Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

417 matching stories — in API Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Understanding the Importance of MCP Security

Traditional API security focuses on predictable client-to-server interactions. MCP adds an AI decision layer, dynamic tool discovery, delegated authority, and context that can influence agent behavior.

Announcement

Delivering A Resilient World Cup Final

How do you stream the World Cup to estimated 1.8B fans? Explore Fastly’s traffic insights, extra-time viewer surges, and real-time anti-piracy strategies.

Announcement

WP2Shell: WordPress Core SQLi + REST API Chain to Pre-Auth RCE

WP2Shell chains CVE-2026-60137 and CVE-2026-63030 for unauthenticated RCE on WordPress Core. Patch to 6.8.6, 6.9.5, or 7.0.2 now, PoCs are already public. The post WP2Shell: WordPress Core SQLi + REST API Chain to Pre-Auth RCE appeared first on Indusface.

Announcement

Equixly vs. XBOW

Equixly vs. XBOW compared: in-house AI vs. cloud frontier models, flat vs. token pricing, EU data residency, and attack surface coverage for APIs, web apps, and LLMs.

Announcement

A Better PR Inbox Doesn’t Fix the Queue. It Just Sorts It.

GitHub shipped a redesigned pull request dashboard this week. Inbox, saved views, smarter filters, keyboard shortcuts. The author filter now even recognizes agent-created PRs, so author:@me returns the work you told Copilot to open on your behalf. It’s a good dashboard. It’s also an admission. The framing is right there in the headline. The review […] The post A Better PR Inbox Doesn’t Fix the Queue. It Just Sorts It. appeared first on StackHawk, Inc..

Announcement

Transparent Field-Level Encryption

Protect sensitive data without changing your applications Transparent Field-Level Encryption (TFLE) protects sensitive data as it moves between applications and databases—without requiring changes to application code, database schemas or business workflows. By operating directly on the database wire protocol, TFLE can identify sensitive fields in queries and responses, apply the appropriate protection policy, and dynamically enforce Row-Level Security (RLS) and Column-Level Security (CLS)....

Announcement

The Insider Has Left the Building: Agentic Governance Beyond Managed Devices

On July 7, Anthropic moved Claude Cowork to the cloud. The agent now runs on web and mobile, keeps working in the background with no device online, and acts across your files, email, calendar, and connected tools until the job is done. A few weeks earlier, OpenAI shipped Workspace Agents, Codex-powered agents that run inside […] The post The Insider Has Left the Building: Agentic Governance Beyond Managed Devices appeared first on Cequence Security.

Announcement

When the Drop Becomes the Target: Defending Limited-Edition Hype Sales from Scalper Bots

~2x Reduction in fraudulent account takeovers ~70 IPs each firing 500+ requests in a single 30-minute window ~1 in 5 malicious requests to the inventory-availability endpoint blocked at peak ZERO downtime or added friction for genuine shoppers A limited-edition collectible. A fixed launch time. A small, unpredictable amount of stock that sells out in minutes. […]

Announcement

AI red teaming vs. AI penetration testing

AI red teaming vs. AI penetration testing: learn the key differences, where they meet, and how to secure LLM apps by testing both the model and the system.

Announcement

Writing Secure Code with GitHub Copilot: Scan, Fix, and Verify with StackHawk

For many teams, Copilot is the AI assistant that’s already switched on (mainly because it is neatly built into VS Code). It has become a go-to platform for agentic coding, which also makes it an easy place for unreviewed code to accumulate. Agent mode can hand you a finished PR before standup ends, but the […] The post Writing Secure Code with GitHub Copilot: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..

Announcement

OWASP Top Ten Most Critical Web Application Risks

The Open Web Application Security Project (OWASP) is a non-profit organization focused on improving software security. Its best-known resource is the OWASP Top 10, a regularly updated awareness document that summarizes the most critical web application security risks. The OWASP Top 10 2025 reflects how... Read more The post OWASP Top Ten Most Critical Web Application Risks appeared first on Invicti.

Announcement

Liferay vulnerability scanner: How to detect and remediate CVEs in Liferay Portal and DXP

Liferay environments face a growing volume of CVEs and limited patch paths for older versions. This guide explains which vulnerabilities matter, how they are exploited, and how Invicti scans Liferay Portal and DXP to identify real risk. Read more The post Liferay vulnerability scanner: How to detect and remediate CVEs in Liferay Portal and DXP appeared first on Invicti.

New capability

Introducing the Wallarm AI Control Platform: One closed loop for AI security and API security.

TL;DR- AI deployment has outpaced AI governance. Most enterprises running AI on AWS cannot answer four basic security questions about what's running, what it's doing,how to stop it, and how to prove it's under control.- The Wallarm AI Control Platform closes this gap: one platform for Discover, Observe,Enforce, and Govern — running natively in your [...] The post Introducing the Wallarm AI Control Platform: One closed loop for AI security and API security. appeared first on Wallarm.

Announcement

CVE Battlefield: Mission Impossible?

Every Mission Impossible film follows a familiar pattern. Just as Ethan Hunt thinks he’s solved the problem, another one appears. The plan changes. The threat evolves. The mission gets harder. Modern cybersecurity is starting to feel remarkably similar. Last week alone, security teams were dealing with a steady stream of vulnerabilities across browsers, collaboration tools, open-source software and enterprise platforms. None of that is unusual anymore. What is becoming unusual is the sheer...

Announcement

IIS security best practices: How to secure an IIS server and web applications

Learn how to secure Microsoft IIS with practical hardening best practices, attacker-focused insights, and continuous validation strategies. This guide covers common IIS misconfigurations, real-world exploitation techniques, and how to protect web applications running on IIS servers. Read more The post IIS security best practices: How to secure an IIS server and web applications appeared first on Invicti.

Announcement

What Your Board Gets Wrong About AI Security

Editor's note: This article was originally published by Craig Riddell on LinkedIn. It has been republished here with the author's permission. Boards are giving AI security more airtime than ever. What they're not giving is the right framing. A year or two ago, AI was mostly a question of experimentation risk. Today, it's tied directly [...] The post What Your Board Gets Wrong About AI Security appeared first on Wallarm.

Announcement

Extending Security to MCP Servers: Closing a Critical Gap

The Model Context Protocol (MCP) is a de facto standard for providing structured access to privileged systems for AI agents and external integrations. It acts as a USB-C port for AI, enabling faster innovation by allowing organizations to expose tools, resources, and workflows without the time-consuming work of building APIs. Adoption has surged in recent [...] The post Extending Security to MCP Servers: Closing a Critical Gap appeared first on Wallarm.

Announcement

Configuring your web server to not disclose its identity

If you are running a web server, it often shows the world what type of server it is, its version number, and sometimes even the operating system. This information is exposed in HTTP response headers and can be obtained with a simple request using a... Read more The post Configuring your web server to not disclose its identity appeared first on Acunetix.