Databricks Just Bought Its Way Into the SIEM War | Prophet Security
Databricks just acquired Panther to take on Splunk, CrowdStrike, and Microsoft Sentinel. Here's why the SIEM market won't look the same in 24 months.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The Mastra npm Supply Chain Attack: Hunting easy-day-js Before It Spreads | Prophet Security
When the Mastra npm supply chain attack hit, a targeted threat hunt turned JFrog's research into a yes-or-no answer for one environment in under an hour.
Cyber Hunting: A Practitioner Guide to Proactive Threat Hunting | Prophet Security
Cyber hunting is hypothesis-driven threat hunting done with purpose. Here is how a practitioner scopes, runs, and operationalizes a hunt that finds real threats.
Agentic Endpoint Risk: Enterprise Findings - Backslash
79% of assessed organizations lack agentic AI visibility. Explore Backslash’s enterprise findings on personal accounts, credential exposure, and endpoint risk.
The Agent Memory Maturity Model: From Session-Scoped to Organization-Wide Knowledge (2026)
Explore the agent memory maturity model, from session-scoped context to organization-wide knowledge, with practical stages for building scalable AI memory in 2026.
Inspectable Agent Memory: Why Humans Must Be Able to Read What Agents Remember (2026)
Learn why inspectable agent memory matters, how human-readable memory improves AI oversight, and what teams should consider for safer agent systems in 2026.
How to Build a Memory Architecture for Multi-Agent Systems (2026)
Learn how to build a memory architecture for multi-agent systems, including shared context, persistent memory, retrieval, access control, and scalable design patterns.
Runtime AI Defense in a shared responsibility model
An AI agent once deleted someone's entire inbox despite being told to confirm first. Not because it was malicious, but because the instruction didn't survive context compaction. Shantanu Gattani, Sysdig's SVP of Product, on why that gap is the real risk in agentic AI, and who should be responsible for closing it.
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
Why API Security Belongs in ECB Cyber Action Plans
Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
Least Privilege for AI Agents: A Practical Guide for Security Leaders
Key takeaways Least privilege for AI agents gives each agent its own identity and only the access a specific task needs, for only as long as that task runs. Human-centric access models break down for agents, which inherit user permissions, run on shared service accounts, and act at machine speed. OWASP names excessive permissions as a root cause of excessive agency. Scoping access at provisioning is only the start. Pair it with runtime enforcement, human approval for high-impact actions, and con
Decision model benchmark: Jev, Kev, Liquid d1, and more
On 15 September, TypeSafe released Jev, and within a few weeks about 10 companies had shipped something that works the same way. OpenAI, Liquid, Cloudflare, AWS and PostHog all launched one, and an open clone called Kev showed up on Hugging Face in between. If you build agents or run evals, you now have a... The post Decision model benchmark: Jev, Kev, Liquid d1, and more appeared first on Arize AI.
Private Registry: See What Your Agents Can Do
Arcade.dev's Private Registry turns your MCP gateway URL into a page employees can open to see every tool they have, run one, and request what's missing.
Scaling Agents Starts With Seeing the Whole Fleet
Twelve hundred agents coordinated covertly and none alerted a human. See the four ordinary gaps that let it run, and why single traces can't detect a swarm.
Discovering the AI hardcoded in your repositories - FireTail Blog
Oct 07, 2026 - Ayush Sethi - Everyone is hunting the AI tools employees signed up for. The models and prompts your own teams wrote into the code, with the keys to call them, are the half nobody is looking at.Point a scan at your repositories and the number tends to surprise people. Model calls hardcoded across services, prompts pasted straight into applications, and several of them in projects that shipped a year ago and belong to no one now.None of it was ever approved as AI to govern. It was c
New IT Research: Enterprise AI Access Is Outpacing Control
Six months ago, the AI question top of mind across most IT teams was about visibility. What are people using, […] The post New IT Research: Enterprise AI Access Is Outpacing Control appeared first on JumpCloud.
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Traditional DSPM and classification tools scan from the inside out. Thinking like an attacker, the Red Agent found a public page exposing sensitive data in minutes.
What is Smart Policing? Meaning, Technology & Examples in India
Smart policing is not just about putting CCTV cameras on streets or digitising police records. It is about using technology, data, trained personnel and connected systems to help police respond faster, investigate better, allocate resources intelligently and remain accountable to citizens. In India, the idea of smart policing has been around for more than a […] The post What is Smart Policing? Meaning, Technology & Examples in India appeared first on Innefu Labs.
Reducing agent costs with AgentMon
The Platform team spent $720 on agents in one week, against a budget of $650. AgentMon's cost view shows that $208 went to failed-call retries, abandoned sessions, and idle activity. That is 29% of the team's weekly spend.
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Encrypted instructions trick Copilot CLI into spilling developer secrets
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI), hides malicious instructions inside encrypted content. These instructions are treated as trusted context when Copilot CLI decrypts the content using its own code-execution environment, allowing them to influence what the agent does next. In a
Another ShinyHunters suspect arrested
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
AI data exposure isn't an IT problem. It's a leadership problem.
Most AI data exposure isn't a hack. It's a good employee pasting private data into a chatbot to get the job done, which is why the leaders who own that data need to own the fix.
CrowdStrike Named a Leader in the 2026 IDC MarketScape for Worldwide Modern Endpoint Security for Enterprises Vendor Assessment
Unknown Threat Actor Uses AI-Driven ARTEX to Target South Korean Finance
The Duck Song: Malicious Solidity Extensions Hide a Cross-Platform Payload in an MP4
Five malicious Solidity/Hardhat extensions; four hide a cross-platform payload in an MP4 that tries to install ScreenConnect or a persistent Go binary.
When 2,000 Agents Share One CPU
Elastic named a Leader in the 2026 Gartner® Magic Quadrant™ for Enterprise AI Search
Elastic was named a Leader in the 2026 Gartner® Magic Quadrant™ for Enterprise AI Search. We ranked #1 in the AI Automation Use Case in the companion Critical Capabilities report.
Virtual MCP Servers in Obot: One Endpoint for Every MCP Connection
Learn how virtual MCP servers (vMCPs) in Obot combine multiple MCP servers behind one endpoint with centralized configuration, profiles, and tool access. The post Virtual MCP Servers in Obot: One Endpoint for Every MCP Connection appeared first on Obot AI.
The Alice Labs Cyber RL Benchmark v0.1: Can AI replace a security analyst?
We tested 10 frontier models on 12 real cyber tasks with planted decoys and objective scoring. Who did the best job?
IBM Just Made Its AI Coding Agent Self-Hosted. The Layer That Governs It Has to Follow.
IBM made Bob, its agentic coding platform, self-hosted for on-prem, sovereign and air-gapped environments. The code stays home now. Here is why the system that measures and governs it has to follow. The post IBM Just Made Its AI Coding Agent Self-Hosted. The Layer That Governs It Has to Follow. appeared first on Olakai.
Straiker in Gartner® 2026 AI Cybersecurity Impact Radar
Straiker is listed in Gartner’s 2026 AI Cybersecurity Impact Radar for AI Security Testing and AI Security Platforms. See what it means for agentic AI security.
What agent traces can tell you without an LLM judge
Some agent failures are already in the trace. tracelint proves them on Phoenix OpenInference spans and fails CI, without an LLM judge. The post What agent traces can tell you without an LLM judge appeared first on Arize AI.
AI Crackdown by U.S. State Attorneys General
A coalition of 42 U.S. State Attorneys General is warning AI companies to add safeguards, audits, and accountability. Learn what this means for AI liability and compliance.
7 Subtle Sins of Agentic AI: Behavioral Risks
Agentic AI rarely crashes - it shifts. Learn the 7 subtle risks that emerge from autonomy and how to guide systems safely as they scale.
Data Policy in the RAG Pipeline: Stop 30 Years of Exposure
Every company is turning its document archive into a knowledge base for AI. Here's what changes when Protecto enforces data policy in the RAG pipeline, protected at ingestion, policy-rendered at retrieval, so the same precedent looks different to an adjuster and a customer. The post Data Policy in the RAG Pipeline: Stop 30 Years of Exposure appeared first on Protecto.
Vector Search Can’t Tell “Yes” From “No”
Learn why vector search can rank contradictory statements as similar, and how hybrid retrieval can help RAG systems identify conflicting information.
GitHub Copilot CLI vulnerability: Cryptographic Context Injection steals developer secrets
Cryptographic Context Injection against a coding agent: one encrypted page makes GitHub Copilot CLI send local secrets to an attacker in 28 seconds.
Deliver Preemptive Security at Scale: Protective DNS for MSSPs
Stop threats before compromise for every customer you serve. Enhanced multi-tenancy for Infoblox Threat Defense™ helps MSSPs deliver stronger, more scalable protection across every customer environment. Count the tenants your security operations center (SOC) carried this time last year. Then count them today. For most managed security service providers (MSSPs), the second number is meaningfully […] The post Deliver Preemptive Security at Scale: Protective DNS for MSSPs appeared first on In
Monitoring agent tools and sessions with AgentMon
A Jira login expires halfway through a coding session. The agent retries the same update 38 times, spends $41.20, and eventually stops without finishing. AgentMon records the failed calls and the session that contains them, giving the team enough detail to investigate what went wrong.