Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Gartner's latest research puts a hard number on the AI ROI gap — and a companion study shows layoffs aren't proof of value. The fix isn't another pilot; it's measurement. The post Gartner: Only 28% of AI Projects Deliver ROI. Here’s Why the Rest Don’t. appeared first on Olakai.
Two EU AI Act deadlines are converging this summer — a July 22 Code of Practice signing window and an August 2 enforcement date for chatbot disclosure and GPAI fines. Governance built after the fact won't hold up. The post The EU AI Act Is Now Enforceable. Is Your AI Governance Ready? appeared first on Olakai.
How our AI red teaming agent solved all five levels of GitHub's ProdBot challenge, one distinct exploit per level, and what defenders can take from it.
AI security can't rely on human-speed review. Learn why autonomous defense is coming and how the Behavior, Identity, and Control framework governs AI agents.
Unfortunately, even after years of championing a “build security in” mindset, many security professionals will tell you that it can still feel like security gets bolted on once a system is already live. We know the cost of addressing issues late in the cycle, which is why so many teams embraced DevSecOps and began weaving […] The post That’s a Great Question – AI Behaves Differently, How Should My Security Approach Change? appeared first on Noma Security.
Prevent prompt injection in coding agents with layered defenses: isolate untrusted input, scope tools, and enforce allow, block, redact at runtime.
Fiddler ingests GitHub Copilot's native OpenTelemetry export to give you visibility into every session, tool call, and token, with no SDK or custom code.
By Yogesh Ranade from Palo Alto Networks, and Senthil Ramakrishnan from AT&T The digital world is currently navigating a dual-speed revolution. Acceleration of AI and hyperconnectivity is unlocking unprecedented economic value. The … The post Palo Alto Networks and AT&T - Delivering Quantum-Resilient SASE Fabric appeared first on Palo Alto Networks Blog.
Executive Summary Threat actors continue to exploit tax-related themes to lure users into executing malicious payloads, particularly during tax filing periods when recipients are more likely to trust communications referencing financial obligations. In a recently observed campaign, attackers impersonate the Inland Revenue Authority of Singapore (IRAS) to distribute Overlord RAT through a multi-stage infection chain that […]
NIST vs SOC 2: What Highly Regulated Industries Look For – and Why Portal26 Exceeds the Bar If you sell software into finance, healthcare, insurance, utilities, or government, you already know the sales cycle doesn’t really start until security and compliance sign off. Two acronyms come up in almost every one of those conversations: NIST […] The post NIST vs SOC 2: What Highly Regulated Industries Look For – and Why Portal26 Exceeds the Bar appeared first on Portal26.
Independent Broadcom benchmark: Envoy AI Gateway adds ~2 ms latency under enterprise LLM load — Tetrate Agent Router Enterprise data plane.
Attackers went agentic. Your security architecture should too. A CISO's guide to headless, API-first defense.
Elastic has achieved the AWS AI Security Distinction, awarded to partners with tech depth and real customer outcomes in AI and security. Elastic Security includes an AI agent, Elastic Workflows, LLM security detections, and agentic SOC capabilities.
A few weeks ago, tens of thousands of people packed at Moscone for the Data + AI Summit, and a large share of the agenda touches governance. I spend my year in the rooms where governance stops being a keynote slide and becomes someone’s audit finding.   The question used to be: How do we govern […] The post Unity Catalog Can’t Govern Your Enterprise: Why Enterprises Need Governance Across Engines appeared first on Trust3 AI.
A few weeks ago, tens of thousands of people packed at Moscone for the Data + AI Summit, and a large share of the agenda touches governance. I spend my year in the rooms where governance stops being a keynote slide and becomes someone’s audit finding.   The question used to be: How do we govern […] The post Unity Catalog Can’t Govern Your Enterprise: Why Enterprises Need Governance Across Engines appeared first on Trust3 AI.
“We have a Shadow AI problem” is a sentence a CISO says a lot and rarely means precisely. It could mean dozens of unclassified tools […] The post Shadow AI, Caught in the Act: Inside Olakai’s App Catalog and Policy Alerts appeared first on Olakai.
A crafted cursor:// link installs an attacker-controlled MCP server that runs unsandboxed commands under your account, and the install dialog hides the payload.
Building agents is the easy part. Even building a cross-functional AI governance committee to define policies for deploying these agents is within reach for most organizations. What many organizations are contending with is dealing with the structural, functional and technical challenges to embedding governance across the full lifecycle of an AI agent.
Anthropic moves faster than most enterprises anticipated. A year ago, the primary concern was Claude Code: autonomous agents running on developer machines, writing and executing code, committing to repositories, invoking tools through MCP servers that nobody in security had approved. This was already a significant expansion of risk. Today, that surface is much bigger, and […] The post Securing Claude Ecosystem: How Noma Covers Every Claude Surface appeared first on Noma Security.
Elastic was named a Leader in the Gartner® Magic Quadrant™ for Observability Platforms. In our opinion, Elastic Observability helps teams investigate faster with agentic AI with full context and reduces costs with efficient metrics and logs storage.
Security teams have spent the last year bolting guardrails onto their AI agents. A recent attack shows why that is not enough on its own, and it points at a cleaner way to think about the problem.
Your security tool ROI stalls when no one has the hours to operate the stack. See how the Agentic SOC turns existing spend into value for your 2027 budget.
Attackers are targeting the LLMs and MCP servers your agents depend on. Polygraf covers AI supply chain security - what to avoid and how to protect yourself. The post AI Supply Chain Security: Protecting LLMs and Agents from Model Poisoning appeared first on Polygraf.
The direct win is being able to serve workloads that used to require dedicated, single-tenant endpoints at multi-tenant utilization instead. In Protopia's modeled deployment economics, that shift meaningfully lowers annual infrastructure cost for those workloads, since they're no longer sitting in underutilized carve-outs (actual savings depend on workload mix and scale). The post Private Token Factories: How Rafay and Protopia AI Let Sensitive Workloads Run on Shared GPU Capacity appeared first
Thousands of real-world exploits against coding, productivity, and first-party AI agents. The data, the named threats, and the STAR Framework defenders need. Join the waitlist to read it first.
In agentic AI, the model behaves and the user is legitimate. The weapon is the context the agent reads. Here is why we built the Straiker STAR Framework to map the agentic attack surface, and how it supplements the NIST AI RMF and OWASP.
How Tinfoil implemented prompt caching for the Inference API without compromising on privacy, using client-side cache secrets.
The inaugural STAR Labs report ran real exploits on AI agents. Among the findings: 91% of successful attacks on productivity agents left no trace.
Jul 14, 2026 - Lina Romero - We're exhibiting, Jeremy is speaking, and with the EU AI Act enforcement deadline now less than ten weeks out, the timing couldn't be better. Here's how to find us, what we're doing, and how to book time with the team.🤝 Meet the TeamThe best part of Infosecurity Europe is the people. Here is who will be holding down the fort at Booth G172. Come say hi!📅 Book a Slot at Our StandInfosecurity Europe gets busy fast. If you want guaranteed 1:1 time with the team, book i
Jul 14, 2026 - Lina Romero - FireTail is coming to Black Hat USA, and we're setting up at Mandalay Bay. Here's how to find us, what we're doing, and how to book time with the team.🤝 Meet the TeamThe best part of Black Hat 2026 is the people. Here is who will be holding down the fort at Booth 5908. Come say hi!📅 Book a Slot at Our StandBlack Hat gets busy fast. If you want guaranteed 1:1 time with the team, book in advance.Reserve your spot here🎙️ Don't Miss Jeremy's TalkEvery employee now has
Every risk and compliance leader eventually runs into the same wall: a problem specific enough that no vendor pitch deck covers it, and no amount of googling turns up someone who’s already solved it. That’s the gap Archer Summit is built to close. Join more than 1,000 risk and compliance leaders working through exactly those […] The post 7 Reasons to Attend Archer Summit 2026 appeared first on Archer.
AI has moved from something employees experiment with to something that runs inside core business systems. Models draft and review work, and agents, meaning software that can take actions on a person’s behalf such as querying a database or updating a record, now sit inside everyday workflows. For a CIO or CISO, that shift raises a familiar question in a new setting: how do you give the business the speed it wants from AI while keeping the control the enterprise requires? As we set out in our vie
The Sysdig Threat Research Team recently observed an attacker walk one credential through five Azure permission systems. In this blog, we’ll explore how.
AI security is more than model protection. Learn how to secure the full LLM attack surface from data pipelines to APIs and orchestration layers and defend against real-world AI misuse.
Enterprises are handing AI agents the keys to Snowflake, Salesforce, internal APIs, and private document stores, through a protocol that treats authorization as optional. This article explores why MCP Authentication Is Not Enough: Why Agentic AI Systems Need Fine-Grained Authorization. MCP confirms who an agent is. It says nothing about what that agent is allowed […] The post MCP Authentication Is Not Enough: Why Agentic AI Systems Need Fine-Grained Authorization. appeared first on Trust3
Learn what Claude Mythos is, how it could impact SaaS security, and the steps security teams can take to reduce emerging AI-driven risks.
Manifest Insights Agent (MIA) analyzes supply chain indicators against your real software inventory, delivering blast radius answers in seconds, not hours.
CRN just named the Silverfort Identity Security Platform a finalist in the 2026 Tech Innovators Awards. Finalists were selected for introducing truly innovative products that bring tangible value to customers. At the core of this recognition is what Silverfort has always been built upon: enforcing Identity Security inline, at runtime—the moment access is requested, not […]The post 2026 CRN Tech Innovators Awards: Silverfort named a finalist for Identity Security innovation appeared first o
Scale secure AI-assisted development in regulated industries. Learn how SonarQube and the AC/DC framework automate code verification and compliance.