InfoWatch Acquires Web Control DC Team and Rebrands sPACE PAM as InfoWatch Privilege Control
InfoWatch has expanded its product lineup with a privileged access management (PAM) system. The Web Control DC development team will join the group, and its flagship product sPACE PAM will continue under the new name InfoWatch Privilege Control.
The solution is intended to control accounts with elevated rights: system administrators, contractors, external specialists, and business users. Such accounts have access to servers, databases, network equipment, and critical applications, effectively holding keys to nearly all corporate resources. If an account is compromised or its owner decides to misuse privileges, the consequences can be severe.
According to InfoWatch data, around 40% of critical information security incidents in Russia in 2025 were connected to the leakage or unauthorized use of privileged accounts. Another 30% of confirmed cyberattacks occurred through the compromise of IT contractors.
InfoWatch Privilege Control is designed to limit and monitor access of such users to corporate infrastructure. PAM systems allow issuing privileges only for the required time, managing connections, and recording specialist actions so that an administrator account does not become a universal pass for attackers.
The original sPACE PAM system is included in the Russian software registry and certified by FSTEC Russia at the fourth trust level. The product is compatible with domestic operating systems Astra Linux, Alt, and RED OS.
At InfoWatch, the addition of PAM is described as a logical continuation of the data protection platform development. The company will now be able to control not only where information goes but also those who, by their position, are capable of taking it away.
Related articles
September 2026 AI Model Rankings: Fable 5.1 Tops Intelligence Index as Competition Tightens Across GPT-5.6 Sol, Grok 4.6 and Muse Spark 1.3
The beginning of September 2026 marked a rare moment when the list of top language models had to be almost entirely rewritten. Anthropic released Fable 5.1 and the limited Mythos 5.1, while Meta updated Muse Spark to version 1.3, Google introduced Gemini 3.8 Flash, and Alibaba refreshed Qwen3.8-Max. Existing models including GPT-5.6 Sol, Grok 4.6, Kimi K3, GLM-5.3 and DeepSeek V4 Pro remain competitive. Traditional rankings from smartest to least capable have become difficult because modern models operate in multiple reasoning-depth modes where low, high and max settings can differ by ten or more points on the same test. The market is better viewed as several overlapping races where Fable 5.1 leads in complex reasoning quality, GPT-5.6 Sol and Grok 4.6 deliver near-top performance at lower cost, and Muse Spark 1.3 excels in price-performance. Independent Artificial Analysis Intelligence Index scores, context windows, API pricing and tool-use capabilities now determine practical choices more than raw benchmark numbers.
Secure Custom Domain Setup for Client Status Pages Using CNAME, Certbot and Go Instead of ACME On-Demand
A detailed case study describes how a monitoring service implemented white-label status pages on customer domains without relying on ACME on-demand certificate issuance. The approach uses pre-validated domains stored in a database, background DNS checks via CNAME or A-record matching, and a root helper script running on a systemd timer to handle certbot issuance and nginx configuration. Key design choices separate privileges so the Go application never touches certificates or nginx directly, while loopback endpoints are protected against proxy header spoofing. The solution explicitly addresses risks such as DoS through malicious Host headers exhausting Let's Encrypt rate limits, private key exposure, and first-visitor latency during TLS handshakes. Hysteresis in DNS status prevents temporary resolution glitches from disabling active customer pages. The entire implementation stays under a few hundred lines of code and runs reliably on a single server with nginx in front of the Go application.
Durev VPN Accused of Plagiarizing Independent Researchers' Articles for Commercial YouTube Promotion
Independent Russian cybersecurity researcher zarazaexe has publicly accused the commercial VPN service Durev VPN of systematically copying technical articles about Russian internet censorship systems, messenger analysis, and government-issued certificates. The team behind Durev VPN allegedly rewrote the original research into YouTube video scripts, replaced first-person statements with references to their own specialists, and removed all attribution to the source author or project. One video titled СРОЧНО УДАЛИ СЕРТИФИКАТ МИНЦИФРЫ reportedly gained 795,000 views in two days, while the service's Telegram bot shows 260,000 users and charges a minimum subscription of 313 rubles per month. Specific copied elements include scanning results of 46 million Russian IP addresses that yielded 63,000 entries in TSPU whitelists, architectural descriptions of default-deny and fail-closed policies, ECH handling by DPI systems, and detailed reverse-engineering findings from the MAX messenger client. The researcher documented the reuse of his earlier errors about UDP blocking inside whitelists and identical analogies comparing root certificates to apartment keys. When confronted, the Durev VPN representative initially demanded patents, invoked fair use, and later claimed the matter would be reviewed by their lawyer within a week. The researcher published the full chat logs and removed the disputed segment from one video after the complaint.
Russia's Rassvet LEO Satellite System Enters Real-World Testing Phase
The Russian low-orbit satellite constellation Rassvet has moved from laboratory development into active field trials with real consumers across multiple regions. Bureau 1440, part of IKS Holding, has begun delivering satellite internet services and installed the first user terminal on a long-distance Russian Railways train. CEO Alexey Shelobkov stated that the project advanced to service validation in 2026, ahead of schedule, and will now test performance over large territories and in motion. The initiative aims to provide high-speed connectivity to remote areas, reduce the digital divide, and create an independent Russian hybrid communications system. Shelobkov emphasized that Rassvet is not merely a response to Starlink but a strategic necessity for sovereign infrastructure free from foreign hardware and policy dependencies. Roscosmos is simultaneously increasing engagement with private companies to commercialize space activities.