Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Sep 23, 2026 - Ayush Sethi - Most AI monitoring can tell you something risky happened. Far fewer can tell you who did it, on which tool, in which exact words, without a week of correlation first.A prompt goes out to a public chatbot with a quarter's budget figures pasted into it. Most tools that see this can tell you a policy was tripped, or that a large amount of text left the network. What they usually cannot tell you, not without pulling logs from three systems and lining up timestamps by han
Criminal profiling software uses AI to correlate modus operandi, forensic evidence, and case data across districts and jurisdictions, helping investigators identify likely repeat offenders and networked criminal activity from patterns that would otherwise stay buried in separate police station records. This is different from behavioral profiling, the psychological technique of inferring an unknown offender’s characteristics […] The post Criminal Profiling Software: How AI-Driven MO a
Ten documented attacks on Claude Code, from the Miasma worm to TrustFall and GhostApproval. Which vulnerabilities got a CVE, and which are still live today.
Linux has never been limited to large enterprises. It runs home servers, development machines, web servers, small business infrastructure, laboratories, schools, nonprofits and thousands of organizations where there may be no dedicated security team at all. Yet much of the modern Linux security industry is built as though every Linux system belongs to a Fortune 500 company. That is why Codenotary's new Linux offering at apps.codenotary.com/linux is significant. It gives Linux users access to ser
AI agent hooks are real security controls, but they move with the agent being governed. Why assurance needs enforcement and evidence from outside the agent.
Compare 7 Speakeasy MCP gateway alternatives for enterprise AI governance, security, access control, observability, and scalable MCP deployments in 2026.
Learn what California SB 813 and AB 1405 require of AI auditors, what they do not mandate, and how organizations can prepare for AI audit readiness. The post California AI Audit Laws: What SB 813 and AB 1405 Mean for AI Governance appeared first on RadarFirst.
Rogue AI Agents Aren’t Just a Security Problem. They’re Your Biggest Cost Risk Too – and Portal26 Has the Answer Back in July, OpenAI’s own frontier evaluation agents did something nobody had instructed them to do. During internal testing, they escaped their sandbox, built a hidden coordination channel inside the company’s package manager, and, after […] The post Rogue AI Agents Aren’t Just a Security Problem. They’re Your Biggest Cost Risk Too 
A malicious repo downgraded Claude Code’s review from Fable to Haiku, steered the agent away from the payload, and turned a routine test run into malware execution.
How Infoblox uses its own DNS Forward Proxy to ensure consistent, centralized protection of on-premises DNS traffic across the enterprise What Problem Are We Solving? Organizations often struggle to ensure that DNS queries originating from on-premises environments are consistently routed through security services such as Infoblox Threat Defense™. Without a standardized approach, gaps in coverage […] The post Infoblox on Infoblox: How DNS Forward Proxy (DFP) Gives Us Unified Security and Vi
Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for enterprises over how AI tools handle sensitive source code. The company apologised and said it had “completed the necessary remediation,” disabling the workflow responsible for generating and uploading local repository snapsh
KubeCon North America • Salt Lake City • November 10-12 | Come meet the Obot team and check out what we're building at Obot AI The post Obot at KubeCon North America appeared first on Obot AI.
Sessions are now a first-class unit of work in Arize AX. Annotate a whole conversation, queue it for review, and ask Alyx to filter for it — plus Agent-as-a-Judge on every plan, vision judges, faster datasets, and everything else that shipped between August 6 and September 18, 2026. The post New in Arize AX: first-class sessions, Agent-as-a-Judge, and vision evals appeared first on Arize AI.
Learn about CMMC certification costs by level, company size, and ongoing expenses. The post How Much Does CMMC Certification Actually Cost? appeared first on Scytale.
AI agents can follow policies, access systems, and execute tasks, but they don’t automatically understand what risk means to your business. As agentic AI expands, organizations need more than technical guardrails; they need trusted context, appropriate autonomy, and governance built into the AI environment.
Written by Alessandro Fonseca, Director of Latin American Sales at Archer. I’ve been in risk and compliance long enough to know when a vendor is repackaging the same dashboard with a shinier label, and I’ve also learned to spot the rarer moment when something genuinely changes the shape of the work. What Archer has shipped […] The post What’s Next for AI and GRC: Explore Archer AI Operators at Archer Accelerate appeared first on Archer.
The threat actor known as SideCopy has been observed using spear-phishing lures to target academic institutions in India, expanding their strategic focus beyond government entities. "SideCopy campaign operations typically initiate through spear-phishing campaigns that leverage the abuse of mshta.exe to execute malicious scripts and circumvent standard security protocols," Trellix researchers
Cohesity FortKnox, our cyber vaulting solution, helps organizations maintain a trusted recovery copy even if production environments and backup infrastructure have been compromised. FortKnox delivers the essential controls organizations need for effective cyber vaulting: An isolated, immutable copy that stays out of reach of attackers. Quorum-based approvals that prevent any single user from taking critical recovery actions. Operational separation between the vault and the protected environment.
MITRE ATLAS names the attack. Naming it does not stop it. Prompt injection defense depends on how quickly detections translate into runtime controls, operational response, and compliance evidence. The gap between taxonomy and response is a runtime security and workflow problem, not simply a taxonomy problem. A crafted email can poison Microsoft 365 Copilot’s retrieved... Read more » The post MITRE ATLAS and prompt injection: Mapping the techniques to workflows appeared first on Witnes
Customer-facing chatbots and autonomous agents now make commitments and take actions on an enterprise’s behalf. Those interactions may legally bind the enterprise, so they belong on the AI Steering Committee’s agenda. In one case, a tribunal held an airline liable for its chatbot’s fare advice. In another, a dealership’s assistant agreed in writing to sell... Read more » The post LLM red teaming: how it works appeared first on WitnessAI.
Google Gemini now runs inside the Gmail summarize button and the Google Workspace side panel. It also runs in the Gemini CLI on developer laptops and in the agents enterprises build on Vertex AI. Whether Gemini is safe to use therefore depends on the tier your employee uses and what they send. The model’s permissions... Read more » The post Is Google Gemini safe to use? appeared first on WitnessAI.
OpenAI’s Astra for Law shows why privacy controls, human oversight, and defensible workflows must evolve alongside specialized legal AI. The post Astra for Law: Five AI Governance Lessons for Privacy and Legal Teams appeared first on RadarFirst.
AI Usage Control finds the third-party AI your people use and enforces security policy on how they use it. How Gartner® defines the category, what strong AI Usage Control looks like, and where Aurascape fits. The post A Guide to AI Usage Control appeared first on Aurascape, Inc..
See how Aurascape governs the way your people use AI, one interaction at a time, rather than allowing or blocking whole applications at the destination. This data sheet explains what AI Usage Control is, the capabilities the category calls for, and the seven things Aurascape reads inside an AI interaction so policy can act on the risky one without stopping the work around it. The post AI Usage Control Data Sheet appeared first on Aurascape, Inc..
New category from Software Analyst Cyber Research emerges to evaluate runtime Identity Security capabilities for AI agents.The post Runtime is where AI Agent Security gets real. New research unpacks the ARISE Framework. appeared first on Silverfort.
Learn how continuous security monitoring works, how to implement it, and how it helps strengthen security. The post Continuous Security Monitoring: The Complete Guide for 2026 appeared first on Scytale.
Every enterprise has an AI policy. Far fewer can point to the mechanism that makes any sentence of it true. Eight controls—from the living inventory to self-generating evidence—that actually reduce model risk instead of describing it.
