Install
Find security products fast
Compare specs and reviews
The shopping search collects product pages, reseller listings, vendor datasheets, and verified reviews for security hardware, software, and services. Use it to compare products, check compatibility, and find pricing and licensing details specific to security use cases.
Latest Shopping News
PaperCut AI Swarm Attack Breaches 395 Orgs [2026]
4+ hour, 53+ min ago (416+ words) Silverfort frames the incident as a warning specifically about identity security. Its analysis argues that automated, AI-driven credential harvesting and lateral movement can escalate to domain-admin control far faster than most organizations’ detection and response processes are built to handle,…...
FudModule Rootkit Hides 5 Weeks via CVE-2026-68820
10+ hour, 23+ min ago (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...
The Chain That Opened the Crisis: How SonicWall SMA1000’s First Zero-Day Turned VPN Appliances Into MFA Harvesting Machines
3+ hour, 56+ min ago (129+ words) CVE-2026-15409 chained SSRF and code injection to achieve root on SMA1000 appliances, stealing TOTP MFA seeds and turning the VPN gateway into a persistent surveillance platform. CISA flagged it for ransomware exploitation. We covered the second chain but never the first…...
Check Point VPN CVE-2026-85102 and CVE-2026-85103: Early Warning for Pre-Authentication RCE
11+ hour, 19+ min ago (1541+ words) 1. Basic Information Original Title: Dutch NCSC: Critical Check Point VPN flaws exploitation is imminent Source: BleepingComputer, Dutch NCSC, Check Point Published Date: 2026-09-12 Severity: High Basis for Severity: Both CVSS 9.8 vulnerabilities allow unauthenticated remote code execution. Although the reference materials do…...
Automox Launches AI-Speed Cybersecurity Vulnerability Mitigation Pipeline to Reduce Exposure for Unpatchable Vulnerabilities
3+ day, 7+ hour ago (295+ words) AI-powered Automox Worklet™ generation closes the time window between AI-speed cybersecurity vulnerability disclosure and exposure mitigation: built to mitigate at AI speed, vetted by humans, turning vulnerabilities into verified endpoint action even when a patch isn't the immediate fix. These…...
Dutch NCSC says Check Point VPN flaw exploitation is imminent – 4sysops
19+ hour, 28+ min ago (25+ words) The Dutch NCSC now expects attackers to target two critical Check Point VPN flaws soon, despite no public proof-of-concept exploit. The warning raises the urgen...
BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days
2+ day, 2+ hour ago (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...
The PaperCut Pipeline: How Two Vulnerabilities Became an Automated RCE Factory
1+ day, 3+ hour ago (148+ words) Two PaperCut vulnerabilities are now chained into a fully automated attack pipeline with in-memory persistence—and 47% of installations can't patch. On August 26, security researchers at Huntress identified anomalous activity in customer logs involving base64-encoded commands like whoami and tasklist. This…...
Memory64 moved the browser ceiling and exposed an ABI gap
1+ day, 9+ hour ago (364+ words) A 32-bit WebAssembly heap put the browser playground near a 4 GB ceiling. With weights and AdamW state, that limited the fp32 model size to roughly 250 million parameters. Compiling the same C++ source with Memory64 and BigInt support changed the pointer width. One…...
Once in a BlueMoon: How a Chrome Patch-Gap Turned Three V8 Zero-Days Into an Espionage Kit
1+ day, 11+ hour ago (65+ words) Three V8 bugs, individually medium-severity, chain into SYSTEM-level access through the patch-gap window. Four espionage clusters adopted the kit within days. The structural shift: browser-based AI agents inherit the same attack surface. Heath Callahan Trust, Identity & Security All stories by Heath…...