Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

1,719 matching stories — announcement, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

New Webinar: Closing the Approval Gap in AI-Era Ad Tech

A single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your forms, customer data, and […] The post New Webinar: Closing the Approval Gap in AI-Era Ad Tech appeared first on Reflectiz.

Announcement

5 Generative AI Security Risks Compliance Teams Need to Know

Your employees aren't trying to create compliance incidents by using AI tools. They're trying to finish their work faster. According to a 2026 BCG survey, 74% of frontline employees now use generative AI every day or a few times a week. When an employee uses an enterprise AI assistant to summarize a customer contract before a meeting, another pastes application logs into a public generative AI tool to troubleshoot an issue, or a developer relies on an AI coding assistant connected to an internal

Announcement

[2026.07 Vulnerability Report] Trends and Mitigation Strategies for High-Risk Joomla Vulnerabilities

Joomla is an open-source content management system (CMS) that helps users efficiently build and manage websites and content. While its adoption rate is relatively low in Korea, it is widely used overseas on a variety of websites, including those of corporations, public institutions, and educational organizations. Joomla allows users to add functionality not only through its core features but also via various extensions such as components, modules, and plugins. While this extension structure offe

Announcement

[2026.07] Threat Intelligence Report

Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-41283OpenStack Mistral Unauthenticated RCE9.9CRITICAL 2CVE-2026-47647Microsoft Dynamics 365 Access Control Privilege Escalation9.9CRITICAL 3CVE-2026-56274Flowise Custom MCP Server OS Command Injection RCE9.9CRITICAL 4CVE-2026-8206Kirki WordPress Plugin Account Takeover 9.8CRITICAL 5CVE-2026-47291Windows HTTP.sys Integer Overflow RCE9.8CRITICAL 6CVE-2026-25089Fortinet FortiSandbox OS Command Injectio

Announcement

What Is AI Pentesting and How Does It Work?

AI pentesting uses reasoning-capable models to continuously find and validate the flaws scanners miss, especially broken authorization and business-logic abuse.

Announcement

Zombie CVEs: Put to Rest by Humans, Dug Back Up by AI Agents

New research: 65–75% of frontier AI agents’ working patches resurrect vulnerabilities that were already found, fixed, and buried.  In 2023, a path traversal vulnerability in Starlette, one of Python’s most popular web frameworks  – was found, disclosed as CVE-2023-29159, and fixed. Case closed. The bug was dead and buried, like hundreds of thousands of CVEs before it: discovered by researchers, […]

Announcement

EU CRA Compliance Checklist: 5 Steps to Prepare Now

The post EU CRA Compliance Checklist: 5 Steps to Prepare Now appeared first on Anchore.For years, software vendors have been told to build secure products, maintain visibility into their dependencies, patch vulnerabilities, and provide customers with meaningful security information. The European Union Cyber Resilience Act changes the nature of that advice. For many companies, these practices are becoming legal requirements, with reporting obligations beginning this fall and most requirements [&#

Announcement

Finding Went Exponential. Your Fixing Didn’t.

Defenders and threat actors got handed the same superpower this year. It finds vulnerabilities. The CVE curve is the cleanest public proof we have. 48,185 published in 2025, up 21% over 2024, and 2026 is running far hotter. CVE publication held near 51 a month for nearly four years, then broke. A changepoint analysis lands […] The post Finding Went Exponential. Your Fixing Didn’t. appeared first on StackHawk, Inc..

Announcement

Credentialed Scanning: The Accuracy Upgrade that Comes with a Loaded Gun

Key Takeaways Credentialed scanning (also called authenticated vulnerability scanning) is a vulnerability scan that logs into the target system with valid credentials and inspects it from the inside. Instead of poking at open ports and guessing versions from banners, a credentialed vulnerability scan reads the installed package list, patch level, registry keys, and configuration files ... Read more

Announcement

Why does the rise of Agentic AI force security teams to become research-aware?

Bruce Schneier : "security is a process, not a product". .toc-smart { position: fixed; top: 120px; left: 20px; width: 200px; font-family: Inter, system-ui, sans-serif; font-size: 10px; line-height: 1.2; z-index: 99; padding-left: 1rem; border-left: 4px solid #d0d0dd; color: #2e2e2e; transition: opacity 0.3s ease; } .toc-smart.hidden { opacity: 0; pointer-events: none;

Announcement

Best Cloud Penetration Testing Providers in 2026

Key Takeaways: Most cloud breaches begin with a configuration error the customer made. Gartner projected that through 2025, 99% of cloud security failures would be the customer’s responsibility, caused by misconfigured identity and access management, exposed storage, and over-permissioned services.  Cloud penetration testing is the simulation of real-world attacks against cloud infrastructure on AWS, Azure, ... Read more

Announcement

8 best AI pentesting tools for 2026

AI pentesting means different things from vendor to vendor. Compare the top 2026 tools on autonomy, coverage, strengths, and pricing.

Announcement

Shift Down, Not Just Left: Why Security Must Adapt to Agentic Era

Security teams have spent the better part of a decade trying to shift left — catching issues earlier in the development lifecycle instead of at the end.  It worked, to a point.  But in a recent OX Security webinar on AI and supply chain risk, Atlassian CISO David B. Cross made the case that the […] The post Shift Down, Not Just Left: Why Security Must Adapt to Agentic Era appeared first on OX Security.

Announcement

Why Model Routing Backfires and How to Build Agents That Don’t Burn Your Budget

Model routing promises to cut your AI agent spend by offloading routine tasks to cheaper models like Claude Haiku while reserving frontier models like Claude Sonnet for complex reasoning. In the right configuration, routing strategies can reduce inference costs by 40–85%. But if you implement routing incorrectly in a multi-turn agent, you can end up …