0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

417 matching stories — in API Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Top 10 web application incidents in 2026

Explore top 10 web app incidents in 2026: confirmed attacks, data breaches, exploited vulnerabilities, and lessons for web application security teams.

EquixlyVendor blog
Announcement

Des sites IPTV pirates toujours accessibles : pourquoi la justice refuse de sanctionner les VPN

Jusqu'à 10 000 euros par jour et par domaine non bloqué, voilà ce que réclamait beIN Sports à plusieurs intermédiaires techniques, dont NordVPN, Surfshark et Cloudflare. Malgré des sites de streaming illégal toujours accessibles, le tribunal judiciaire de Paris a rejeté ses demandes. Une nouvelle décision qui précise les limites des obligations imposées aux fournisseurs de VPN.

CloudflareIndustry coverage
Announcement

How to Build Your Actual Network Map with Custom Agents in Orca

Ask most teams for a map of their network and you’ll get one of two things: a diagram someone drew for an audit two years ago, or an export from the firewall and cloud consoles showing what each rule allows. Both describe intent. Neither describes what an attacker on the internet can actually reach today. […] The post How to Build Your Actual Network Map with Custom Agents in Orca appeared first on Orca Security.

Orca SecurityVendor blog
Incident

CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape

A critical Linux kernel vulnerability tracked as CVE-2026-99999, dubbed PwnEscape, can break the isolation boundary between virtual machines and their underlying hosts. The flaw resides in the Linux networking stack and can allow attacker-controlled code running inside a guest VM to disclose host memory, crash the host, and, under demonstrated lab conditions, achieve guest-to-host code […] The post CVE-2026-99999: Critical PwnEscape Linux Kernel Flaw Enables Guest-to-Host Escape appeared f

EscapeIndustry coverage
Announcement

ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More

Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and

EscapeIndustry coverage
Announcement

Frontier-Level Red-Teaming From a Self-Hostable Open-Weight Model: Testing NVIDIA Nemotron 3.5 Super

Key Findings AI Agents Are the Newest Attack Surface The teams building fastest aren’t just shipping apps anymore. They’re shipping agents: support bots wired into ticketing systems, internal copilots with read access to the data warehouse, coding agents that can open pull requests, and autonomous workflows that call APIs on their own. Each one is […] The post Frontier-Level Red-Teaming From a Self-Hostable Open-Weight Model: Testing NVIDIA Nemotron 3.5 Super appeared first on

Orca SecurityVendor blog
Announcement

Weekly Threat Report October 7–13, 2026: French Supermarket Refrigeration Attacks, Ivanti Connect Secure Zero-Day Chain, and AI-Agent Incidents

The Week At A Glance This week’s incidents highlighted the real-world impact of exposed control systems and rapidly exploited enterprise […] The post Weekly Threat Report October 7–13, 2026: French Supermarket Refrigeration Attacks, Ivanti Connect Secure Zero-Day Chain, and AI-Agent Incidents appeared first on .

Prophaze Technologies Pvt.Ltd.Vendor blog
Incident

Critical GitLab RCE Lets Unauthenticated Attackers Execute Code on Servers (CVE-2026-97229)

Executive Summary A maximum-severity vulnerability (CVE-2026-97229, CVSS 10.0) was disclosed affecting GitLab Community Edition (CE) and Enterprise Edition (EE), allowing attackers to execute arbitrary code on GitLab servers via specially crafted regular expressions in CI/CD pipeline configurations. Due to the potential for full server compromise and downstream supply-chain impact, immediate patching is required. About CVE-2026-97229 […] The post Critical GitLab RCE Lets Unauthenticated At

Orca SecurityVendor blog
Announcement

You Can’t Secure the AWS Accounts You Don’t Know About.

Wallarm Infrastructure Discovery Named Enterprise Cloud Security Solution of the Year. Ask an AWS security team how many accounts they run, and the honest answer is usually a range. Enterprises on AWS operate anywhere from 100 to 5,000 accounts. Most security teams can see only a fraction of them. That gap is why we built [...] The post You Can’t Secure the AWS Accounts You Don’t Know About. appeared first on Wallarm.

WallarmIndustry coverage
Announcement

Agentic Zero Trust Scorecard: Score Your Agent Governance

Earlier this year, Dr. Chase Cunningham “DrZeroTrust” published Agentic Zero Trust: Extending the Zero Trust Security Paradigm to Autonomous AI Systems. The paper argues that Zero Trust in its original form is necessary but incomplete for the agentic AI world and lays out what is required. […]

Cequence SecurityVendor blog
Announcement

AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed

Answer this without checking: how many AI agents are running in your environment right now? Most security leaders give an estimate and a shrug. That is a fair response, because agents get spun up by an engineer solving a problem on a Tuesday afternoon, through a path that puts them on nobody's radar. In August [...] The post AI Governance on AWS: The Runtime Control Loop: AI Governance on AWS: Four Functions, One Loop, and a Deadline That Already Passed appeared first on Wallarm.

WallarmIndustry coverage
Announcement

New Remote DoS Attacks Against GraphQL Java

Executive Summary Imperva Threat Research identified a series of remote denial‑of‑service vulnerabilities in GraphQL Java, one of the most widely used libraries for GraphQL in the Java ecosystem. In this blog, we’ll deep dive into these vulnerabilities, analyze their impact, and provide recommendations to protect your environment. If your endpoints are protected by Imperva Web Application Firewall, your systems are already protected against these threats. Introduction GraphQL Java is the engine

ImpervaIndustry coverage
Announcement

Data Sovereignty Isn’t Optional Anymore. Here’s How eXate Makes It Achievable.

Every regulated institution is living under the same converging pressure, whichever jurisdiction it calls home. Data sovereignty legislation is tightening everywhere: Canada’s Bill C-27, the UAE’s PDPL, Qatar’s PDPPL, India’s DPDP Act and Malaysia’s PDPA all impose residency, access control and audit requirements standard cloud tooling was never built to satisfy.

eXateVendor blog
Announcement

AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of

Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good, because it should. It's the same blind spot most [...] The post AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of appeared first on Wallarm.

WallarmIndustry coverage