing | Huntress
Reduced staffing during holidays changes more than headcount. Learn how operational resilience should shape your IT and security change decisions
Introducing Mecatl: the open cloud-native agent harness
Picture this: You’re a developer at a Fortune 100 organization. You recently decided to switch to building your own agent harness to reduce the rising token costs and to avoid …
Inside the OpenAI-RubyGems Incident: Did AI Agents Attack RubyGems?
Key Takeaways A May 2026 malicious package campaign forced RubyGems to suspend registrations and withdraw more than 500 gems. More than 2,000 packages were submitted in two days using accounts created with disposable email addresses. Packages abused RubyDoc.info documentation builds to run code on its servers and republish harvested web data. At least six packages tried stealing other users' API keys through a cache flaw fixed in July. Package names, shared target files, and explicit code commen
When Trusted Tools Turn Hostile: A Series of N-able Zero-Days Enables Multiple Threat Actors to Pre-Position Ransomware
Executive Summary CyberMaxx Threat Response Team observed threat actors abusing 0-day exploits in N-able N-central to gain unauthorized access to victim environments for impact. N-able N-central is a Remote Monitoring and Management (RMM) software which allows administrators to manage their environments at scale. This makes RMM tools highly attractive targets for attackers since gaining access […] The post When Trusted Tools Turn Hostile: A Series of N-able Zero-Days Enables Multiple Threa
A Good Good Golf Advertising Campaign Prompted Massive Backlash, Compounded By Executive and Organizational Missteps, Resulted in Damaging Brand Reputation Narratives
Quick Answers A co-branded video from Good Good Golf and Callaway prompted severe criticism and consumer backlash over its depiction of violence against a woman, followed by apologies, terminated partnerships, lost retail distribution, and leadership changes. What began as a creative decision quickly became a dispute over who approved the content, who was responsible for […] The post A Good Good Golf Advertising Campaign Prompted Massive Backlash, Compounded By Executive and Organizational
Moving to the New Password Vault: What Changes and How to Migrate
Introducing JumpCloud Password Vault, a unified enterprise password management solution for secure credential management, seamless migration, and centralized access. The post Moving to the New Password Vault: What Changes and How to Migrate appeared first on JumpCloud.
Beyond AI Agent Detection: Verify the Human Behind the Agent
An AI agent requests a change to a customer’s bank account recovery details. Its signature is valid.
DLP for Financial Advisors: Meeting FINRA and SEC Recordkeeping Rules Without Slowing Down Client Communication
Table Of Content What Do FINRA and SEC Recordkeeping Rules Actually Require? How Does Endpoint DLP Close the Off-Channel Gap […]
DLP for Financial Advisors: Meeting FINRA and SEC Recordkeeping Rules Without Slowing Down Client Communication
Table Of Content What Do FINRA and SEC Recordkeeping Rules Actually Require? How Does Endpoint DLP Close the Off-Channel Gap […]
DLP for Financial Advisors: Meeting FINRA and SEC Recordkeeping Rules Without Slowing Down Client Communication
Table Of Content What Do FINRA and SEC Recordkeeping Rules Actually Require? How Does Endpoint DLP Close the Off-Channel Gap […]
7 Years, 55 HIPAA Enforcement Actions: What OCR’s First Right of Access Fine Still Teaches Healthcare Providers
Part 1 of 2: We revisit where OCR’s HIPAA Right of Access enforcement began and what enforcement action #1 still teaches healthcare providers today. Seven years ago this month, an $85,000 settlement launched OCR’s HIPAA Right of Access enforcement initiative. 55 enforcement actions later, the compliance lesson remains remarkably familiar. In 2019, then OCR Director […] The post 7 Years, 55 HIPAA Enforcement Actions: What OCR’s First Right of Access Fine Still Teaches Heal
8090 AI Alternatives: 5 Software Factory Platforms Compared
TL;DR: What Is 8090 Software Factory? A code-completion tool finishes the line you’re typing. A software factory decides what should...
Sisterhood of the Traveling Packets: How 1,300 Practitioners Hacked a Ransomware Gang’s Leak Site (Flare CTF Writeup)
With women comprising approximately 22% of the global cybersecurity workforce, organizations like Women in CyberSecurity (WiCyS) are actively working to close the gender gap. As a proud partner of WiCyS, we joined forces with SANS Institute to bring the “Sisterhood of the Traveling Packets” CTF to life. Inspired by the power of community, solidarity, and […] The post Sisterhood of the Traveling Packets: How 1,300 Practitioners Hacked a Ransomware Gang’s Leak Site (Flare C
AI-Enabled Budget Justifications for Federal Agencies
For more than 57 years, MANTECH has been at the forefront of national security and digital transformation, serving Defense & Space, Intelligence & Homeland Security, and commercial clients. MANTECH's Financial Management practice has delivered more than $1 billion in cost savings to federal clients, eliminated over 500 hours of annual manual data entry, and retired 15 legacy systems since 2015.
“Like the Smartphone of Supply Chain”: Exiger CEO Brandon Daniels on AI Transformation of 1Exiger Platform
The post “Like the Smartphone of Supply Chain”: Exiger CEO Brandon Daniels on AI Transformation of 1Exiger Platform appeared first on Exiger.
ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell
Your Mac runs a vulnerable version of Parallels Desktop. A malicious package, compromised CI job, or other unprivileged process is already running on it. No admin access. No Parallels-signed client. One appliance-install request later, attacker-controlled code runs as root. While testing Desktop 26.4.0 (build 57513) on Apple silicon, we found that an unprivileged local user …
Encryption Grows Up: Five Technical Shifts That Reduce Risk and Workload
For heads of operational risk and the teams running secure communications day to day, the definition of “encrypted” has shifted. It is no longer enough to scramble a message and… The post Encryption Grows Up: Five Technical Shifts That Reduce Risk and Workload appeared first on Echoworx Email Encryption.
The Forgotten Attack Surface: How Old Assets Create New Cyber Risk
Expired domains, dormant accounts, forgotten SaaS integrations, and test environments can retain trust and access long after their original purpose ends. Learn how these overlooked assets create cyber risk.