0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

413 matching stories — release, in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Release

Metasploit Framework 6.5 Released

Today we’re proud to announce that Metasploit Framework version 6.5 has been released. Over the past two years, with the help of countless contributors, we’ve added 422 new modules along with a whole slew of new features.Malleable C2 Profiles for HTTPOne of the latest and most requested features is support for Malleable C2 profiles across all current Meterpreter payloads. This feature enables users to load a standard profile into Meterpreter and change the shape of its HTTP(S) traffic. All Meter

Rapid7Vendor blog
Release

CISA Releases the 2026 SBOM Minimum Elements

CISA, the U.S. government's Cybersecurity and Infrastructure Security Agency, released an update to its Minimum Elements for a Software Bill of Materials publication.

FOSSAVendor blog
Release

Rapid7 Cyber GRC is now available: Turn security action into compliance proof

Compliance has become one of the biggest operational drains on modern security teams. CISOs are being asked to manage a growing sprawl of frameworks, prove control effectiveness more often, respond to more customer assurance requests, track risk across a growing web of third parties, and give executives and the board a clearer answer on whether cyber risk is actually going down.Most of that pressure does not come from the frameworks themselves. It comes from the way compliance is still handled i

Rapid7Vendor blog
Release

Oracle Releases the July 2026 Critical Patch Update

Highlights Oracle’s July 2026 CPU ships 1,455 new security patches, the largest Critical Patch Update Oracle has issued to date. The highest score this quarter is a perfect CVSS 10.0, affecting Oracle Access Manager, WebLogic Server and Oracle Coherence within Fusion Middleware. PeopleSoft is the emergency priority. CVE-2026-35278 and CVE-2026-35273 (both CVSS 9.8) are under active exploitation by the ShinyHunters extortion group, which claims to have compromised more than 300 PeopleSoft s

WaratekVendor blog
Release

July 2026 Patch Tuesday

Patch Tuesday Watch: What Led Up to July 2026 Adobe Release date: June 30, 2026 (APSB26-68 — ColdFusion; same-day bulletin for Campaign Classic) CVE count: 11 CVEs in ColdFusion, 1 in Campaign Classic (12 total) Adobe's ColdFusion update resolved 11 vulnerabilities across ColdFusion 2025 (Update 9 and earlier) and ColdFusion 2023 (Update 20 and earlier), including seven rated CVSS 10.0: Fixed in ColdFusion 2025 Update 10 and ColdFusion 2023 Update 21. KEV callout: CVE-2026-48282 was not flagged

IvantiVendor blog
Release

Polaris release update: Smarter risk scoring, AI-assisted triage, and complete container coverage

Every security team is dealing with the same pressures: vulnerabilities arriving faster than teams can triage them, a growing catalog of confirmed active exploits, and development pipelines that can’t afford to slow down. The latest Black Duck Polaris™ Platform release addresses these issues directly, equipping teams with the intelligence to cut through the noise, the automation to […] The post Polaris release update: Smarter risk scoring, AI-assisted triage, and complete c

Black DuckVendor blog
Release

Vibe Coding Security: What Enterprise Teams Need to Know Before It Ships

What Is Vibe Coding? Vibe coding describes a way of building software in which a developer describes what they want in natural language, and an AI coding assistant generates the code or even builds, tests, and deploys it. The term has spread quickly because the workflow accelerates delivery, and tools such as GitHub Copilot, Cursor, ... Read more The post Vibe Coding Security: What Enterprise Teams Need to Know Before It Ships appeared first on Rein Security.

Rein SecurityVendor blog