Supply Chain Alert: Malicious Axios Versions Published to npm | Prophet Security
Supply chain alert: A compromised Axios maintainer account published malicious npm packages. Find IOCs, downgrade instructions, and threat hunting guidance.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
234 matching stories — in Autonomous SOC (AI SOC) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Facebook Phishing Email Campaign: How Attackers Are Weaponizing Meta Business Manager Partner Requests | Prophet Security
A facebook email phishing campaign abuses Meta Business Manager partner requests to deliver credential-harvesting links through legitimate facebook.com infrastructure.
Phishing Investigation: A Practical Guide for SOC Analysts | Prophet Security
A practical phishing investigation workflow for SOC analysts: confirm, collect evidence, scope exposure, and remediate across email, BEC, and impersonation.
Gemini 4 Argon Cybersecurity: Google Is Back, Now in Defense Too
Gemini 4 Argon scores 43.7% on the Cyber Defense Benchmark, #3 of 32 LLMs and the biggest generational jump we have recorded. It also refuses at random, caches poorly, and shows less of its work than early Gemini models.
Should Your AI Agents Be Auto-Approving Their Next Move? | Tuskira
New research shows auto-approve raises attack success on coding agents from 29.2% to 95.6%. What enterprises should require before granting agents autonomy.
Why AI SOC Agents Stop Investigating Too Soon
Most hunt traces on our 32-model benchmark end with the model deciding it's done. Why AI SOC agents stop investigating too soon, and how to test yours.
AI Pentesting Tools: 5 Proof Tests to Run Before You Buy
Every AI pentesting tool says yes to multi-role testing, internal reach, retests, safety, and detection. Five one-day POC tests show which claims hold.
Jump the starting gun with a head start for every threat hunt
Intellyx analyst Jason English on how hunt packs let an AI threat hunting agent run five to ten hunts at once, so analysts start every hunt with findings.
Anthropic Cyber Mission: Finding Vulnerabilities Is the Easy Part | Tuskira
Anthropic's Cyber Mission gives open-source projects free, model-generated vulnerability findings with exploit proofs. Anthropic also says finding isn't the hard part. Here's what moves downstream to your SOC, and how Tuskira closes it.
Tuskira Named a 2026 SINET16 Honoree | Agentic Cyber Defense
Tuskira is a 2026 SINET16 Honoree, one of 16 companies chosen from 158 applicants across 10 countries by 100+ CISOs, security executives and investors. Here's what the year of building looked like.
Deployed Is Not the Same as Protected
Research across 14,652 detections shows why nearly half need attention, and what to measure instead of detection count.
SOC Analyst Burnout: The Metrics That Show Whether Automation Is Working
Automation metrics improve on their own. Seven human-side measures that show whether the team recovered, where to pull each one, and how to read them against your own baseline.
MTTC: mean time to conclusion, the SOC clock worth watching in 2026
MTTC means two different things. Mean time to conclusion measures time to a defensible verdict. Mean time to contain measures time to stop the spread.
Exaforce extends its AI security tool to monitor more than just Claude
Exaforce is offering to help enterprise security teams discover and monitor AI agents using security telemetry they already collect, rather than requiring yet another endpoint sensor. By combining usage data from agentic AI platforms with endpoint, cloud, SaaS and code data, Exaforce AI Security can identify risks, detect suspicious behavior, and respond to threats, the company said. “Exaforce uses data the SOC already collects to inventory every AI app and agent, connect each one to the person,
Multi-Tenant SOC Readiness: An AI Checklist for MSSPs
Before an MSSP onboards tenants onto an AI SOC platform, five things have to be true on its own side. Contracts, access, runbooks, authority and analyst capacity, tenant by tenant.
How AI SOC Agents Reduce Alert Fatigue for Healthcare IT and Security Teams
Healthcare security teams face rising alerts with limited staff. See how AI-driven investigations reduce alert fatigue, accelerate MTTR, and deliver 24/7 coverage.