0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

19 matching stories — incident, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Incident

CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access

Palo Alto Networks has released security updates addressing CVE-2026-0322, a high-severity remote code execution vulnerability affecting the management interface of PAN-OS. The flaw carries a CVSS 4.0 score of 8.6 and enables an authenticated attacker with network access to execute arbitrary code with root privileges on a vulnerable appliance/system. Palo Alto Networks disclosed the issue […] The post CVE-2026-0322: Actively Exploited PAN-OS RCE Flaw Enables Root Access appeared first on S

Palo Alto NetworksIndustry coverage
Incident

CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes

Fortinet has disclosed a critical FortiMail zero-day vulnerability that attackers are already exploiting in the wild. Tracked as CVE-2026-104286 and rated 9.8 on the CVSS scale, the flaw enables an unauthenticated remote attacker to write arbitrary files to the underlying system by sending specially crafted HTTP or HTTPS requests. The vulnerability poses a significant risk […] The post CVE-2026-104286: Critical FortiMail Zero-Day Exploited for Unauthenticated File Writes appeared first on

FortinetIndustry coverage
Incident

Privacy Incident Response Readiness: A 12-Step Program

Build privacy incident response readiness with 12 practical steps for governance, data visibility, safeguards, regulatory analysis, and defensible decisions. The post Privacy Incident Response Readiness: A 12-Step Program appeared first on RadarFirst.

RadarFirstVendor blog
Incident

CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Series Firewalls

Palo Alto Networks has released security updates for a high-severity buffer overflow vulnerability affecting PAN-OS software. Tracked as CVE-2026-0310, the issue resides in XML processing functionality and can allow an unauthenticated remote attacker to cause a denial-of-service condition on VM-Series firewalls or execute arbitrary code with root privileges on vulnerable PA-Series hardware firewalls. The flaw […] The post CVE-2026-0310: PAN-OS Buffer Overflow Can Enable Root RCE on PA-Seri

Palo Alto NetworksIndustry coverage
Incident

CVE-2026-50522: Critical Microsoft SharePoint RCE Exploited in the Wild — Detection and Mitigation Guide

Executive Summary Microsoft patched CVE-2026-50522 in its July 2026 security updates and scored this vulnerability as Critical (CVSS 9.8). Microsoft said that this vulnerability was discovered and reported by security researcher “splitline” from DEVCORE. On July 20, watchTowr identified publicly available proof-of-concept (PoC) exploit code for this vulnerability. Within hours, its global honeypot network, Attacker […]

GuruculVendor blog
Incident

RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726)

TL;DR Noma Labs found a critical (10 CVSS) vulnerability in Ruflo, an open source AI agent orchestration platform with more than 67,000 GitHub stars at the time of this writing and ranked #2 on MCPMarket. Ruflo ships with a chat UI, agent swarms, persistent memory, and MCP-based tool calling. The platform’s MCP Bridge, the Express.js […] The post RufRoot: The MCP Bridge Vulnerability That Turns Agents Into Rogue Admins (CVE-2026-59726) appeared first on Noma Security.

Noma SecurityVendor blog
Incident

The Great (Sandbox) Escape – Analyzing the OpenAI and Hugging Face Security Incident

What began as an internal benchmark evaluation has quickly become another watershed moment in cybersecurity history. An autonomous AI agentic framework initiated a full-scale attack against Hugging Face, executing a multi-stage intrusion end-to-end at machine speed and all without human direction or manual oversight. Beyond displaying the raw power of next-generation models, this incident revealed […] The post The Great (Sandbox) Escape – Analyzing the OpenAI and Hugging Face Securit

Noma SecurityVendor blog
Incident

CVE-2026-45659: Authenticated SharePoint Remote Code Execution Vulnerability Moves from Patch Tuesday to Active Exploitation

Executive Summary Microsoft addressed CVE-2026-45659, an authenticated remote code execution (RCE) vulnerability affecting on-premises Microsoft SharePoint Server, as part of its May 2026 security updates. The vulnerability stems from improper validation of untrusted data during deserialization, enabling an authenticated user with Site Member permissions to execute arbitrary code without requiring administrative privileges. Microsoft assigned the vulnerability […]

GuruculVendor blog