Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,719 matching stories — announcement, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
What Is an AIBOM? AI Bill of Materials Guide | Cybeats
Learn what an AI Bill of Materials (AIBOM) is, what it contains, how to generate one with the OWASP AIBOM Generator, and how to manage AIBOMs at scale.
More than just data: The hidden security risks in Jupyter notebooks
Are your data science tools safe? Sonar researchers uncover vulnerabilities leading to code execution in JupyterLab Desktop and PyCharm.
The API Self-Check: How Hackers Find the Endpoint You Forgot About
Run 6 quick checks to find exposed API endpoints, broken auth, and data leaks before attackers do. See how AppTrana secures APIs continuously. The post The API Self-Check: How Hackers Find the Endpoint You Forgot About appeared first on Indusface.
AI didn't break coding. It broke code review.
Agents ship code faster than teams can review it. Go inside Morgan Stanley's fix for the AI code review bottleneck: risk-based PR routing at scale
Why security champion programs stall, and what AI fixes
Most security champion programs stall from unfunded ownership, not unwilling developers. Where AI actually removes the busywork, and where it changes nothing. The post Why security champion programs stall, and what AI fixes appeared first on Clover Security.
Claude Sonnet 4.6 code quality: we tested it with and without AI guardrails
03.07.2026 Reading time: 7 minutes We put Claude Sonnet 4.6’s AI code quality to the test Werner Heijstek In this article Summary We ran a controlled experiment on Claude Sonnet 4.6, building the same system 20 times with one variable changed: whether a real-time, deterministic quality and security check sat inside the agent’s loop. The […]
DORA vs SPACE Metrics: Key Differences, Use Cases, and When to Use Each Framework
Why Engineering Teams Need More Than One Measurement Framework For many years, organizations relied on activity-based metrics to evaluate engineering...
How To Set Up Enterprise Development Environments with OpenAI Codex and Coder
Run OpenAI Codex in self-hosted cloud development environments built for regulated enterprises. See how Coder secures AI coding agents at scale.
Tool Sprawl Is Dead: But Did Consolidation Actually Fix Anything?
TL;DR Platform consolidation reduces vendor management overhead and simplifies dashboards, but it doesn't solve the fundamental visibility problem. Security teams consolidating SAST, DAST, SCA and WAF into a unified application security platform still miss application-layer attacks because these tools don't see inside running applications. The math proves it: organizations face 17.5 new vulnerabilities per application monthly while remediating only 6 per application. Runtime intelligence provide
The Underappreciated OSS License Compliance Risk from AI Coding Tools
Learn about an under-the-radar IP risk from the use of AI coding assistants.
Shifts in the Supply Chain: How Ransomware Targets Global Logistics Fleets
VicOne CyberThreat Research Lab identifies key vulnerability classes in fleet-related applications, underscoring the need for stronger security across connected fleet platforms.
Tenable Named as the Current Company to Beat for AI-Powered Exposure Assessment in a June 2026 Gartner® Report
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Gartner has identified Tenable as the company to beat for AI-powered exposure assessment in its report, AI Vendor Race: Tenable Is the Company to Beat for AI-Powered Exposure Assessment.According to Gartner, "Tenable's long-standing dominance in vulnerability assessment, its strong asset and attack surface discovery capabilities, and its ability to execute on its AI strategy make it the front-runner in
SonarQube plugins bring trusted verification to Claude Code, Copilot, Codex, Cursor, and others in the agentic loop
Eliminate verification debt with plugins & how to secure AI coding agents across Claude, Copilot, and Cursor using SonarQube. Reduce code outages by up to 44%.
[2026.06] Threat Intelligence Report
Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-20182Cisco Catalyst SD-WAN Controller Authentication Bypass10CRITICAL 2CVE-2026-43898SandboxJS Sandbox Escape RCE10CRITICAL 3CVE-2026-45102OneUptime Sandbox Escape RCE9.9CRITICAL 4CVE-2026-0300Palo Alto Networks PAN-OS User-ID Authentication Portal 9.8CRITICAL 5CVE-2026-8181WordPress Burst Statistics Plugin Authentication Bypass9.8CRITICAL 6CVE-2026-34187Pandora FMS SQL Injection9.8CRITICAL 7CVE-202
Top CVEs of June 2026: 5 Critical Flaws to Patch Now
Five CVEs defined June 2026: Check Point VPN bypass, Splunk pre-auth RCE, Windows HTTP.sys kernel RCE, LiteLLM AI-gateway RCE, and Defender BlueHammer. How to fix each.
AIS Outlines Research Collaboration Opportunities with SUNY Poly at SPARK Workshop
... The post AIS Outlines Research Collaboration Opportunities with SUNY Poly at SPARK Workshop appeared first on Assured Information Security.
Contaminated by Design: What Clinical Trials Can Teach AI Security Researchers
TL;DR This is a story about a contaminated experiment, a single directory name and why AI coding security research needs the same blinding discipline as clinical trials.
Cut your coding agent's cost with Sonar Vortex
New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more efficiently.
Infosec professionals sour on automated pentesting tools
Chasing Zero-Day Vulnerabilities via the Anchore Enterprise API
The post Chasing Zero-Day Vulnerabilities via the Anchore Enterprise API appeared first on Anchore.Through the Looking Glass: Who Stole the Tarts? — Chasing the Cheshire Cat This is post 5 in a seven-part series on what the Anchore Enterprise API makes possible for container security teams.  “Well! I’ve often seen a cat without a grin,” thought Alice, “but a grin without a cat! It’s the most curious thing […]
The CRA Deadline Is Not 2027. Your Evidence Problem Starts Now.
Many product and security teams are treating the Cyber Resilience Act as a 2027 problem.
What’s Unifying Americans in Polarizing Times? Scams.
The post What’s Unifying Americans in Polarizing Times? Scams. appeared first on Feedzai.
Why Alibaba Cloud Visibility Is Becoming a Strategic Priority
Discover why cloud visibility is becoming a strategic priority for Alibaba Cloud, helping organisations strengthen security, governance and risk management. The post Why Alibaba Cloud Visibility Is Becoming a Strategic Priority first appeared on ArmourZero.
Top 8 Data Breaches and Exposures of June 2026
The 8 confirmed data breaches of June 2026, from a 24-billion-record credential dump to ShinyHunters' PeopleSoft and Klue OAuth campaigns. What happened and how to defend.
How to Reduce False Positives by 76% with Repo Context
Traditional SAST buries teams in false positives because it can't see how an app runs in production. Adding repository context — plain-language facts about deployment, trust boundaries, and authentication — cut candidate issues 71-76% across two repositories, with zero high-severity bugs lost.
What your scanner can’t see: Deep visibility into hardened container images with Black Duck
If you’ve ever stared down a vulnerability report and thought “there is no way all this is real,” you’re not wrong. Modern containerized environments generate a lot of noise, findings that technically exist somewhere in the file system but have zero chance of being exploited in your running app. That’s part of why security-conscious teams […] The post What your scanner can’t see: Deep visibility into hardened container images with Black Duck appeared fir
PSD3 and the PSR: What Financial Institutions Need to Know
The post PSD3 and the PSR: What Financial Institutions Need to Know appeared first on Feedzai.
How Agentic AI Enables Autonomous Threat Response at Machine Speed
Why do 40% of alerts received by security teams today go completely uninvestigated? It’s not due to a lack of concern but instead caused by shortening attack windows and compounded by overwhelming tech sprawl. Today’s security teams are operating in a threat landscape defined by escalating attacks, tighter budgets and mounting alert fatigue. Organizations process an average of 960 security alerts per day, and large enterprises handle more than 3,000 daily alerts across roughly 30 tools. That add
Tenable Achieves FedRAMP High and Impact Level 5 Authorization
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Tenable One Cloud Exposure has achieved FedRAMP® High and Impact Level (IL) 5 authorization, one of the U.S. government’s most stringent security certifications. Part of the Tenable One Exposure Management Platform, Tenable One Cloud Exposure is an actionable cloud security solution that provides unified visibility and AI-powered contextual insights to help organizations proactively identify and close c
AI Penetration Testing Works, But Findings Need Runtime Validation
It was just a matter of time before the concept of an independent AI agent identifying vulnerabilities like an experienced pentester appeared to be impossible. This notion is no longer out of reach today.
Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
Snyk VulnBench JS 1.0: 300 repeated scans show LLM security findings vary by run, while SAST and models catch different vulnerability gaps.
How Feedzai IQ Score Delivers Seamless AI Model Updates Without Operational Disruption
The post How Feedzai IQ Score Delivers Seamless AI Model Updates Without Operational Disruption appeared first on Feedzai.
Miasma/Hades Variant Hits LeoPlatform: npm Worm Runs binding.gyp Under Bun to Steal Cloud Credentials
Miasma/Hades variant compromised 23 LeoPlatform npm packages. A planted binding.gyp runs an obfuscated credential stealer under Bun to evade Node tooling. Zero CVE. Rotate now. The post Miasma/Hades Variant Hits LeoPlatform: npm Worm Runs binding.gyp Under Bun to Steal Cloud Credentials appeared first on Phoenix Security.
Writing Secure Code with GitHub Copilot: Scan, Fix, and Verify with StackHawk
For many teams, Copilot is the AI assistant that’s already switched on (mainly because it is neatly built into VS Code). It has become a go-to platform for agentic coding, which also makes it an easy place for unreviewed code to accumulate. Agent mode can hand you a finished PR before standup ends, but the […] The post Writing Secure Code with GitHub Copilot: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..
Writing Secure Code with Cursor: Scan, Fix, and Verify with StackHawk
Cursor lets you steer its agent with rules. The .mdc files in your project turn “follow our conventions” into behavior the agent pulls in as it works, and security testing fits that model cleanly. That’s how StackHawk plugs into Cursor: as a set of rules that teach the agent to scan, fix, and verify the […] The post Writing Secure Code with Cursor: Scan, Fix, and Verify with StackHawk appeared first on StackHawk, Inc..
When Cyber Risk Becomes Physical: What the EU Cyber Resilience Act Means for Connected Machines and Physical AI
The EU Cyber Resilience Act sets mandatory cybersecurity requirements for connected and AI-enabled products. Here’s what manufacturers need to know about SBOMs, vulnerability management, and CRA readiness.
AI Decline? Confidence in Autonomous Penetration Testing Falls
Less than one in ten of cybersecurity pros trust AI testing tools to find vulnerabilities, with over three-quarters say their AI vulnerability scanning tools missed critical flaws
AI Driven Product Roadmaps: Turning Security Insights Into Decisions
Every product team aims at creating features that their customers will love. However, the problem lies in figuring out which feature requests truly deserve consideration.