How Physical AI Challenges Traditional Security Assumptions for Autonomous Systems
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,719 matching stories — announcement, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
From 100 Patents to Best Workplaces: Feedzai’s Innovation-first Culture Recognized by Fast Company
The post From 100 Patents to Best Workplaces: Feedzai’s Innovation-first Culture Recognized by Fast Company appeared first on Feedzai.
SAP Security Patch Day September 2026 | RedRays
SAP Security Patch Day September 2026 brings 20 security notes, four of them HotNews rated up to CVSS 10.0, alongside five High priority issues, ten Medium priority fixes and one Low priority update. They span the NetWeaver stack, SAP S/4HANA, SAPUI5 and several cloud products. This release lands on the network-facing core of NetWeaver. Extended […] The post SAP Security Patch Day September 2026 | RedRays appeared first on RedRays - Your SAP Security Solution.
What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning
Much of the debate about agentic code scanning revolves around three core questions: Do more capable models find more vulnerabilities... The post What Benchmark Data Says About Deterministic SAST and Agentic Code Scanning appeared first on Cycode.
September 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams and identify vulnerabilities that t
How to Fix SQL Injection Vulnerabilities Before They Ship
A SQL injection finding usually starts with a simple warning: untrusted input may be reaching a database query.
The next State of Code developer survey is open
Join the State of Code developer survey to help measure how AI generated code, agents, and evolving review practices are affecting development teams.
Attack Chaining: When Low-Severity Vulnerabilities Combine into High-Risk Attack Paths
Your backlog is full of low- and medium-severity vulnerabilities nobody is planning to fix... The post Attack Chaining: When Low-Severity Vulnerabilities Combine into High-Risk Attack Paths appeared first on Cycode.
AI Pentesting for Continuous Compliance and Fast Audits
Your annual pentest report starts aging after the next release. A new endpoint, authentication change, payment flow, or third-party integration can alter the application that was originally assessed. AI pentesting helps close that gap by testing applications as they change and preserving evidence of what happened. But frequency alone does not create credible compliance evidence. […]
Healthcare IT Modernization: A Practical Guide for Hospital and Payer Systems
TL;DR Hospitals run on software that has been accumulating since before most of the current staff arrived. The registration system...
Healthcare Data Modernization: Legacy SQL/Oracle to Cloud-Native Stores
TL;DR Hospital and payer data teams rarely get to modernize on a clean sheet. The patient records live in a...
What are agentic pentesting tools?
Traditional security testing tools excel at applying proven security checks quickly and consistently. Agentic pentesting tools add another dimension: they use AI agents to explore applications, adapt their testing based on runtime behavior, and investigate attack paths that may require multiple steps or changing strategies.... Read more The post What are agentic pentesting tools? appeared first on Invicti.
Application modernization strategy: a framework for SaaS teams
TL;DR Every SaaS engineering team eventually inherits a codebase that works well and changes badly. Features ship slower each quarter....
National Insider Threat Awareness Month 2026: Expert Insights
August 2026 Threat Report: Vulnpocalypse geht weiter
Der sogenannte Vulnpocalypse ist nun in vollem Gange. Dieser Threat Report für August 2026 kratzt nur an der Oberfläche der neuen, hochriskanten Schwachstellen, die im August 2026 aufgetaucht sind. Um zu sehen, wie die branchenführende Schwachstellenerkennung von Greenbone Ihre IT-Sicherheitsabläufe unterstützen kann, besuchen Sie unser SecInfo-Portal und werfen Sie einen Blick auf unser vollständiges Erkennungsportfolio. […]
How to Prioritize Thousands of Security Findings Without Relying on CVSS Alone
Your scanner reports 1,200 vulnerabilities.
How to Reduce SAST False Positives Without Missing Real Risk
How to Reduce SAST False Positives Without Missing Real Risk
Shai-Hulud Rises From the Dead after 111 days
A known Shai-Hulud worm payload sat dormant for 111 days, then republished to npm, right past the malware scanning meant to catch it. Category: Vulnerabilities & Threats
StyleSmuggler fix: patch the Magento and Adobe Commerce RCE
StyleSmuggler is an unauthenticated RCE hitting Magento and Adobe Commerce, with no CVE and no Adobe patch yet. Aikido already has the fix. Category: Vulnerabilities & Threats
Indusface WAS AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps
Manual pentesting samples your risk. Indusface WAS AI Pentest tests every endpoint, role, and workflow, with expert validation on every finding. The post Indusface WAS AI-Assisted Pentest: Comprehensive Vulnerability Assessment Across Web, API and AI Apps appeared first on Indusface.
Autonomous Pentest Findings: Unauthenticated Kill Switch
Some of the most dangerous vulnerabilities in modern web apps are the default features left switched on where they were never meant to be reachable. The first entry in our Findings from the AP series looks at an exposed actuator endpoint. On paper, this finding started the same way most do: an HTTP endpoint returned ... Read more
Fake Help Desk Calls Exploit Executive Data Theft and Extortion Campaign
Learn how the PREY-0058 extortion campaign uses fake IT help desk calls, MFA phishing, and stolen Microsoft 365 session tokens to access corporate data without deploying malware.
Coder and SpaceXAI Collaborate to Bring Agentic Coding Inside the World’s Most Regulated Enterprises
Coder today announced Coder Agent Relay, a self-hosted execution environment for cloud coding agents, with SpaceXAI as its launch partner. Cursor Cloud Agents can now run inside Coder workspaces on infrastructure the customer already operates.
How CISA BOD 26-04 Is Changing Risk-Based Vulnerability Management
Tenable's Liat Hayun, SVP of Product Management, tells FedTech Magazine that vulnerability risk is "not one-size-fits-all." Hayun notes, "There can be the same vulnerability in the same type of environment, but agencies must treat them differently based on the context of the environment."
Top Trivy alternatives for container and cloud scanning in 2026
Six Trivy alternatives compared for 2026 on container scanning, IaC, SAST, prioritization, and fixes, with where each one actually fits. Category: DevSec Tools & Comparisons
Four new languages arrive in SonarQube Cloud: MuleSoft DataWeave, Gosu, Groovy, and PowerShell
SonarQube Cloud now brings deterministic code verification to integration workflows, insurance systems, build pipelines, and infrastructure scripts. All four languages are available now, with no extra configuration.
The Future Belongs to Automated Modernization
The Memory Safety Reckoning: Part 4 of 4 The post The Future Belongs to Automated Modernization appeared first on GrammaTech.
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
OverviewA new Linux toolkit, identified by Rapid7 Labs, has been targeting organizations across South Korea’s automotive and media industries with minimal detection. The campaign made use of a HAProxy instance named “ted backdoor”, alongside trojanized versions of crond, agetty, atd, sshd, and polkitd. This previously undocumented framework enabled threat actors to execute remote commands on compromised servers, inject malicious scripts into web traffic, perform credential harvesting, and engage
Agent, agentenlos oder beides? Was jede Architektur wirklich sehen kann
Agenten sind im Schwachstellenmanagement nichts Neues. Die Frage taucht immer wieder auf, weil der gescannte IT-Bestand nicht mehr stillhält. Ein Scanner, der davon ausgeht, dass jeder Host zu einer festen Zeit über ein bekanntes Netzwerk erreichbar ist, beschrieb die meisten Unternehmen vor fünfzehn Jahren noch recht treffend. Heute beschreibt er nur noch sehr wenige, in […]
Thomas Memmel to become CEO of Adnovum
The Board of Directors of the Swiss software company Adnovum has appointed Thomas Memmel as CEO. Thomas Memmel brings more than 20 years of experience in digital transformation, as well as extensive leadership and management experience in the IT and consulting industries. Most recently, he was a member of the Executive Board of the Zühlke Group, where he was responsible for the global Financial Services business. Prior to that, he held various leadership positions in Switzerland and Germany and
Shift Right? After 20 Years of Shift Left?
Two decades of shift left never covered the thirty years of software already running in production. Here's what Semgrep's research team found pointing frontier models at it, and three things you can do this week.
NIST just published AI prompts for CSF 2.0. Here is what to settle first
NIST's draft SP 1353 provides AI prompts for three CSF 2.0 tasks and says weeks of drafting compresses into hours. Here is what the prompts can draft, what only humans can validate, and the four things to settle before anyone opens a model.
Stop runtime threats with Workload Protection response actions
When a runtime threat appears, every step costs time. Datadog Workload Protection can now kill processes and isolate workloads with automated and manual response actions.
Mend Renovate Enterprise: managing dependencies at agentic scale
How Mend Renovate Enterprise keeps dependency updates flowing at agentic scale.
Tenable Uses OpenAI GPT Cyber Models to Help Defenders Inspect Community-Built AI Components
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that it is collaborating with OpenAI to create the CyberAgents Exchange AI Inspector (Exchange Inspector), a new security review process for AI agents, skills, MCP servers and multi-agent playbooks available through the CyberAgents Exchange, powered by Tenable.Unveiled today at OpenAI’s Intelligence at Work: Cyber Summit, Exchange Inspector combines frontier assessment using OpenAI GPT cyber models, skills i
Cybersecurity chiefs warn of evolving insider threats
Anchore + AI Just Got Easier: The Anchore Enterprise MCP Server
The post Anchore + AI Just Got Easier: The Anchore Enterprise MCP Server appeared first on Anchore.Anchore Enterprise was built on an automation-first philosophy from day one. We have always believed that security is an inherently complex process and tools need to be adaptable to fit in a wide variety of workflows and ecosystems to be successful. Every capability in the platform is exposed through a full-coverage API. Anchore has never […]
Best Codacy Alternatives in 2026
AI code review has moved fast. Teams no longer expect just linting and style enforcement, they want a layer that catches real production risk before code ships, and most platforms in this category have raced to add one. Codacy has been a trusted name in code quality since 2012, used by more than 15,000 organizations […] The post Best Codacy Alternatives in 2026 appeared first on Qodo.
7 Agent Skills for Engineering Work Coding Agents Miss
Code generation is only one part of software delivery. These skills make the planning, testing, workflow safety, developer experience, and documentation around the code more explicit. AI coding agents are good at responding to concrete implementation requests. Ask for an endpoint, a refactor, or a bug fix, and they can start producing code immediately. The […] The post 7 Agent Skills for Engineering Work Coding Agents Miss appeared first on Qodo.
The CRA Reporting Deadline Is Almost Here
The European Union (EU) Cyber Resilience Act (CRA) is no longer a future-looking compliance project. Its first major operational deadline is now days away.