IRONSCALES Names Laura Beaulieu Chief Marketing Officer to Scale Its Agentic Email Security Platform
2026 October 20
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,023 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
From Phishing to LLMjacking: Threat Actors Targeting Cloud Billing Accounts for LLM Usage
How a single Google Search ad click leads to credential theft, hijacking of cloud billing account, and hundreds of thousands of dollars incurred in unauthorized AI API usage
Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds
One of eMudhra's certificate authority private keys is the number 4.Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from
The Real Jump Scare Isn’t the Attacker; It’s The Vulnerabilities You’re Focusing On
Key Takeaways Teams are remediating more than ever, but exposure from the vulnerabilities that matter is still rising faster than they can keep up with. Mean time to exploitation is about −7 days. Mean time to remediate sits around +30 days. Qualys research: closures rose from 73M (2022) to 473M (2025) – 6× – while […]
From Users to Agents: AI Identity & Saviynt Zuma Review
The Identity Explosion More Systems and Hybrid Deployment Agents As a New Identity Type We have more identities, more identity types, and more systems integrated into the identity and access management (IAM) feature set than ever before. From workforce (B2E) to external (B2C and B2B) and non-human identity (NHI) covering workloads and machines. The rapid rise in AI adoption has also created new requirements for agentic identity and access management.
Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software
The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the
AI in AppSec: What to Build vs. Buy | Endor Labs
Building AI security agents in-house? Learn what to build, what to buy, and what it costs at scale, with a four-level model for the agentic SDLC.
US Agencies Detail Incident Response Practices for Rogue AI Agents
NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents. The post US Agencies Detail Incident Response Practices for Rogue AI Agents appeared first on SecurityWeek.
Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Rogue AI Agents: Risks, Detection, and Controls
Learn how rogue AI agents cross security boundaries and how to detect unknown agents, limit permissions, and enforce continuous identity-first governance.
Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
There's only so much code: the rise in vulnerability numbers
The September Microsoft Patch Tuesday release included 975 vulnerability advisories. This month, 1,415 vulnerabilities were just dropped. Compared to a pre-June average of 100 a month, that increase is staggering. Where did they come from? And what does the future look like?
What Is an AI Kill Switch? Where It Lives Decides Whether It Works
8 min readOver a few weeks in September, three security vendors launched “kill switches” for AI agents. California’s governor ordered state officials to study requiring one. And a bipartisan bill has been introduced in Congress called the AI Kill Switch Act. Everyone, it seem, is talking about kill switches. Far fewer agree on what one is, or […] The post What Is an AI Kill Switch? Where It Lives Decides Whether It Works appeared first on Aembit.
Why the Tools You Already Own Won’t Make You PQC-Ready
Source scanners, SBOMs, certificate managers and questionnaires all answer a different question — and none of them inspects the software that shipped.
Introducing Zuma for Apps: Action Governance for AI Agents
Protect, govern, and understand AI agents and non-human identities operating inside your business-critical applications.
Zero Trust Network Isolation for Agentic AI: Lessons from Anthropic’s Sandbox Incidents
Once Upon a Codebase: An AppSec Bedtime Story | Endor Labs
A read-aloud story about AT, a forest of code that keeps growing, and his security mechs, plus a guide to the four levels of AI maturity for AppSec.
Take the practice exam first: 5 tips for acing security certifications
Rusty Newton shares a science-backed way to study for security certs: start with the practice exam, quiz yourself, study in short bursts, and plan exam day.
AI in GRC: Friend or Foe?
Originally published in Business Reporter Every executive leadership team is asking themselves the same question about artificial intelligence right now: is this a tool that makes us better, or a risk we haven’t fully priced in? In governance, risk, and compliance (GRC), that question directly impacts commercial performance. Get the answer wrong and a company... The post AI in GRC: Friend or Foe? appeared first on Hyperproof.
CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super intelligence systems
Three federal agencies, the National Institute of Standards and Technology, the National Security Agency and the Cybersecurity and... The post CISA, NSA, NIST urge safeguards, continuous monitoring, incident reporting for autonomous super intelligence systems appeared first on Industrial Cyber.
The Agent Kill Switch: How AuthMind Detects and Contains Rogue AI Agents
AuthMind now detects rogue AI agents by type and behavior and contains them across identity, network and endpoint, with your team in control. The Agent Had Valid Credentials The most dangerous AI agent in your environment probably isn't breaking any policy. It authenticates through your IdP with a valid token and reaches resources over approved paths. If someone has hijacked it or hidden instructions in a document it reads, it will keep doing exactly that on an attacker's behalf. Agents can...
How Do Financial Institutions Measure and Control Cyber Risk?
TL;DR: Financial institutions need to demonstrate that security controls are effective in production and that security investments reduce business risk. Across regulatory frameworks including NYDFS, OSFI, DORA, MAS and APRA, verified control evidence helps institutions demonstrate resilience and support accountable risk decisions. Aquasec connects runtime enforcement with FAIR based financial risk modeling, helping security leaders …
Protect Sensitive Data Without Breaking Your AI
How to leverage AI-powered governance without compromising security, accountability, or audit readiness. The post Protect Sensitive Data Without Breaking Your AI appeared first on ALTR | Automated Data Access Governance and Security.
AIUC-1: Turn Agentic AI Risk into Market Trust
Businesses across industries and geographies are racing to develop, deploy, and use AI. Winning responsibly means embedding compliance early, before regulators and clients demand it. Awareness of AI risk is high: 4 out of 5 companies that use AI are getting questions from customers about risk, and for good reason. Data breaches are expensive, but […] The post AIUC-1: Turn Agentic AI Risk into Market Trust appeared first on A-LIGN.
From Exposure to Evidence: Agentic AI and Blast Radius | Corelight
What if security teams could combine knowledge of which systems are vulnerable with evidence of how an attacker is actually moving through the network?
Horizon3 Surpasses $100 Million ARR, Marking a Key Milestone in the Shift to Continuous, Production-Safe Autonomous Security
Horizon3 has surpassed $100 million in annual recurring revenue, with ARR growing more than 120% year over year. The milestone reflects increasing adoption of the NodeZero platform, a channel-first growth strategy, and demand for continuous, production-safe autonomous penetration testing. Horizon3 also outlined its next phase of investment in sovereign cyber AI regions, critical infrastructure centers of excellence, and attack-defend AI learning loops.
How to Evaluate Software Composition Analysis Tools for Your AppSec Team
To evaluate software composition analysis tools, start with dependency coverage, vulnerability intelligence, SBOM and license support, CI/CD integration, and remediation workflows. Shortlist products based on your application stack, then run the same controlled tests across each platform. The right tool should identify relevant dependency risks, provide actionable evidence, and fit the way your developers resolve security findings.
IBM security advisory (AV26-1064)
Anti-Bribery Due Diligence on Agents: What Clients Expect
If you win oil and gas work in Latin America or the Middle East through a local agent, your energy clients will hold you responsible for how that agent behaves. Large energy companies write anti-bribery requirements into their supplier terms, and those requirements extend to the agents and partners you appoint.
Axiado Wins 2026 Top InfoSec Innovator Award for Bringing Cybersecurity into AI Infrastructure Silicon
The award recognizes Axiado’s hardware-rooted approach to securing AI infrastructure by embedding trust, platform management and AI-driven intelligence directly into silicon. The post Axiado Wins 2026 Top InfoSec Innovator Award for Bringing Cybersecurity into AI Infrastructure Silicon appeared first on Axiado Corporation.
Google Gemini 4 Argon: An evaluation
See how Gemini 4 Argon scores on a Java LLM coding benchmark, with an 85.66% pass rate and 193 vulnerabilities. Explore the full results on Sonar.
How to keep your architecture intact when agents write the code
Agents write the code, you own the architecture. Hear Matt Erman on enforcing architecture rules with fitness functions and independent verification.
Tenable Expands Open Security Ecosystem to Extend Exposure Intelligence and Accelerate AI Security Outcomes
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced the expansion of its open technology and partner ecosystem to accelerate integrated security workflows across the entire tech stack. Tenable OPEN for AI delivers validated, ready-to-use AI workflows, enabling organizations to use Tenable’s deep exposure intelligence with their preferred AI models, agents and tools. Tenable OPEN for AI launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, In
Identity Posture Assessment for Microsoft 365 | Managed ISPM
Build identity resilience with Identity Posture Assessment, an on-demand Microsoft 365 report that scores your identity defenses and shows how fast you can fix the gaps.
Introducing ITDR Lookback: Find Out Who Was in Your Microsoft 365 Tenant Before You Were
Attackers may be in your tenant before you connect it. Huntress Managed ITDR Lookback reviews 180 days of Microsoft 365 logins & our SOC acts on active incidents.
Pegasus Spyware Infection Confirmed on Serbian University Rector's iPhone Days Before Election
The iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student protest movement, was infected with NSO Group's Pegasus spyware in 2026, the Citizen Lab said on October 19. The finding came six days before Serbia's October 25 snap parliamentary election. The infection used a zero-click exploit, meaning Đokić did not have to tap a link or
Certificate of Insurance Tracking: Catch Lapses Early
The standard ACORD 25 certificate that most US subcontractors send you states that it is “issued as a matter of information only and confers no rights upon the certificate holder.” The certificate sitting in your files describes the vendor’s coverage on the day the broker issued it, and nothing on that page changes if the policy is cancelled, reduced, or left to lapse afterward.
Google may add your number to all your accounts: How to stop it
Android users report that Google automatically added their phone number to accounts they wanted to keep separate. Here’s how to check yours.
Varonis and Collibra: Improving Data Governance for Trusted AI
As organizations move faster to integrate AI, datasets are connected to models, agents, and analytics pipelines based on their metadata and lineage. But pressing questions often go unanswered: what’s sensitive, and who has access to it?
Your Application Can Log In Securely. What Data Should It Actually See?
A legitimate app can still see too much. Learn how to define what each workflow needs and keep its sensitive data access in check. The post Your Application Can Log In Securely. What Data Should It Actually See? appeared first on ALTR | Automated Data Access Governance and Security.