Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
410 matching stories — release, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
renovate-ce-ee mend-renovate-enterprise-edition-10.8.0
renovate-ce-ee mend-renovate-ce-15.8.0
mcode-action v1.0.13
OVHcloud CLI releases backdoored on GitHub to steal developer secrets
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware. [...]
crypto-finder v0.38.0
xum v0.31.1-nightly.726
Hackers Hijack Five OVHcloud CLI Releases to Distribute Secret-Stealing Malware
An attacker used a contributor's GitHub account to replace the download archives on five existing releases of OVHcloud's command-line tool on Monday, October 19. The account had been hijacked, and the new files were a build designed to steal secrets stored on the disk of any machine that runs it, the cloud provider says. They were live on GitHub for up to 94 minutes, from 12:47 to 14:21 UTC,
gh-aw/work-queue/e81ab38ff7975c0920eabaa37e0f4aad70498b9d
From Finding to Fix: A Phoenix Release Built for Action
Phoenix Security's latest platform release tackles the three points where AI security tools break down: unverified findings, firewalls nobody can live with, and remediation that stops at a ticket. Grounded verification, real exception workflows, and PR-first remediation replace guesswork with proof, and tickets with merged code. The post From Finding to Fix: A Phoenix Release Built for Action appeared first on Phoenix Security.
xum v0.31.1-nightly.701
xum v0.31.1-nightly.640
metasploit-framework 6.5.7
crypto-finder v0.37.1
hawkscan-action HawkScan Action 3.2.0
Dynatrace Release Radar 09.26
This series covers recent Dynatrace releases and updates, focusing on what’s new, what’s changed, and how these enhancements can benefit you and your organization. This edition covers the capabilities rolled out in September. If you want to see September in action, head over to our Release Radar launchpad on the Dynatrace Playground. Trace database statements […] The post Dynatrace Release Radar 09.26 appeared first on Dynatrace news.
GitLab 19.5 release notes
crypto-finder v0.37.0
endorlabs-sdk v0.7.4
Prioritize what's actually exploitable: Vulnerability reachability is now available in SonarQube Advanced Security
Vulnerability Reachability in SonarQube Advanced Security shows which dependency risks your code can reach. Fix what matters first. See how it works.
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
Trust What Ships: Your Repository Is Now Your First Defense
The first defense for trustworthy software is deciding what enters the build.
irene 25.11.8
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more than the roughly 70,000 CVEs released in 2015 and earlier, going back to 1999. CVE Disclosure: 2026 year to date has already exceeded the full 2025 total by 64% (as of October 12). (Source: Ivanti Vulnerability KB) Exploitation: 2026 year to date has exceeded the full 2025
docker-nexus-iq-server 1.208.0
Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as
The Code Registry – New release v1.3.9 – 13th October 2026
The post The Code Registry – New release v1.3.9 – 13th October 2026 appeared first on The Code Registry.
End-to-end Snowflake Observability is now generally available in Dynatrace
Dynatrace Snowflake Observability is now generally available, giving teams unified visibility into cost, performance, security, operations, and data quality through the Dynatrace Data Observability app. Guided onboarding, automated telemetry collection, and 14 ready-made dashboards help teams understand the health of their Snowflake environments from day one, with no blank-canvas setup required. As enterprises expand their […] The post End-to-end Snowflake Observability is now generally av
cli v26.4.1
parabank selenium-demo-baseline
metasploit-framework 6.5.6
endorlabs-sdk v0.7.3
Sonar Vortex is now available on SonarQube Server
Give coding agents your architecture and standards before they write, and check every change as it is produced, inside your own infrastructure.
dynatrace-aws-platform-monitoring-s3-log-forwarder v1.2.0
Ship faster, improve reliability, and control CI costs with Datadog CI/CD Optimization
Learn how Datadog CI/CD Optimization helps teams ship faster with shorter CI feedback loops, reliable builds, and controlled compute costs.
irene 25.11.6
The SonarQube Remediation Agent is now available on SonarQube Server
Clear technical debt faster with SonarQube Remediation Agent, which generates verified fixes and submits pull requests for developer review.
codacy-cloud-cli v1.14.0
irene 25.11.5
Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control
Evo ADS Govern Agent Behavior is now generally available, starting with MCP Governance. Discover, approve, monitor, log, and block MCP server usage across leading AI coding agents.