Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,273 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek.
Learn AI evaluation frameworks for scoring LLM and agent quality, safety, and performance across offline and production environments.
See how AI in cybersecurity rewires SOC workflows from triage to response, and how to govern agents with runtime policy and observability.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added a critical security flaw impacting Fortinet FortiMail to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as CVE-2026-104286 (CVSS score: 9.8), allows unauthenticated attackers to write arbitrary files on the underlying system. "An improper
Blocking every GitHub token everywhere breaks the most ordinary thing an agent does, so operators exempt the whole host or switch the rule off. The better question is where the credential is going, and the providers already publish the answer.
Pipelock v3.6 refuses some config that 3.5 accepted, and changes a few outputs that scripts read. Run the new binary against your current config before you replace a running service. pipelock check --config /path/to/pipelock.yaml Use the real production config path. Every refusal names the field, and most name the value and the fix. Config that now fails to load Each of these was accepted by 3.5 and is refused by 3.6, at startup and on hot reload.
Agent sandboxes describe the boundary before the run. The question after it is what the agent changed on disk. And an empty change list is only evidence if the tool can also say when it didn’t look.
A Forrester Consulting study finds that enterprises deploying Elastic Observability achieve a 362% ROI, $28.1 million in three-year benefits, and payback in under six months, all while reclaiming thousands of engineering hours from incident response.
Ryuk access broker heads to prison, TraderTraitor backdoors surface on victim with no crypto ties, and one operator's AI agents skim 600K credit cards.
Fortinet is warning customers of a critical FortiMail vulnerability, tracked as CVE-2026-104286, that is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. [...]
October marks Cybersecurity Awareness Month, and this year CISA's theme, "Securing the Next 250," calls on organizations to strengthen the systems critical operations depend on. Organizations have long appreciated the deployment flexibility of Cohesity Data Cloud. Run our cyber resilience platform in your data center, manage it from your cloud tenant, or let Cohesity run it for you as a service. This flexibility also extends to the Helios control plane: use our control plane in the cloud, or run
Focused, reliable partnerships are the surest path to enduring growth. At Infoblox, we align with our channel partners around the customers we serve, the capabilities we build and the outcomes we deliver by investing in technical expertise, executive alignment and repeatable go-to-market motions. The 2026 Infoblox Americas Partner Award winners, announced at our Partner Advisory Board […] The post Celebrating the Partners Driving Customer Impact and Growth across the Americas appeared firs
Alice is now a guardrail provider in LiteLLM (v1.101.0). Turn on runtime screening for prompts, responses, and tool calls in minutes, with no SDK, no code.
How we built long-term memory for Alyx: why we chose one 8,000-character file over retrieval and knowledge graphs, and how we tested it. The post How we built long-term memory for Alyx: why we chose a file over a knowledge graph appeared first on Arize AI.
Alyx now remembers project goals, conventions, and decisions across sessions in Arize AX, helping you continue work on traces, evals, and experiments. The post Alyx now remembers your work across sessions with long-term memory appeared first on Arize AI.
Introducing Cortex XCOR: AI-Driven Observability that Delivers Autonomous Response with AI SRE I’ve been tackling the observability problem for more than a decade, since before it was coined observability. From building internal … The post Observability’s AI Moment appeared first on Palo Alto Networks Blog.
At Safe Intelligence, we welcome the BCS’s call for rigorous safety testing and accountability in the deployment of AI systems. The post AI Safety Needs Professional Standards and Continuous Validation first appeared on Safe Intelligence.
An MCP server your team approved six weeks ago starts making tool calls nobody recognizes. Maybe a dependency changed underneath it. Maybe a token is being used from somewhere it …
Question 14 on the customer questionnaire asks which models process their data and whether any of it was used for training. You can answer for the two systems your team built, and for none of the eleven you did not. An AI-BOM is what closes that gap.
Traditional security tools were built to protect users, endpoints, & networks. Learn where it falls short for AI risks and the best way to secure your agents.
As AI models and agents become more capable, unexpected behaviour is becoming harder to treat as an edge case. Enterprises need continuous visibility and control across AI prompts, agents, models, tools and data.
Discover LLM red teaming techniques, attack methods, and testing strategies to secure enterprise AI before release. Evidence for auditors included.
Enable BYOK on existing Elastic Cloud Hosted deployments: encrypt data and snapshots with your own KMS key, in place, without recreating the deployment.
Explore 7 managed AgentGateway alternatives for MCP and AI agents in 2026. Compare features, pricing, integrations, security, and use cases.
Compare Workato enterprise MCP alternatives in 2026. Explore leading MCP platforms for AI agents, integrations, security, automation, pricing, and enterprise use cases.
Compare Pipedream MCP alternatives for enterprise AI governance in 2026. Explore MCP gateways, security, access controls, integrations, observability, and pricing.
Seven agentic endpoint security vendors compared on discovery, on-device enforcement, and evidence, plus the questions CISOs should ask before they buy.
Runtime security for AI agents: if an agent is compromised, so is its account of itself. Sysdig's founder on the only truth that can't be forged.
Effective AI incident management starts with two questions: Which AI system was involved, and what was your organization's relationship to it? The post AI Incident Management Starts With These Two Questions appeared first on RadarFirst.
This year agents at OpenAI, Anthropic, and Google escaped environments meant to contain them. What decided severity was time-to-detect and time-to-kill, from 12 minutes to seven months. NVIDIA's Open Agent Safety Platform puts a kill switch in hardware the agent can't reach. The post NVIDIA proposes an AI agent kill switch in silicon after a year of sandbox escapes appeared first on Arize AI.
Cloud FinOps platforms, LLM observability, provider dashboards, gateways, and SaaS management tools each solve part of the AI spend problem. Here is what each one structurally cannot see. The post AI Spend Management Tools: 6 Options, and What Each One Cannot See appeared first on Olakai.
Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody's radar. In August [...] The post AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed appeared first on Wallarm.
Our research uncovered a campaign of 32 malicious browser extensions that uses remote configs to spy on 9,800+ users and hijack browsing activity.
Six months on, ToolBench rescored 90,000+ MCP servers and 630,000+ tools. Only 0.28% earn an A, and the riskiest tools get the least documentation.
Choosing which model handles a task has a cost of its own. We tested Jev as a faster, cheaper way to make that decision when compared to LLMs.
Secure your Kubernetes supply chain with WizOS Helm Charts. Eliminate hidden CI/CD risks and unmaintained dependencies with hardened, signed, and CVE-scanned charts for seamless Kubernetes deployment.
Backup datasets often contain sensitive information — from PII to intellectual property — and a wide range of business-critical data. Without visibility into their backups, security teams are left with a blind spot that increases the blast radius and impedes cyber recovery.
Today we’re bringing two new major enhancements to how organizations use Cohesity Identity Resilience: Active Directory Forest Recovery (ADFR) powered by Semperis is now built directly into the self-managed deployment of Helios, and every recovery is now automated end to end. These enhancements accelerate the “last mile” of AD recovery. Your identity, security, and backup teams can now move with greater efficiency and efficacy for identity resilience. What’s new in Cohesity Identity Resilience T