Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
411 matching stories — release, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
xum v0.28.6-nightly.70
irene 25.10.0
irene 25.9.0
GitLab 19.4 release notes
crypto-finder v0.27.1
2ms v5.4.0
cli v26.3.5
container_iac_secrets_scanning Add policy parameter to IAC
xum v0.28.6-nightly.60
Dynatrace Release Radar 08.26
This series covers recent Dynatrace releases and updates, focusing on what’s new, what’s changed, and how these recent enhancements can benefit you and your organization. Each post covers newly available capabilities and where to explore them. The post Dynatrace Release Radar 08.26 appeared first on Dynatrace news.
Automatic analysis for GitLab is now available
SonarQube Cloud automatic analysis for GitLab scans code for security issues and bugs with zero configuration and no CI pipeline setup required.
Extending Supply Chain Security to AI Models with Anchore Enterprise v6.2
The post Extending Supply Chain Security to AI Models with Anchore Enterprise v6.2 appeared first on Anchore.Organizations are rapidly integrating artificial intelligence and machine learning into core application stacks, which in turn changes the definition of a software component. A secure supply chain is no longer just about open source packages and container layers; it now includes AI models that drive modern intelligent applications. At the same time, security and operations […]
2ms v5.4.0-pre-release
irene 25.8.1
xum v0.28.6-nightly.58
gh-aw v0.89.15
gh-aw v0.89.14
crypto-finder v0.27.0: Merge pull request #462 from scanoss/fix/exact-oid-mapping
gh-aw v0.89.13
codacy-cloud-cli v1.11.0
metasploit-framework 6.5.4
docker-nexus-iq-server 1.207.1
codacy-cloud-cli v1.10.0
Patch Tuesday - September 2026
Microsoft is publishing 974 own-product vulnerabilities on September 2026 Patch Tuesday, including 723 vulnerabilities in Windows. Along with Microsoft fixes for 25 non-Microsoft CVEs, that brings the total number of vulnerabilities on the table today to 999. Whether this is the biggest Patch Tuesday ever depends on how we count, but this is by far the most CVEs that Microsoft has ever published in a single day. As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will ev
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix for a sixth 2026 zero-day. None of this is theoretical — all six are on CISA's Known Exploited Vulnerabilities catalog today, and two carry active nation-state attribution. Before we get into today's release, here's what defenders should already have handled — or should e
2ms v5.3.1-pre-release
PCI DSS Meets CTEM: Mapping v4.0.1 to the Five Stages of Exposure Management
How to turn PCI DSS obligations into a continuous exposure management engine, and extend the loop beyond the CDE. TL;DR The PCI Council officially maps […] The post PCI DSS Meets CTEM: Mapping v4.0.1 to the Five Stages of Exposure Management appeared first on Reflectiz.
renovate-ce-ee 15.5.0
renovate-ce-ee mend-renovate-enterprise-edition-10.5.0
renovate-ce-ee mend-renovate-ce-15.5.0
Your SBOM Is a Release Artifact. CRA and DORA Need It to Be a System of Record
CRA and DORA both treat the SBOM as evidence a regulator can demand on any given day. Most manufacturers have a file generated per build instead of a record they can query. Here's the identifier gap that breaks it, and the screens Phoenix built to close it. The post Your SBOM Is a Release Artifact. CRA and DORA Need It to Be a System of Record appeared first on Phoenix Security.
cli v26.3.4: Merge pull request #334 from debricked/5694728-swift-package-manager
megalinter v10.1.0
mcode-action Mayhem for Code Action v1
Stop breaking SLAs: how to patch vulnerabilities before the fix even ships
How to use Aikido Libraries to patch vulnerable dependencies and meet security SLAs. Category: Aikido
mcode-action v1.0.11
docker-nexus-iq-server 1.207.0
Every Release Needs a Chain of Custody. AI Agents Just Made That Harder.
When an auditor asks what went into your last release, most teams do the same thing. They open four tabs: GitHub for commits Jira for tickets A Slack thread for the approvals A spreadsheet to track what made it to production (built two sprints ago) None of it connects. None of it is bound to …