Cloud security and the power of runtime insights
As organizations move to the cloud, the adoption of a CNAPP with runtime insights becomes a pivotal strategy for securing cloud environments.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,172 matching stories — announcement, in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Runtime is the real defense, not just posture
Instead of trying to build a forward-looking defense with backward-facing tools, it's time to flip the script: Start with runtime security.
Open by design: How Elastic supports MOSA, the DoD's Modular Open Systems Approach
Major US defense acquisition programs are required to be designed around a Modular Open Systems Approach (MOSA). Here's what program offices need to know about how Elastic can support MOSA at the data and analytics layer.
Why your AI bill tripled while token prices fell 75%
Token prices dropped 75%, so why did your agentic AI bill triple? Here's the real math behind agentic AI cost and how IT leaders can measure it.
How To Manage Policy Exception Reviews With Custom Compliance Workflows
Learn how custom compliance workflows streamline policy exception reviews, standardize approvals, track conditions, and strengthen audit readiness. The post How To Manage Policy Exception Reviews With Custom Compliance Workflows appeared first on RadarFirst.
Cohesity Maestro and Claude What headless cyber resilience looks like in practice
Cohesity will deliver the industry’s first headless data security architecture, Cohesity Maestro. Cohesity Maestro will make Cohesity callable by Claude and other agents. An authorized operator issues guidance and asks questions in plain language. Cohesity Maestro provides the cyber resilience context behind the answer. The operator gets a prioritized view of what matters, why it matters, and what to do next—without opening a separate console.
The Virtual Private Token Factory: Full Utilization, More Tenants, and No Plaintext on Your Platform
For neoclouds, NVIDIA Cloud Partners, sovereign and in-country cloud operators, and AI factory builders: the virtual private token factory is how to run multi-tenancy that regulated customers can join and that a single mistake cannot turn into a leak, at the economics the factory was financed on. Every AI factory is financed on the same […] The post The Virtual Private Token Factory: Full Utilization, More Tenants, and No Plaintext on Your Platform appeared first on Protopia.
It’s the swan song of traditional PAM, and that’s good news for security
Protecting privileged identities remains one of the biggest security challenges organizations face today. Yet, it’s time we admit it: the approach taken to solve this problem for nearly three decades has utterly failed. IAM teams were driven to buy tools that were supposed to protect them. In practice, they only gained a false sense of security.   Customers we speak with tell us the same story: millions spent on PAM solutions, only to protect a few hundred accounts, at m
Project Glasswing at Cohesity
In May 2026, Cohesity joined Anthropic's Project Glasswing and gained access to Claude Mythos Preview on June 5. The goal was practical: use the strongest coding and reasoning models for defense before comparable capabilities become routine on the attack side. We gave the models a broad assignment. We tested them against the products we ship and operate—our SaaS services and our on-premises products. Below is what we've learned, how we're responding, and what these changes mean for our approach
Straiker’s Technology & Channel Partnerships for AI Agent Security
AI agents are creating a new enterprise attack surface. The Straiker Partner Collective, brings partners together to discover, test, and defend AI agents.
How to Fix 3 Proven Zero Trust Flaws in AI Security
Zero Trust was built to govern human behavior. AI agents don't behave like humans. Here's where the identity model breaks and what to do about it. The post How to Fix 3 Proven Zero Trust Flaws in AI Security appeared first on JumpCloud.
5 Key Membership Inference Attack Risks Regulated Industries Cannot Ignore
A membership inference attack turns a trained AI model into an informant against the very people whose data built it. In a membership inference attack, an adversary with nothing more than query access to a model works out whether a specific individual’s record was part of the data it was trained on. It is a... The post 5 Key Membership Inference Attack Risks Regulated Industries Cannot Ignore appeared first on Duality Technologies.
Analyzing a Go-Based IoT Self-Propagating DDoS Botnet
Top AI coding agent security resources — September 2026
September 2026's AI coding agent security roundup: vendor default GitHub Actions reaching RCE, GhostJacking through WAF logs, and OWASP's new skill risk list.
How Developers Prevent Production Risk at the Source
Fixing security vulnerabilities in code takes seconds, while patching in production creates high operational costs and risk. Discover how empowering developers as your first line of defense eliminates exposure across every phase of your software pipeline.
The Rise of Managed Agent Platforms
Figure 1. Managed Agent Platforms remove different barriers between an idea and an operating agent. Segments overlap; placement is not a ranking of vendors, maturity, or market share.* The new software factory and the enterprise governance challenge An executive market analysis for CISOs, Chief AI Officers, and AI product leaders. September 2026. The next wave of enterprise AI is not going to arrive through one centrally approved platform. It is coming through many teams, many builders, and many
The security attack that hid inside your observability data
Your ops team sees a CPU spike. Your security team sees nothing. The cryptominer runs for six hours. Avoid duplication of cost and time and see how a unified observability and security platform with grounded AI closes the gap.
Smashing Security podcast #483: This AI helps thieves steal your iPhone
You've had your iPhone stolen. A day later, you get a text from Apple saying they've found it, and a very helpful woman called Alice from Apple Support calls to walk you through recovering it. She's polite. She's professional. But she is not from Apple. She's not even human. And she's about to break into your iPhone. Meanwhile, OpenAI, Anthropic, and Meta have all announced - with varying degrees of drama - that their AI agents have "broken out of the sandbox" and gone hacking. James takes a ste
Nikesh Arora Is Right: It’s Time to Rethink Your Cyber Security Architecture
Nikesh Arora spoke the truth yesterday on Palo Alto Networks' fiscal Q4 earnings call. Then he did it again on live television.
Heimdall: Cyber-Hardened AI Sandbox for High-Risk Agents | Straiker
Heimdall is a cyber-hardened AI sandbox for high-risk agent training and evaluations, with independent controls for isolation, egress, telemetry, and shutdown.
Getting Started with Obot & MCP: From Zero to Production (Live Digital Workshop)
Learn how to deploy, secure, and manage AI agents with Obot and MCP in this hands-on Agent Academy workshop, from setup to production. The post Getting Started with Obot & MCP: From Zero to Production (Live Digital Workshop) appeared first on Obot AI.
They’re In: The G2 Fall 2026 Reports
Read more to learn the latest about the seasonal vendor reports of G2, a leading community-driven review site. The post They’re In: The G2 Fall 2026 Reports appeared first on JumpCloud.
How to accelerate incident response and recovery with Cohesity cyber recovery orchestration and automation
Responding quickly and recovering safely after a cyberattack is one of the most operationally demanding moments for any security or IT team. To help organizations navigate this, Cohesity’s cyber recovery orchestration in Cohesity Data Cloud brings together automated clean room provisioning, AI-assisted investigation, and orchestrated recovery into one workflow. The Cohesity 5 Steps of Cyber Resilience© framework, seen below, offers actionable guidance for strengthening your cyber resilience.
ChatGPT and EHR Integration: What Healthcare Privacy Teams Need to Address
What OpenAI’s Epic integration means for HIPAA compliance, patient data protection, AI governance, and healthcare privacy incident response. The post ChatGPT and EHR Integration: What Healthcare Privacy Teams Need to Address appeared first on RadarFirst.
Pre-Authorize All Your Agent's Tools Up Front
Bundled pre-authorization in Arcade.dev: one approval link per service, scoped to the job, so long-running agents stop stalling on mid-task consent screens.
Approve Once, Scale Every Agent: Governance ROI
The return on AI shows up when agents run whole workflows in production. Governance at the tool call is what lets security approve the foundation once.
From AI Spend to AI Economics: How Dynamic Routing Can Control the Cost of Agentic AI
As organizations expand AI from individual prompts to agents, workflows and automated processes, AI consumption can rise rapidly. Controlling those costs requires more than budgets and usage dashboards. Enterprises need an intelligent layer that determines which model should handle each request based on cost, quality and performance.
How Coinbase Wallet built an agent-first product development lifecycle
By redesigning planning, validation, and risk review around AI agents, Coinbase Wallet dramatically shortened the path from product idea to working software. The post How Coinbase Wallet built an agent-first product development lifecycle appeared first on Arize AI.
Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program
A secure workspace for your team - so you can focus on building, not on what could go wrong. Every customer support agent starts their day the same way: opening a browser, … The post Building Securely From Day One: Palo Alto Networks Partners with the Zendesk Startup Program appeared first on Palo Alto Networks Blog.
Prompt Injection Isn’t a Model Problem: Securing the Tool Call Boundary
For the past two years, the conversation around prompt injection has centred on the model. Better alignment, stronger system prompts, safer fine tuning, and output guardrails have all aimed to make language models more resistant to malicious instructions. Those improvements have made a real difference, yet prompt injection remains one of the most persistent security
Security Questionnaire: What It Is and How to Respond to One Effectively
Discover what security questionnaires are, why companies use them, and how to respond efficiently. The post Security Questionnaire: What It Is and How to Respond to One Effectively appeared first on Scytale.
Your DNS Is Hiding in HTTPS — This Is Why It Matters
Discover why unmanaged DNS over HTTPS (DoH) creates security visibility gaps and how a controlled DoH strategy restores visibility without compromising privacy.
8 Top Compliance Audit Software for 2026
Discover the 8 top compliance audit software solutions for 2026, designed to streamline your compliance processes. The post 8 Top Compliance Audit Software for 2026 appeared first on Scytale.
Agentic AI Governance: How Enterprises Can Govern Autonomous AI Agents From Discovery to Evidence
AI agents no longer just answer questions — they take actions inside enterprise systems. Governing that shiftrequires more than a policy update. It requires operational infrastructure. At a Glance: Agentic AI Governance is the operational approach enterprises use to govern autonomous AI agents that can make decisions, access systems, use tools, and take actions without […]
The Hidden Cost of Manual Reconciliation in Tax Departments, and How AI Solves It
Manual reconciliation inside India’s GST enforcement machinery, matching return filings against e-way bills, FASTag movement records, bank data, and company registration details by hand, is not just slow. It is a major reason why detected tax evasion so often outpaces what gets recovered and why genuine fraud cases quietly go cold before anyone acts on […] The post The Hidden Cost of Manual Reconciliation in Tax Departments, and How AI Solves It appeared first on Innefu Labs.
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Delivers the Next Evolution of the Agentic SOC
Multi-Turn MCP Error Hypnosis: How One Server Exfiltrates PII From Another
An untrusted MCP server pulled customer PII out of a trusted Postgres MCP using the agent as courier. The agent's own PII guardrail became the cover for the crossing.
EU AI Act Compliance Is Coming: 5 Steps to Get Your AI Agents Audit-Ready Before 2027
EU AI Act Compliance Is Coming: 5 Steps to Get Your AI Agents Audit-Ready Before 2027 The EU AI Act is no longer a future compliance project. Transparency duties took effect on 2 August 2026. High-risk obligations for many systems used in employment, education, critical infrastructure, essential services, migration, and other sensitive areas apply from 2 December 2027.
Branch61G Weekly. The sleeper picks
Branch61G Weekly for September 2, 2026: a new SonicWall SMA 1000 zero-day chain, a JFrog Artifactory authentication bypass that mints admin tokens, a BGP hijack that pushed a poisoned Virtualizor update onto hypervisors, and an unauthenticated PaperCut chain with confirmed customer hits. The first touch looks like nothing; then the sleeper wakes up.