Bank Examination Evidence That Satisfies Model Risk Review
Learn what bank examination evidence satisfies model risk review, from inventory and validation to AI monitoring trails examiners reperform.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Bring your own key to existing Elastic Cloud deployments
Enable BYOK on existing Elastic Cloud Hosted deployments: encrypt data and snapshots with your own KMS key, in place, without recreating the deployment.
agentgateway alternatives: 7 managed MCP and agent gateways (2026)
Explore 7 managed AgentGateway alternatives for MCP and AI agents in 2026. Compare features, pricing, integrations, security, and use cases.
Workato enterprise MCP alternatives (2026)
Compare Workato enterprise MCP alternatives in 2026. Explore leading MCP platforms for AI agents, integrations, security, automation, pricing, and enterprise use cases.
Pipedream MCP Alternatives for Enterprise AI Governance (2026)
Compare Pipedream MCP alternatives for enterprise AI governance in 2026. Explore MCP gateways, security, access controls, integrations, observability, and pricing.
Top 7 Agentic Endpoint Security Companies CISOs Should Evaluate in 2026 - Backslash
Seven agentic endpoint security vendors compared on discovery, on-device enforcement, and evidence, plus the questions CISOs should ask before they buy.
With AI agents, runtime is the only place truth lives
Runtime security for AI agents: if an agent is compromised, so is its account of itself. Sysdig's founder on the only truth that can't be forged.
AI Incident Management Starts With These Two Questions
Effective AI incident management starts with two questions: Which AI system was involved, and what was your organization's relationship to it? The post AI Incident Management Starts With These Two Questions appeared first on RadarFirst.
NVIDIA proposes an AI agent kill switch in silicon after a year of sandbox escapes
This year agents at OpenAI, Anthropic, and Google escaped environments meant to contain them. What decided severity was time-to-detect and time-to-kill, from 12 minutes to seven months. NVIDIA's Open Agent Safety Platform puts a kill switch in hardware the agent can't reach. The post NVIDIA proposes an AI agent kill switch in silicon after a year of sandbox escapes appeared first on Arize AI.
AI Spend Management Tools: 6 Options, and What Each One Cannot See
Cloud FinOps platforms, LLM observability, provider dashboards, gateways, and SaaS management tools each solve part of the AI spend problem. Here is what each one structurally cannot see. The post AI Spend Management Tools: 6 Options, and What Each One Cannot See appeared first on Olakai.
AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed
Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody's radar. In August [...] The post AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed appeared first on Wallarm.
When Productivity Extensions Become Attack Platforms
Our research uncovered a campaign of 32 malicious browser extensions that uses remote configs to spy on 9,800+ users and hijack browsing activity.
ToolBench Rescan: 90,000 MCP Servers Scored
Six months on, ToolBench rescored 90,000+ MCP servers and 630,000+ tools. Only 0.28% earn an A, and the riskiest tools get the least documentation.
Jev-directed Model Routing
Choosing which model handles a task has a cost of its own. We tested Jev as a faster, cheaper way to make that decision when compared to LLMs.
Varonis and Cohesity: Improving Cyber Resilience with Data Security
Backup datasets often contain sensitive information — from PII to intellectual property — and a wide range of business-critical data. Without visibility into their backups, security teams are left with a blind spot that increases the blast radius and impedes cyber recovery.
Building production-ready AI agents with Atlas Agent Engine and Arize AX
Agents built and deployed on MongoDB’s Atlas Agent Engine can export OpenTelemetry traces to Arize AX, where teams can inspect each run, evaluate both the outcome and execution path, and test fixes before redeploying. The post Building production-ready AI agents with Atlas Agent Engine and Arize AX appeared first on Arize AI.
Cohesity Identity Resilience automates the last mile of AD recovery
Today we’re bringing two new major enhancements to how organizations use Cohesity Identity Resilience: Active Directory Forest Recovery (ADFR) powered by Semperis is now built directly into the self-managed deployment of Helios, and every recovery is now automated end to end. These enhancements accelerate the “last mile” of AD recovery. Your identity, security, and backup teams can now move with greater efficiency and efficacy for identity resilience. What’s new in Cohesity Identity Resilience T
Let Your Employees View Assigned IT Assets and Confirm Receipt
Simplify IT asset tracking with JumpCloud Asset Management. Allow employees to view assigned devices and confirm receipt directly in their User Portal. The post Let Your Employees View Assigned IT Assets and Confirm Receipt appeared first on JumpCloud.
Unsloth’s model picker had a code-execution problem
True to its name, AI-model-training tool Unsloth would do more work than it was asked to when developers checked out a model: It would also allow arbitrary code to execute on their machines. Pillar Security found that simply selecting a model in Unsloth Studio caused the application to download and execute Python code from the model repository. This could potentially allow attackers to use a specially crafted model to get malicious code executed on a developer’s system. “The code ran from nothin
Meet Discobox: Give Your Coding Agent Its Own Machine
Discobox gives every AI coding agent its own isolated environment for code, browsers, tools, and credentials—without putting your local machine at risk. The post Meet Discobox: Give Your Coding Agent Its Own Machine appeared first on Obot AI.
Section 63 BSA Certificate: A Practical Guide for Investigators and Legal Teams
A Section 63 BSA certificate is a signed statement that must accompany an electronic record when it is produced in court under the Bharatiya Sakshya Adhiniyam, 2023 (BSA). It follows a fixed format given in the Schedule to the Act. Part A is filled by the party or the person in charge of the device. […] The post Section 63 BSA Certificate: A Practical Guide for Investigators and Legal Teams appeared first on Innefu Labs.
Section 63 BSA Certificate: A Practical Guide for Investigators and Legal Teams
A Section 63 BSA certificate is a signed statement that must accompany an electronic record when it is produced in court under the Bharatiya Sakshya Adhiniyam, 2023 (BSA). It follows a fixed format given in the Schedule to the Act. Part A is filled by the party or the person in charge of the device. […] The post Section 63 BSA Certificate: A Practical Guide for Investigators and Legal Teams appeared first on Innefu Labs.
VicOne Implements xCarbon CAN Anomaly Detection on SPRESENSE for Physical AI Edge Devices
Verification testing confirms xCarbon's CAN message anomaly detection operates correctly on SPRESENSE, an IoT board computer with on-device AI inference capabilities, opening a path for xCarbon deployment across robots, drones, and Physical AI edge device
Continuous AI Governance: Why Checkbox Culture Is Over
This era of AI Governance will not be the same as the past, as it is no longer a checkbox culture. Continuous AI Governance is fast emerging as a crucial part of most enterprise AI initiatives. AI governance has basically just been reviewed, signed and documented for the past several years. A committee meets, a […]
Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point
On September 22, Boston Scientific published the final summary of CrowdStrike’s investigation into the August 25 cyberattack that... The post Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point appeared first on Industrial Cyber.
Data Policy at the AI Gateway: Stop 12 Scrubbing Rules
Every team is calling an LLM now support, sales, summarization, and features security hasn't even seen yet. Here's what changes when Protecto enforces one data policy at the AI gateway all of that traffic already crosses. The post Data Policy at the AI Gateway: Stop 12 Scrubbing Rules appeared first on Protecto.
“SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust
We are thrilled to announce that KDDI Corporation, a long-standing NextWave partner of Palo Alto Networks and a Managed Security Service Provider (MSSP) with whom we have built a strong partnership, has … The post “SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust appeared first on Palo Alto Networks Blog.
Private AI Proxy: Hardware-Verified Private AI for Your Coding Agents
Daytona sandboxes are now a Convex component
Building production-ready AI in India
See how developer teams in India built production-ready AI applications with Elasticsearch for the Forge the Future Hackathon 2026, with winners crowned at Elastic{ON} Mumbai.
Better together: Celebrating the 2026–2027 Elastic Partner Awards
We created the Elastic Partner Awards to recognize our partners' contributions and the results they are delivering for customers. See who the Elastic Partner Award winners are for 2026–2027!
AI Governance Isn’t a Chore Problem. It’s an Architecture Problem.
AI Governance Isn’t a Chore Problem. It’s an Architecture Problem. Four in five senior business decision-makers are spending more of their day managing AI risk, and their working hours are up 26% on average, according to the September 2026 OneTrust survey cited by CIO.com. That is not evidence that enterprises need more governance meetings… it is evidence that governance is being performed in the wrong place. Leaders are not governing. They are triaging incidents, chasing unapproved tools, recon
What everyone was talking about at WeAreDevelopers World Congress North America
After 237 talks across eight stages, code review emerged as the bottleneck for AI-generated code. Here are the production eval, sandbox, context, and agent experience themes that kept showing up. The post What everyone was talking about at WeAreDevelopers World Congress North America appeared first on Arize AI.
Claude Agent Sprawl: What 11,000 Projects Look Like
Blog
What Jev (TypeSafe) Means for Security Operations | Prophet Security
Jev, TypeSafe's System One model, returns typed decisions in milliseconds. Where it fits in a SOC, what it can't tell an analyst, and what to test first.
How to Build an AI Incident Response Process for AI Agents
Learn how AI agents change operational risk and how to build an AI incident response process for containment, assessment, evidence, and defensible decisions. The post How to Build an AI Incident Response Process for AI Agents appeared first on RadarFirst.
Scytale vs Vanta vs Drata: Which Compliance Platform Is Right for You?
Compare Scytale, Vanta, and Drata across compliance features, pricing, integrations, and support. The post Scytale vs Vanta vs Drata: Which Compliance Platform Is Right for You? appeared first on Scytale.
How verification enables smarter model routing for AI coding
Cut AI coding costs without sacrificing code quality by choosing the right model tier and verifying security, reliability, and maintainability.
How to achieve first-pass quality with AI coding agents
Improve first pass quality with coding agents by combining better context, clear constraints, automated verification, and continuous feedback.
The Blue Agent POV: Investigating Multi-Platform Data Exfiltration Across AWS and GitHub
See how the Blue Agent investigated a multi-platform attack in minutes, following evidence across AWS and GitHub to uncover compromised credentials, stolen source code, and custom data exfiltration tooling