Hacker Used Chinese-Developed A.I. Tool to Target South Korean Banks, CrowdStrike Says
The cybersecurity firm said the attacker was likely a Chinese speaker and financially motivated, but did not attribute the attacks to a named individual or group.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,272 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How to Protect Local Credentials from a Coding Agent with Agent Guard
Let a coding agent work on your project without reaching the AWS credentials on your Mac. Isolate it in an Agent Guard microVM and pass in only what it needs.
Jozu Agent Guard: Signed, Isolated AI Agents on Kubernetes
Jozu Agent Guard runs each AI agent in its own microVM on Kubernetes, admits only signed ModelKits, enforces tool policy, and keeps a signed audit log.
Top MCP security resources — October 2026
MCP security in October 2026: an MCP auth bypass in LiteLLM joins CISA's KEV list, Grafana MCP session spoofing, and malicious servers that pass five scanners.
Best Shadow AI Governance Tools 2026: Why “Detection” Is the Wrong Question to Start With
Best Shadow AI Governance Tools 2026: Why “Detection” Is the Wrong Question to Start With If you’re searching for the best shadow AI governance tools in 2026, you already know the basic problem. Employees are using AI tools your organization never approved, and you can’t secure what you can’t see. That part of the search […] The post Best Shadow AI Governance Tools 2026: Why “Detection” Is the Wrong Question to Start With appeared first on Portal26
FortiBleed Attackers Locking Victims Out of Fortinet Devices
Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek.
Making Threat Intelligence Work for SOC Teams: ANY.RUN & Elastic Webinar Insights
Threat intelligence on its own is only data. Its value depends on how effectively SOC teams can turn it into action. Simply put, this was the premise of our recent webinar. The SOC and business impact of threat intelligence depends largely on how quickly analysts can use it to validate threats, make confident decisions, and […] The post Making Threat Intelligence Work for SOC Teams: ANY.RUN & Elastic Webinar Insights appeared first on ANY.RUN's Cybersecurity Blog.
OpenTelemetry Tracing for Production AI Agents: A Step-by-Step Guide
Learn to trace multi-agent requests end-to-end with OpenTelemetry. Configure tracers, nest spans, propagate context, and choose sampling for production systems.
CrowdStrike and Anthropic Give Critical Infrastructure Defenders the AI Advantage
Solving the Continuous Authorization Conundrum
Why Your MDR Won't Cover the Custom Detections You Built | Prophet Security
Your MDR covers its own detection library, not the custom rules your team built. Here is why those alerts fall to you, and how an AI SOC platform covers them.
Automated Investigation at Scale: How Prophet AI Protects High-Exposure Partner Environments | Prophet Security
How Prophet AI runs automated investigation at scale in a partner-heavy Microsoft 365 tenant: credential sprays, AiTM session hijacking, token persistence.
AI SOC Statistics: Adoption, Accuracy, and ROI Data | Prophet Security
AI SOC statistics for 2026: alert volume, breakout times, adoption rates, barriers, and ROI data, each with a dated source you can cite in a business case.
Agentic Endpoint Risk: Enterprise Findings - Backslash
79% of assessed organizations lack agentic AI visibility. Explore Backslash’s enterprise findings on personal accounts, credential exposure, and endpoint risk.
The Agent Memory Maturity Model: From Session-Scoped to Organization-Wide Knowledge (2026)
Explore the agent memory maturity model, from session-scoped context to organization-wide knowledge, with practical stages for building scalable AI memory in 2026.
Inspectable Agent Memory: Why Humans Must Be Able to Read What Agents Remember (2026)
Learn why inspectable agent memory matters, how human-readable memory improves AI oversight, and what teams should consider for safer agent systems in 2026.
How to Build a Memory Architecture for Multi-Agent Systems (2026)
Learn how to build a memory architecture for multi-agent systems, including shared context, persistent memory, retrieval, access control, and scalable design patterns.
Runtime AI Defense in a shared responsibility model
An AI agent once deleted someone's entire inbox despite being told to confirm first. Not because it was malicious, but because the instruction didn't survive context compaction. Shantanu Gattani, Sysdig's SVP of Product, on why that gap is the real risk in agentic AI, and who should be responsible for closing it.
FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins
The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. [...]
Why API Security Belongs in ECB Cyber Action Plans
Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
Least Privilege for AI Agents: A Practical Guide for Security Leaders
Key takeaways Least privilege for AI agents gives each agent its own identity and only the access a specific task needs, for only as long as that task runs. Human-centric access models break down for agents, which inherit user permissions, run on shared service accounts, and act at machine speed. OWASP names excessive permissions as a root cause of excessive agency. Scoping access at provisioning is only the start. Pair it with runtime enforcement, human approval for high-impact actions, and con
Decision model benchmark: Jev, Kev, Liquid d1, and more
On 15 September, TypeSafe released Jev, and within a few weeks about 10 companies had shipped something that works the same way. OpenAI, Liquid, Cloudflare, AWS and PostHog all launched one, and an open clone called Kev showed up on Hugging Face in between. If you build agents or run evals, you now have a... The post Decision model benchmark: Jev, Kev, Liquid d1, and more appeared first on Arize AI.
Private Registry: See What Your Agents Can Do
Arcade.dev's Private Registry turns your MCP gateway URL into a page employees can open to see every tool they have, run one, and request what's missing.
Scaling Agents Starts With Seeing the Whole Fleet
Twelve hundred agents coordinated covertly and none alerted a human. See the four ordinary gaps that let it run, and why single traces can't detect a swarm.
CVE-2026-21589: Critical Arbitrary File Read Vulnerability in Atlassian Products
Discovering the AI hardcoded in your repositories - FireTail Blog
Oct 07, 2026 - Ayush Sethi - Everyone is hunting the AI tools employees signed up for. The models and prompts your own teams wrote into the code, with the keys to call them, are the half nobody is looking at.Point a scan at your repositories and the number tends to surprise people. Model calls hardcoded across services, prompts pasted straight into applications, and several of them in projects that shipped a year ago and belong to no one now.None of it was ever approved as AI to govern. It was c
New IT Research: Enterprise AI Access Is Outpacing Control
Six months ago, the AI question top of mind across most IT teams was about visibility. What are people using, […] The post New IT Research: Enterprise AI Access Is Outpacing Control appeared first on JumpCloud.
How the Wiz Red Agent caught a Fortune 500 firm’s data exposure (that other tools missed)
Traditional DSPM and classification tools scan from the inside out. Thinking like an attacker, the Red Agent found a public page exposing sensitive data in minutes.
What is Smart Policing? Meaning, Technology & Examples in India
Smart policing is not just about putting CCTV cameras on streets or digitising police records. It is about using technology, data, trained personnel and connected systems to help police respond faster, investigate better, allocate resources intelligently and remain accountable to citizens. In India, the idea of smart policing has been around for more than a […] The post What is Smart Policing? Meaning, Technology & Examples in India appeared first on Innefu Labs.
Reducing agent costs with AgentMon
The Platform team spent $720 on agents in one week, against a budget of $650. AgentMon's cost view shows that $208 went to failed-call retries, abandoned sessions, and idle activity. That is 29% of the team's weekly spend.
FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials
The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed at internet-facing Fortinet FortiGate firewalls and secure socket layer (SSL) virtual private network (VPN) gateways. "The campaign exploits reused or leaked credentials and legacy SHA-256 password storage, enabling threat
Encrypted instructions trick Copilot CLI into spilling developer secrets
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web page. Security researchers at Adversa AI said the new attack technique, dubbed Cryptographic Context Injection (CCI), hides malicious instructions inside encrypted content. These instructions are treated as trusted context when Copilot CLI decrypts the content using its own code-execution environment, allowing them to influence what the agent does next. In a
Another ShinyHunters suspect arrested
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
Announcing Citadel Radar for Agents: Cross-Platform Agent Control and Visibility
Extending Citadel Radar from AI chatbots to AI agents, addressing agent-specific risks to support safe enterprise-wide adoption Citadel AI Inc. (CEO: Hironori Kobayashi) announces Citadel Radar for Agents, a new product that provides visibility into agents across multiple AI platforms and controls risks at runtime. Radar for Agents is available through an Early Access Program […]
AI data exposure isn't an IT problem. It's a leadership problem.
Most AI data exposure isn't a hack. It's a good employee pasting private data into a chatbot to get the job done, which is why the leaders who own that data need to own the fix.
The Duck Song: Malicious Solidity Extensions Hide a Cross-Platform Payload in an MP4
Five malicious Solidity/Hardhat extensions; four hide a cross-platform payload in an MP4 that tries to install ScreenConnect or a persistent Go binary.
When 2,000 Agents Share One CPU
Elastic named a Leader in the 2026 Gartner® Magic Quadrant™ for Enterprise AI Search
Elastic was named a Leader in the 2026 Gartner® Magic Quadrant™ for Enterprise AI Search. We ranked #1 in the AI Automation Use Case in the companion Critical Capabilities report.
Virtual MCP Servers in Obot: One Endpoint for Every MCP Connection
Learn how virtual MCP servers (vMCPs) in Obot combine multiple MCP servers behind one endpoint with centralized configuration, profiles, and tool access. The post Virtual MCP Servers in Obot: One Endpoint for Every MCP Connection appeared first on Obot AI.
The Alice Labs Cyber RL Benchmark v0.1: Can AI replace a security analyst?
We tested 10 frontier models on 12 real cyber tasks with planted decoys and objective scoring. Who did the best job?