Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Inside Astaroth's New Spambot Component
Duo Alternatives: Comparing Multi-Factor Authentication (MFA) Solutions for Higher Security
Every organization requires a different approach to Multi-Factor Authentication (MFA). Depending on the size, complexity, and sensitivity of an organization’s data, the requirements of an MFA solution can vary significantly. To provide the necessary level of cybersecurity protection, a tailored approach to MFA is often necessary.   Among the leading players in the MFA market, Cisco […]The post Duo Alternatives: Comparing Multi-Factor Authentication (MFA) Solutions for Highe
Palo Alto Networks Achieves Global CBPR and PRP Certifications
Our mission is to be the cybersecurity partner of choice, protecting our digital way of life. Fulfilling that mission demands that we continually ensure our customers’ trust and instill confidence in our … The post Palo Alto Networks Achieves Global CBPR and PRP Certifications appeared first on Palo Alto Networks Blog.
Shadow AI Is an Incident-Management Problem Hiding in Plain Sight
Learn why shadow AI and hidden subprocessors create serious response gaps and how structured AI incident management strengthens compliance readiness. The post Shadow AI Is an Incident-Management Problem Hiding in Plain Sight appeared first on RadarFirst.
What Microsoft MDASH and Project Perception Mean for Defenders
On July 27, 2026, Microsoft introduced a set of products that move its security portfolio from models that answer questions to agents that carry out multi-step work on their own. For security leaders, the announcement is worth understanding in some detail, because it signals how the largest platform vendors now expect defensive operations to run, […] The post What Microsoft MDASH and Project Perception Mean for Defenders appeared first on Noma Security.
Skipping the lock: A Claude Code CLI weakness lets any macOS process read stored credentials
Silverfort Research. We reported this to Anthropic under coordinated disclosure. This post is the defensive companion: how the weakness works, and how defenders catch it. The post Skipping the lock: A Claude Code CLI weakness lets any macOS process read stored credentials appeared first on Silverfort.
Stateless MCP: A Step-by-Step Guide for Clients
MCP goes stateless on 2026-07-28. The day-one checklist of what your MCP client must handle: discovery, token lifecycle, MRTR, tasks, and third-party auth.
The risk hiding behind exposed MCP servers
How unauthenticated Model Context Protocol (MCP) servers are opening doors to sensitive cloud data, IAM, and command execution.
Build or Buy: The Arithmetic on Running Your Own Model
From the AI ROI Series, recorded 28 July 2026. Two things happened that week, and they are more connected than they look. Visa cut 2,600 […] The post Build or Buy: The Arithmetic on Running Your Own Model appeared first on Olakai.
What’s New in Scytale Q2 2026
Explore the latest updates in Scytale's AI GRC platform - Smarter Scy, AI Questionnaires, ROPA, AI TPRM, and more. The post What’s New in Scytale Q2 2026 appeared first on Scytale.
Seeing What Attackers See: External Attack Surface Management Changes the Exposure Game
A Fortune 100 retailer found a subdomain they’d forgotten they owned. It wasn’t just exposed. It had already been taken over by an attacker. And their existing attack surface tool had never surfaced it. That story stuck with me because I hear a version of it constantly. Security teams start with alerts or known vulnerabilities. […] The post Seeing What Attackers See: External Attack Surface Management Changes the Exposure Game appeared first on Infoblox Blog.
Scaling AI-assisted development in US financial services without losing control
Learn how AI-assisted development helps US financial institutions deliver software faster while maintaining security, quality, and FFIEC-aligned controls.
CLI vs. IDE: How to choose the best environment
Choose the AI coding environment that fits your style and use SonarQube to keep code quality, security, and reliability consistent everywhere.
MCP's Sessionless Release Candidate: What It Means for Security
CodeIntegrity examines the runtime controls that keep MCP workflow handles in agent context from becoming permission.
Must-See AI Security & LLM Exploitation Talks at Black Hat 2026
Discover the biggest AI security talks from Black Hat USA 2026 covering AI agents, prompt injection, LLM exploits, AI red teaming, defenses, and more.
Sensitive Data Is More Than PII: The Blind Spot in Enterprise AI Security
Runtime Data Security for Agentic AI: 6-Part Series Part 1: Why Traditional DLP Breaks in Agentic AI Part 2: Beyond Masking: The Challenge of Safe Data Reveal Part 3: Authorization Is No Longer Static Part 4: Why Simple Masking Kills AI Accuracy Part 5: Sensitive Data Is More Than PII ← You are here Part […] The post Sensitive Data Is More Than PII: The Blind Spot in Enterprise AI Security appeared first on Protecto.
The Hugging Face Breach: The First Real Agentic Attack - FireTail Blog
Jul 28, 2026 - Jeremy Snyder - If you've been anywhere near cybersecurity social media this week, you've seen the story: Hugging Face got breached, and the attacker turned out to be an OpenAI model, running as an autonomous agent, during an internal capability evaluation. I don't say this lightly: this is probably the single biggest AI security story of the year so far, and I think it's worth slowing down and actually walking through what happened, because the headlines are going to undersell th
Black Hat Will Be Loud About AI: Here Are 5 Signals Worth Listening For
Black Hat USA 2026 runs August 1-6 in Las Vegas, with an AI Summit on August 4 focused on how AI is reshaping both digital defense and the threat landscape. CISOs and defenders will hear a lot about AI while we’re there. Some of it will be useful. Some of it will be breathless. Some […] The post Black Hat Will Be Loud About AI: Here Are 5 Signals Worth Listening For appeared first on Noma Security.
CISA Demands Federal Agencies Secure Their SaaS
Accelerating CISA BOD 26-04 Vulnerability and Triage Activities through Wiz
Wiz enables organizations to continuously assess environments against the CISA KEV catalog, automating risk prioritization, rapid remediation, and forensic triage workflows.
AI Tools for GST Department: Strengthening Indirect Tax Enforcement in India
‘GST department AI tools’ refer to the connected set of technologies India’s indirect tax administration now uses across the entire taxpayer lifecycle, biometric and risk-based verification at registration, machine learning based anomaly detection during return filing, and centralised analytics for audit and enforcement targeting. These aren’t isolated tools bolted onto an old system; they form […] The post AI Tools for GST Department: Strengthening Indirect Tax Enf
What the NVIDIA Open Secure AI Alliance Means for Organizations
Last week’s Hugging Face incident is the kind of event that should make every professional using AI tools stop and pause. As we said in our write up on the event, Hugging Face, one of the world’s largest hosts of open-source AI models and datasets, was subject to a breach of previously unseen severity when […] The post What the NVIDIA Open Secure AI Alliance Means for Organizations appeared first on Noma Security.
What Is De-Tokenization? How Does Secure Token Redemption Work for PII and AI Workflows?
Learn what de-tokenization is, how token redemption works, and how data tokenization, reversible tokenization, and token vaults secure enterprise AI. The post What Is De-Tokenization? How Does Secure Token Redemption Work for PII and AI Workflows? appeared first on Protecto.
Branch61G Weekly | Stolen trust, valid looking sessions, and AI grinding the interior (Week 1)
Branch61G Weekly for July 28, 2026, the first issue: a critical SharePoint deserialization flaw where stolen machine keys survive the patch, Qilin ransomware entering through a PAN-OS authentication bypass, an AI agent running unattended against Thailand's Ministry of Finance, and the confirmed Fairlife breach by Anubis.
AI Gateway vs. AI Control Plane: What Enterprise Teams Need to Know
AI control plane vs. AI gateway: see how each layer works, why gateways can't govern agents, and which one your enterprise actually needs.
Elastic Cloud Serverless: Ongoing multicontinent expansion
Elastic announces the availability of Elastic Cloud Serverless in two additional Azure regions and two additional Google Cloud regions. Elastic meets customers where their data is — all around the globe.
When AI Connects to Health Records, Privacy Governance Must Become Incident-Ready
As ChatGPT connects to health records, healthcare leaders need unified AI and privacy incident management to assess risk and respond defensibly. The post When AI Connects to Health Records, Privacy Governance Must Become Incident-Ready appeared first on RadarFirst.
Executive Guide: Securing Microsoft Copilot Deployments
Quick Guides
Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender
In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is [...] The post Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender appeared first on Wallarm.
What retail enterprises should demand from an AI control plane
AI agents are already repricing products, replenishing inventory, and triaging contact center queues in production, and many are touching customer purchase history and pricing engines before any policy exists to …
What financial services firms should demand from an AI control plane
AI agents are already in production at financial services firms, and many are touching customer data and regulated records before any governance policy exists to control them. Our new AI …
Opsin Now Governs Claude Deployments Through Claude's Compliance API
News
Opsin Reports Strong 2026 Momentum in Enterprise Agent Security
News
CISA Demands Federal Agencies Secure Their SaaS
How to Build a Data Classification Policy for AI Systems
AI systems process every classification level simultaneously. Polygraf wrote a guide to building a data classification policy that actually governs your data. The post How to Build a Data Classification Policy for AI Systems appeared first on Polygraf.
Zero Consent Screens: An EMA x MCP Conversation
Aaron Parecki and Paul Carleton join Arcade.dev on Enterprise-Managed Authorization (EMA) — the path to MCP auth with zero consent screens.
Why We're Still Betting on MCP
The July 28 MCP release goes stateless, hardens auth, and makes extensions first-class. Why Arcade.dev is betting harder on MCP and the protocol debate is over.
Atlas: Wiz's autonomous AI Agent for vulnerability research, ranked #1 on CyberGym
See how Wiz built Atlas, an autonomous AI system for vulnerability research that validates every finding with a real, working exploit.
ISO 42001 Compliance: The path to operationalizing agentic AI
How can engineering and development teams prove to security, legal, and compliance teams they have done the hard work to assure agents are trusted and they have been assessed for adversarial robustness before deployment, and that a monitoring system is in place to respond when trust degrades and failures happen - whether because of performance, accuracy, drift, and bias issues?