Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
375 matching stories — announcement, in API Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cequence Platform 9.0 embeds an AI assistant and exposes the full platform via MCP, so every team gets the expertise it needs and every agent gets the access it earns. AI agents are changing how customers interact with applications. Shopping, banking, claims processing, network configuration — workflows that once required a human to navigate a […] The post The API security expert you don’t have to hire appeared first on Cequence Security.
Simplify traffic routing with no code request routing. Host multiple services on one domain with declarative, path-based rules – no custom code required.
Equixly’s proprietary AI delivers purpose-built offensive security testing for APIs, web apps, LLMs, and MCP servers. Fast, accurate, and owned end to end.
For many teams, Copilot is the AI assistant that’s already switched on (mainly because it is neatly built into VS Code). It has become a go-to platform for agentic coding, which also makes it an easy place for unreviewed code to accumulate. Agent mode can hand you a finished PR before standup ends, but the […] The post Writing Secure Code with GitHub Copilot: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..
Cursor lets you steer its agent with rules. The .mdc files in your project turn “follow our conventions” into behavior the agent pulls in as it works, and security testing fits that model cleanly. That’s how StackHawk plugs into Cursor: as a set of rules that teach the agent to scan, fix, and verify the […] The post Writing Secure Code with Cursor: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..
The Open Web Application Security Project (OWASP) is a non-profit organization focused on improving software security. Its best-known resource is the OWASP Top 10, a regularly updated awareness document that summarizes the most critical web application security risks. The OWASP Top 10 2025 reflects how... Read more The post OWASP Top Ten Most Critical Web Application Risks appeared first on Invicti.
Anthropic recently published a detailed account of how it contains Claude across its products, including the vulnerabilities its own defenses missed. The article surfaces a discipline most enterprises will need long before they finish their first agentic AI project: agent containment. AI agents now write code, query databases, file tickets, and update records, and every […]
Anthropic recently published a detailed account of how it contains Claude across its products, including the vulnerabilities its own defenses missed. The article surfaces a discipline most enterprises will need long before they finish their first agentic AI project: agent containment. AI agents now write code, query databases, file tickets, and update records, and every […] The post Agent Containment: Definition, Risks, and Techniques appeared first on Cequence Security.
If agents are connected to APIs, attackers can use them to explore and exploit weak authorization paths faster. The API vulnerability was already serious. Agentic access makes it scalable.
Codex CLI lives in your terminal and works alongside the tools that developers already use. Like other terminal-based agents, you simply point it at a directory, and OpenAI’s coding agent reads, changes, and runs the code inside it. The features it finishes pile up quickly. The security check on those features is still the slow, […] The post Writing Secure Code with OpenAI Codex: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..
Organizations are rushing to deploy AI agents, but many still lack a clear view of what those agents can access, which tools they can call, and which APIs they can trigger.
Liferay environments face a growing volume of CVEs and limited patch paths for older versions. This guide explains which vulnerabilities matter, how they are exploited, and how Invicti scans Liferay Portal and DXP to identify real risk. Read more The post Liferay vulnerability scanner: How to detect and remediate CVEs in Liferay Portal and DXP appeared first on Invicti.
Every Mission Impossible film follows a familiar pattern. Just as Ethan Hunt thinks he’s solved the problem, another one appears. The plan changes. The threat evolves. The mission gets harder. Modern cybersecurity is starting to feel remarkably similar. Last week alone, security teams were dealing with a steady stream of vulnerabilities across browsers, collaboration tools, open-source software and enterprise platforms. None of that is unusual anymore. What is becoming unusual is the sheer...
Learn how to secure Microsoft IIS with practical hardening best practices, attacker-focused insights, and continuous validation strategies. This guide covers common IIS misconfigurations, real-world exploitation techniques, and how to protect web applications running on IIS servers. Read more The post IIS security best practices: How to secure an IIS server and web applications appeared first on Invicti.
Europe’s sovereignty debate has entered a new phase. What once focused on data residency and compliance is rapidly becoming a much larger question about who controls the infrastructure, AI systems, and operational layers underpinning Europe’s digital future. From hyperscaler dependence to AI compute concentration, the continent is beginning to confront a difficult reality: owning the park is not the same as controlling the gates.
Editor's note: This article was originally published by Craig Riddell on LinkedIn. It has been republished here with the author's permission. Boards are giving AI security more airtime than ever. What they're not giving is the right framing. A year or two ago, AI was mostly a question of experimentation risk. Today, it's tied directly [...] The post What Your Board Gets Wrong About AI Security appeared first on Wallarm.
The Model Context Protocol (MCP) is a de facto standard for providing structured access to privileged systems for AI agents and external integrations. It acts as a USB-C port for AI, enabling faster innovation by allowing organizations to expose tools, resources, and workflows without the time-consuming work of building APIs. Adoption has surged in recent [...] The post Extending Security to MCP Servers: Closing a Critical Gap appeared first on Wallarm.
If you are running a web server, it often shows the world what type of server it is, its version number, and sometimes even the operating system. This information is exposed in HTTP response headers and can be obtained with a simple request using a... Read more The post Configuring your web server to not disclose its identity appeared first on Acunetix.
Award Validates Corsha's Machine Identity Provider Platform as the Foundation for Zero Trust OT Security Across the U.S. Military's Combat Logistics Enterprise
Most organizations treating AI security as a model problem are defending the wrong layer. Security teams filter prompts, patch jailbreaks, and tune model behavior, which is all necessary work, while the actual attack surface sits largely unexamined underneath. That surface is the API layer: the endpoints AI systems use to retrieve data, call tools, and [...] The post 6 Lessons Security Leaders Must Learn About AI and APIs appeared first on Wallarm.
