Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,171 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Compare RadarFirst and OneTrust across privacy operations, AI governance, incident management, and compliance workflows to find the right fit for your team. The post RadarFirst vs. OneTrust: Which Platform Fits Your Privacy and AI Risk Needs? appeared first on RadarFirst.
Cyber Defense Magazine has named Polygraf AI a Top InfoSec Innovator for 2026, in the Groundbreaking AI Usage Control for Security and Compliance category. The award was announced at CyberDefenseCon 2026 in Orlando. The post Polygraf AI named a Top InfoSec Innovator for 2026 appeared first on Polygraf.
Manage shadow AI risks in healthcare by connecting AI governance, privacy, and incident response to protect PHI and document defensible decisions. The post Shadow AI in Healthcare: Why Governance Must Include Incident Response appeared first on RadarFirst.
Oct 20, 2026 - Ayush Sethi - An AI agent with “read-only” access to Shane Mac's bank account posted his balances and spending into his company's executive Slack channel, under his name. Nobody asked it to. If a personal agent can do that to its own owner, what can the ones your employees have connected to your systems do to you?Shane Mac ran into an unexpected problem with his personal AI agents.Background: Beyond the HeadlinesWe covered this story on This Week in AI Security, and it really made
Six months ago almost nobody said “agent harness” out loud. Now the term shows up in LangChain’s docs, Microsoft’s Agent Framework, OpenAI’s engineering blog, and a steady stream of Reddit …
The intelligence exists. The watchlists exist. But getting an answer shouldn’t mean exposing everyone’s data or revealing who knows what. One hour until departure. The passenger manifest is finalized. The crew is ready. Hundreds of people are about to board. But there’s one question security authorities need answered first: Is anyone on this flight a... The post Is Anyone on This Flight a Threat? What If You Could Find Out Without Revealing a Single Name? appeared first on Dual
Cybersecurity researchers have released a proof-of-concept (PoC) exploit for a recently patched critical security flaw impacting Fortinet FortiSIEM that could result in arbitrary code execution. The vulnerability, tracked as CVE-2026-106173 (CVSS score: 9.4), is a critical path traversal flaw that could allow an unauthenticated attacker to execute unauthorized code or commands via specially
Palo Alto Networks has disclosed that it's continuing to observe exploitation of a now-patched security flaw impacting PAN-OS and Prisma Access by ransomware actors. The activity relates to CVE-2026-0257 (CVSS score: 7.8), an authentication bypass flaw that could be exploited by bad actors to set up unauthorized VPN connections. It was patched by Palo Alto Networks in May 2026 and was
Manifest Foreign Risk brings air-gapped software supply chain security to defense and government teams with contributor-level FOCI visibility.
News
Webcasts
Picture a security operations center (SOC) in the age of AI. Alerts are pouring in and AI agents are doing exactly what they were built to do: pulling endpoint telemetry, querying threat intelligence, searching identity logs, summarizing findings and opening cases. Then the AI workflows get slower, and suddenly token budgets are running low. Investigation […] The post Agentic Denial of Service Attack: The Emerging AI Risk Hiding in Plain Sight appeared first on Infoblox Blog.
The Missing Context behind Every Vulnerability Finding Vulnerability management teams rarely have too few findings. What they’re usually missing is context. A scanner can report that an IP address has dozens of critical vulnerabilities. Before anyone can act on that, someone still has to answer a more basic set of questions: What is this device? […] The post What if Your Analyst Could Just Ask? Connecting Tenable Findings to Infoblox Network Identity with MCP appeared first on Infoblox Blo
See how Gemini 4 Argon scores on a Java LLM coding benchmark, with an 85.66% pass rate and 193 vulnerabilities. Explore the full results on Sonar.
Agents write the code, you own the architecture. Hear Matt Erman on enforcing architecture rules with fitness functions and independent verification.
As organizations move faster to integrate AI, datasets are connected to models, agents, and analytics pipelines based on their metadata and lineage. But pressing questions often go unanswered: what’s sensitive, and who has access to it?
L’article From Signal to Decision: Why Cybersecurity Is Shifting from Volume to Impact est apparu en premier sur Gatewatcher.
L’article Du signal à la décision : pourquoi la cybersécurité passe d’une logique de volume à une logique d’impact est apparu en premier sur Gatewatcher.
L’article The Economics of Cybersecurity: Measuring What Really Reduces Risk est apparu en premier sur Gatewatcher.
AI agents act at machine speed with privileges no employee gets. Cyber Defense Magazine named Tenet Security a winner in the Top InfoSec Innovators 2026 awards for stopping harmful agent actions before they execute.
Staffing software giant calls in CrowdStrike as customers face login headaches and questions remain over possible data theft
LLM security breaks down across teams because AI arrives in many forms, policies live in many places and agents act after deployment. Here is the fix.
Open source Kubernetes projects for enterprise AI, covering training, scheduling, serving, LLM inference, packaging and policy, with each project's role.
AI model audit trails break at team handoffs, through version drift and when deployment context is lost. Here is how to close each gap.
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
A lead arriving in a CRM, a customer email that needs an answer, and a Linux server that has stopped serving traffic can all start an AI workflow. Each demands a different kind of ownership. The lead needs a reliable handoff. The email may need context and a draft. The server needs a named target, controlled access, an investigation, a decision about changes, and proof that the service recovered. The useful question for 2026 is what continuing work a system can take on. This guide follows six pl
Discover the top 10 CCPA compliance tools of 2026 to protect customer data and streamline compliance. The post Top 10 CCPA Compliance Tools in 2026 appeared first on Scytale.
In August, Andrew Bailey, chair of the Financial Stability Board, delivered a specific warning to G20 finance ministers: the immediate threat to global financial stability isn’t frontier AI itself, but frontier AI concentrated in a small number of third-party technology providers. His words to regulators were direct: “For the financial system, the most immediate concern […] The post Third-Party Concentration Risk Is Growing. Can Your Risk Program See It? appeared first on Arche
Learn what agent observability captures across application, session, agent, trace, and span levels, how it differs from APM and LLM monitoring, and how to standardize it.
Which teams use which AI tools, sanctioned or not, what data leaves and what risk it creates. Here's how an AI usage map gets built. The post How AiBC Maps Enterprise AI Usage: Tools, Teams, Data, Risk appeared first on Polygraf.
Understand AI agent risks and ensure reliable operations. Learn how to monitor AI agents with key metrics, real-time guardrails, and a control plane approach.
Using Claude Code, Desktop, or Cowork? See how an MCP gateway like Obot simplifies tool connections and gives teams consistent access controls and centralized audit logs. The post Claude and Obot: Consistent Access Across Claude Clients appeared first on Obot AI.
An agent has three parts you can control: the model, the harness that runs the model in a loop, and the context the model sees. Own all three and you …
Anthropic built Scion for an enormous monorepo handling more than 30,000 daily merges. Most teams can keep using Git, but AI coding agents are changing how source control, code review, and CI need to scale. The post Why Anthropic replaced Git, and whether you’ll need to appeared first on Arize AI.
Palo Alto Networks offers AI security across Prisma AIRS and AI Access Security. AI Access Security is delivered through Prisma SASE, while Prisma AIRS supports both network-intercept and API/SDK deployment paths. Buyers should evaluate which Palo Alto components and deployment modes their environment requires. Platform dependency is a common reason security and risk leaders evaluate... Read more » The post 6 best Palo Alto Prisma alternatives appeared first on WitnessAI.
Decision spans in Arize Phoenix record a tool router’s choice, alternative probabilities, and confidence. Here’s how we evaluated those decisions and used the results to set a fallback threshold. The post Agent tool selection: The tool your agent almost called appeared first on Arize AI.
When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published
Learn about ISO 42001 certification costs, key cost drivers, and practical ways to reduce expenses without compromising audit readiness. The post How Much Does ISO 42001 Certification Cost? appeared first on Scytale.
Generative AI is making privacy access requests easier to submit but increasingly complex for organizations to manage. As businesses face growing compliance demands, AI-powered data discovery, stronger governance, and privacy controls are becoming essential. Discover how enterprises can use AI to improve efficiency while protecting sensitive information.