Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
2,276 matching stories — in AI / LLM Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Server-Side Semantic Mapping for Consistent AI Observability Across Frameworks
AI telemetry conventions differ across OpenTelemetry, OpenInference, and Vercel AI SDK. See how Fiddler maps them into consistent observability concepts.
How state and local agencies can get ahead of fraud starting with the data they already have
Fraud and waste continues to be a challenge for state and local government agencies in the US. Though the data exists, the challenge is pulling it all together for an accurate anomaly detection and remediation.
7 lessons for IT leaders on using observability to monitor AI applications
Discover the seven lessons we learned as we evolve our LLM observability practice to monitor and improve our AI applications.
Best MCP Server Hosting Platforms (2026)
Compare the best MCP server hosting platforms for 2026, covering security, scalability, deployment, governance, integrations, and enterprise support.
Best LLM Routers for Enterprise Teams (2026)
Compare the best LLM routers for enterprise teams in 2026, covering routing, performance, security, cost optimization, and scalability.
Best LLM Proxies for Enterprise Teams (2026)
Compare the best LLM proxies for enterprise teams in 2026, covering security, routing, observability, cost control, and scalability.
AI Agents for Compliance: Automate Work Without Replacing Human Judgment
Learn how AI agents for compliance automate intake, investigations, evidence gathering, and prioritization while keeping human judgment and oversight intact. The post AI Agents for Compliance: Automate Work Without Replacing Human Judgment appeared first on RadarFirst.
New From Cyera: AI Security for Every Agent, Assistant, and Data Store
Explore Cyera's latest release: AI Security for agents. Ensure data safety with Agent Guardian and advanced incident response tools tailored for your business.
How to Spot and Stop Rogue Device Joins
Instead of leaving behind recognizable fingerprints from public tooling, adversaries can now generate realistic device names that blend naturally into enterprise environments. This blog explores how that changes Entra ID detection and what are the behavioral signals that still expose these attacks.
What is an agent harness?
An agent harness is the software infrastructure that surrounds an AI agent and enables it to operate reliably. It manages the agent’s execution loop, context, tools, permissions, memory, retries, and …
What Is an AI Risk Management Platform for GenAI?
GenAI arrived everywhere at once—and most organizations can't say what AI they run, what it touches, or prove it's under control. An AI risk management platform answers all three with discovery, monitoring, enforced policy, security testing, and auditable evidence.
CoSnitch: When Your AI Assistant Becomes Its Own Whistleblower
Varonis Threat Labs uncovered another one-click vulnerability in Microsoft Copilot Personal dubbed CoSnitch (critical, CVE-2026-24301), which quietly executes an attack chain that exfiltrates data from enterprises without obvious red flags.
Announcing the 2026 Wiz Partner Alliance Award Winners
Recognizing the partners, integrators, and visionaries driving cloud security transformation, AI risk management, and SOC modernization across AMER, EMEA, and ANZ.
Analyzing PureLogs Stealer: Fake Adobe Sign Phishing Uses PNG Steganography and Fileless Execution
Executive Summary Threat actors are actively impersonating Adobe Sign (hxxps://chickplaybox[.]com) to deliver PureLogs Stealer in memory. The campaign relies on complex obfuscation, process environment variable storage, and image steganography to minimize on-disk forensic artifacts. Fingerprinting & Exfiltration:The landing page uses Cloudflare Turnstile and ipapi.co to collect victim IP, hostname, geolocation, and browser metadata, sending real-time alerts to […]
Top 10 zero-click attacks against AI agents
Ten documented zero-click attacks on AI agents in shipped products: what each one broke, which CVEs followed, and the controls that reduce the risk.
Who Is Watching Your AI Agents? How AgentMon Stops Rogue Agents Before They Cause Damage
In all these cases, the credentials may be legitimate and the API calls authorized. The problem is the behavior. Agentic AI is delivering exactly what enterprises were promised: software that does not simply answer questions, but actually performs work. AI agents can update websites, modify records, send documents, interact with customers, prepare contracts, access internal applications and coordinate with other agents. The productivity advantage is enormous. Unfortunately, the potential damage
The crew you trust, and the control planes attackers already live in
Branch61G Weekly for August 18, 2026: a China nexus operator turning a VMware vCenter syslog flaw into root and then hiding behind cron jobs that impersonate VMware itself, SAP Commerce Cloud exploitation attempts, a GeoServer SQL injection, and Clop's PLM data theft claims. The theme is internet facing control planes that already have trust.
What Is an AI Control Plane, and How Does It Differ From an Agent Harness?
An AI control plane governs many agents; an agent harness runs one. See how the two layers differ and when your team actually needs each.
How Can Enterprise Buyers Get Comprehensive MCP Security Coverage?
Summary MCP introduces unique risks because agents dynamically call tools instead of following static API paths. Traditional perimeter defenses like WAFs cannot inspect the intent behind agentic tool execution. LangGuard provides the definitive runtime governance layer for enterprise-grade MCP security. Enterprises must transition from static security policies to deterministic, real-time enforcement of agent actions.
Agentic treasury runs on searchable, observable context
Agentic treasury requires more than AI. It needs searchable context, observable systems, and trusted data to reduce decision latency and support confident, governed action.
A Blueprint for Securing the Full Agent Workflow
Security leaders already know AI agents expand risk. The exposure comes from assuming the controls you own have it covered. Ahead of our August 25 webinar, here is the case for securing the full agent workflow. The post A Blueprint for Securing the Full Agent Workflow appeared first on Aurascape, Inc..
Identity Icons Awards 2026: Nominate your Identity Security heroes
If you ask me for my customer story of the year, I’d start with the team that stopped Mythos inside a Project Glasswing member’s environment. AI is everywhere—from the headlines to the boardroom. Organizations know they need to secure AI agents and defend against AI-powered attacks. What’s less clear is how to do it effectively. Early successes are beginning to emerge, and I’m eager to […]The post Identity Icons Awards 2026: Nominate your Identity Security heroes appeared first on Si
Noma Security Is Now a Native Guardrail Across the TrueFoundry Stack
Every team shipping AI features hits the same wall. Developers want to connect to whatever model or agent framework gets the job done. Security teams need to know that every prompt, every response, and every action an agent takes is being checked for data leaks, prompt injection, and unsafe behavior. The usual answer is to […] The post Noma Security Is Now a Native Guardrail Across the TrueFoundry Stack appeared first on Noma Security.
ENT-IPI Bench: Indirect Prompt Injection Benchmark
We evaluated eight frontier models as enterprise agents across 147 adversarial scenarios for their vulnerability to indirect prompt injection.
Meet Cy: Your Personal AI, Identity, and Data Security Analyst, On Demand
Discover Cy, your on-demand AI and data security analyst. Gain insights into risks, track progress, and communicate effectively with clear answers.
How to Manage Hundreds of DSARs Without Creating Operational Chaos
Learn how to manage DSARs at scale with centralized intake, automated workflows, deadline tracking, clear ownership, and audit-ready documentation. The post How to Manage Hundreds of DSARs Without Creating Operational Chaos appeared first on RadarFirst.
FireTail State of AI Security 2026: Adoption Has Outpaced Control - FireTail Blog
Aug 17, 2026 - Ayush Sethi - What your workforce's AI prompts reveal in aggregate Most AI security controls judge one prompt at a time. We built Topics to read the layer above them, where a workforce's prompts add up into a pattern that no single message shows.Someone in your legal team pastes a contract that is still under negotiation into an AI tool and asks it to flag any clauses that put you at a disadvantage. To every control watching that message, it is a document question. There is no PII
Detection Engineering in an AI-Driven SOC: What Actually Needs to Change | Prophet Security
AI SOC analysts investigate every alert. So what should detection engineers do differently? A look at how the lifecycle, metadata, and tuning model need to adapt.
Create Self-Service IT Reports with Custom Query Builder
Answering critical audit questions, like identifying which users have access to specific applications on their laptops, often means navigating multiple […] The post Create Self-Service IT Reports with Custom Query Builder appeared first on JumpCloud.
Wiz Red Agent Finds Its Way Into Snowflake’s Internal Jira Through a Flaw in a GitHub Copilot–Assisted PR
Wiz Red Agent independently discovered and exploited a GitHub Actions injection missed by GitHub’s Advanced Security, validated access to sensitive data in Snowflake’s internal Jira, and assessed the blast radius—all without human intervention, five days after the flaw became live.
Grok Is Leaking Your Repositories. So, What Now?
A single fake bug report hijacked a $250 billion company's AI coding agent. No malware, no exploit. Every security control it passed stayed silent.
10 Best Companies to Help You Get ISO 27001 Certified
Compare ISO 27001 certification companies and tools to find the right solution for audit prep, automation, and support. The post 10 Best Companies to Help You Get ISO 27001 Certified appeared first on Scytale.
Claude Opus 5: An evaluation review & metrics benchmarks
Learn what Claude Opus 5 performance metrics reveal about code quality security findings review effort and the impact of generating far more code.
Your secrets are leaking to AI coding agents (and how to stop it)
Learn how AI coding agents can expose secrets and how local detection helps keep credentials from reaching model providers and external logs.
Claude Code hooks and how Sonar Vortex verifies AI code inside the loop
Learn how Claude Code hooks enforce deterministic AI guardrails and how Sonar Vortex verifies AI generated code inside the development loop.
Teaching AI to Reason Through Detection Triage
Local AI vs. Cloud AI: Which Is Right for Your Enterprise?
Enterprises are increasingly evaluating where AI should run. Cloud AI offers scalability, flexibility, and rapid deployment, while local AI provides greater control over data, infrastructure, and privacy. The right choice depends on an organization’s security requirements, workloads, infrastructure, and regulatory environment. For many enterprises, the future may not be either local or cloud—but a governed combination of both.
What is non-human identity (NHI)?
Ask a CISO who owns the service account running last night’s batch job, and you’ll often get a shrug. That gap is the story of non-human identity. A non-human identity (NHI) is a digital identity assigned to software, from the service account behind a batch job to the AI agent running a workflow on its... Read more » The post What is non-human identity (NHI)? appeared first on WitnessAI.
AI coding assistants in regulated industries: best practices
A single prompt inside an IDE, CLI, or agentic session can push source code, credentials, and regulated data past the enterprise boundary before anyone reviews it. In healthcare and financial services, that traffic often touches code paths already covered by HIPAA, PCI DSS, and secure-development controls. The problem is that most browser-centric, packet-based, and legacy... Read more » The post AI coding assistants in regulated industries: best practices appeared first on WitnessAI.