Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,275 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Regulatory change management (RCM) is the continuous discipline of detecting regulatory change at its source, interpreting it into specific obligations, and operationalizing those obligations through policies, controls, and evidence before deadlines hit. It allows organizations to anticipate regulatory shifts, maintain compliance, and avoid penalties while reducing firefighting and enabling growth.
Boards have committees, companies have policies, and vendors fill questionnaires — yet almost none of it is verified. Governance describes what is supposed to be true; AI security tells you whether any of it actually is.
LivePerson found that benchmarking Google Cloud machine types cut Logstash costs by over half using AMD Milan instances, while Kafka compression codec selection significantly boosted throughput.
Malicious VS Code extensions can create a GitHub backdoor that survives token revocation and password changes, leaving developers vulnerable.
The recent announcement that SpaceX will acquire Cursor for approximately $60 billion marks one of the largest acquisitions in the history of developer tools. While most of the attention has focused on the valuation and the strategic implications for Elon Musk's AI ambitions, developers should pay close attention to what this could mean over the next five to ten years.
Claude Code security fixes are public disclosures. Teams on pinned versions are running known, documented vulnerabilities. Here is what to check.
Your developers are already running MCP servers you don’t know about. Every ungoverned server is a potential compliance failure, a blast radius waiting to happen, and a security audit you …
Earlier this week, Stacklok’s CEO, Craig McLuckie and CTO, Joe Beda, joined the Founded and Funded podcast hosted by Tim Porter, Managing Director at Madrona Venture Group. You can watch …
Claude Code has shell access, your API keys, and a set of MCP servers feeding content straight into its context window. That is what makes it useful. It is also the attack surface. If the agent gets tricked by a prompt injection or a poisoned MCP server, it can leak credentials, overwrite files, or run a command, and it will do all of it at machine speed before you notice.
Knostic has been recognized by the Cloud Security Alliance in three key categories of its Agentic AI Security Innovator Market Map, showcasing its comprehensive approach to AI security.
A recent tutorial, “How to Stop Blindly Trusting Your AI Agents”, highlights a subtle but increasingly important operational problem in enterprise AI deployments: agents often fail silently.
At AI Engineer Europe 2026, Safe Intelligence CEO Steven Willmott gave a talk titled “Spec-Driven Testing for Agents With A Brain the Size of A Planet.” AI agents are getting more capable. That is the good news. It is also the thing that makes them much harder to test. When an agent can reason, use […] The post Why AI Agents Need Specification-Driven Testing first appeared on Safe Intelligence.
Learn how SentinelOne empowers modern enterprises to safely adopt Claude with Prompt Security, AI SIEM, and Wayfinder Frontier AI.
Enterprises have adopted Claude faster than they have the security guardrails for it. An Anthropic API key has become one of the most powerful credentials in the building. With it, Claude can reach sensitive data, run code, and act on a user's behalf. Yet most security programs still treat it as an afterthought, something to rotate eventually and worry about later.
New findings reveal a surge in malicious VS Code extensions, with over 32,000 installs. One extension remains live, posing serious risks to developers.
That's exactly what the UK's updated Corporate Governance Code, specifically Provision 29, now asks of boards. And if your organization has any connection to the UK (a subsidiary, a trading relationship, UK operations, or UK customers), you need to understand what it means for the GRC program you run every day.
VicOne's CyberThreat Research Lab review of common Android ELD apps shows why commercial fleets should look beyond the dashboard and treat ELD data integrity as a security priority.
AT A GLANCE Most risk teams I speak to have the same quiet panic: they know their AI programs are live, theyknow regulators are circling, and somewhere between legal, IT, and the CIO, nobody has formallyowned the audit trail. What they don’t see—yet—is that this exact gap is costing them contracts. In 2026, enterprise procurement […]
A God Agent is one model wired to every tool on one shared identity, holding the whole lethal trifecta at once: it reads untrusted content, touches private data, and talks to the outside world. You can't filter prompt injection out of that, so you change the architecture instead. Three deterministic moves: scope every agent, sign every call, stop every breach. Break even one leg of the trifecta and the blast radius shrinks.
Claude Code records a project's MCP approval by server name, not by the command you approved. One commit to a trusted repo can change what runs at startup.
Does NemoClaw make OpenClaw safe? NVIDIA's runtime guardrails cut the blast radius, but prompt injection, excessive permissions, and supply chain risk still get through.
Straiker has been named a winner of the 2026 Intellyx Digital Innovator Award.
The EU Machinery Regulation applies from January 20, 2027. For robots and software-defined machines, cybersecurity is now part of the safety lifecycle.
How Pour Demain used Tinfoil Containers to run gray-box interpretability evals on a 744B parameter model inside confidential enclaves, without exposing the weights.
The Software Bill of Materials (SBOM) has become one of the most practical advances in software security and transparency in the last decade. SBOMs help organizations understand what they ship — providing inventories of open source libraries, third-party components, and build dependencies. That visibility provides a better understanding of how the application is built, strengthens risk management, accelerates vulnerability response, and supports procurement and compliance.But, the software world
An AI gateway centralizes model routing, fallback, cost control, and observability to solve provider lock-in, outages, and runaway LLM costs at scale.
Your AI Agents Are Burning Budget: A Leader’s Guide to AI Agent Cost Control AI agent cost control has rapidly become one of the most pressing and underestimated challenges in enterprise technology. What began as a sprint to deploy autonomous AI agents across engineering, operations, and customer-facing workflows has quietly evolved into a financial governance […] The post Your AI Agents Are Burning Budget: A Leader’s Guide to AI Agent Cost Control appeared first on Portal26.
A single residential connection can exhaust 32 GB of Envoy memory in ~10 seconds. What the HTTP Bomb is, who is affected, and how to patch it.
Tenet Security wins the 2026 Fortress Cybersecurity Awards, named by the Business Intelligence Group in the Agentic AI Security Platform category.
AI agents are being deployed faster than the security controls to manage them. Three questions every security leader should be able to answer before any agent ships: what it can do, what controls exist if it misbehaves, and how you'll know when something goes wrong.
June 2026 in GenAI security: jailbreaks that will not die, ChatGPhish turning page summaries into phishing, and 1,652 wide-open Ollama APIs.
When organizations rush agentic AI into production, they keep bumping into the same uncomfortable question: how much trust is enough? In a recent webinar, How Much Trust Is Enough? Mastering Agentic AI Governance , AI security luminary Ken Huang and Vijil founder and CEO Vin Sharma worked through the question from first principles—and arrived at an answer from different perspectives.
At a Glance It is not the AI your CIO approved that keeps legal up at night. It is the one your procurement managerinstalled in March, the one your marketing team quietly embedded in customer workflows, and the oneyour vendor activated without asking. Picture this: it is a Tuesday morning, and your Chief Compliance Officer […]
Tokens are the fastest-growing line in enterprise tech budgets. The Linux Foundation named the problem; measuring token ROI is still on you. Here's how.
Manifest Foreign Risk gives security teams the ability to identify open source contributors tied to sanctioned nations, foreign militaries, and intelligence agencies before software ships. Available now.
The White House AI Cybersecurity EO accelerates AI adoption while sidestepping real governance. Daniel Bardenstein on what the order gets wrong and what federal leaders should watch.
TL;DR- AI deployment has outpaced AI governance. Most enterprises running AI on AWS cannot answer four basic security questions about what's running, what it's doing,how to stop it, and how to prove it's under control.- The Wallarm AI Control Platform closes this gap: one platform for Discover, Observe,Enforce, and Govern — running natively in your [...] The post Introducing the Wallarm AI Control Platform: One closed loop for AI security and API security. appeared first on Wallarm.
A self-hosted MCP registry gives enterprises a single, signed source for approved MCP servers. Learn what it covers and why GitHub repos are not enough.