0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

1,928 matching stories — in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

SCANOSS and DataFlow partner to bring open source intelligence to Korean enterprises

Madrid, Spain — SCANOSS is partnering with DataFlow, a Seoul-based systems integrator with deep CI/CD and DevSecOps automation expertise, to bring open source and SBOM automation into the DevSecOps pipelines that South Korean enterprises rely on. DataFlow, a GitLab partner since 2023, has developed DF-DevOps, its own DevOps portal that integrates with GitLab CE and Enterprise Edition alongside Jenkins, Argo CD, Argo Workflow, and Terraform, and delivers it alongside its wider integration work wi

SCANOSSVendor blog
Announcement

Anthropic Found How AI Scams, Steals, and Spies. The Same Thing Is Happening Inside the Enterprise.

On September 10, 2026, Anthropic published Detecting and countering misuse of AI: September 2026, its latest threat-intelligence report. It documents operations the company’s Threat Intelligence team disrupted between December 2025 and August 2026 across seven harm areas: cyber operations, influence operations, surveillance, conventional weapons, biological misuse, scams and fraud, and illicit distillation. Read as a ... Read more The post Anthropic Found How AI Scams, Steals, and Spies. T

Rein SecurityVendor blog
Announcement

Anthropic Found How AI Scams, Steals, and Spies. The Same Thing Is Happening Inside the Enterprise.

On September 10, 2026, Anthropic published Detecting and countering misuse of AI: September 2026, its latest threat-intelligence report. It documents operations the company’s Threat Intelligence team disrupted between December 2025 and August 2026 across seven harm areas: cyber operations, influence operations, surveillance, conventional weapons, biological misuse, scams and fraud, and illicit distillation. Read as a ... Read more The post Anthropic Found How AI Scams, Steals, and Spies. T

Rein SecurityVendor blog
Announcement

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS score: 10.0), a path traversal issue in the repository commits API that could allow an unauthenticated user to read arbitrary files from the GitLab server under

GitLabIndustry coverage
Announcement

Metasploit Wrap Up: This One Goes to Sixteen!

This One Goes to Sixteen!Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco, Papercut, Sonicwall, Jetbrains, and Langflow all have exploit modules, and not to be outdone, we even have a Metasploit scanner to watch the watchers!New module content (16)Elasticsearch ingest-attachment Apache Tika XFA XXE Local File ReadAuthors: Bourbon Offensive Security Services and Jean-Marie BourbonType: AuxiliaryPull request: #21739 contr

Rapid7Vendor blog
Announcement

The Fraud Ecosystem: A Transition From Known Marketplaces to a Fragmented Environment

IntroductionThe surge in emerging threat actors directly correlates with the rapid escalation of victim counts and stolen financial resources. Simultaneously, this growth has spurred the proliferation of specialized supply storefronts across social media platforms, dark web channels, and various smaller niche marketplaces. Security teams today face evolving challenges, requiring them to continuously refine monitoring channels, adjust operational strategies, and foster cross-functional internal c

Rapid7Vendor blog
Announcement

Investigate production issues from Cursor with the Dynatrace plugin

Dynatrace is now listed in the Cursor Marketplace as a verified plugin. One install connects Cursor to your Dynatrace environment through the Model Context Protocol (MCP) server and loads 30 Dynatrace skills, giving Cursor access to live Dynatrace data and the context to effectively analyze the data. Connecting your environment Connect Cursor to your Dynatrace […] The post Investigate production issues from Cursor with the Dynatrace plugin appeared first on Dynatrace news.

DynatraceVendor blog
Announcement

Connect OpenTelemetry signals end-to-end with Dynatrace

OpenTelemetry standardizes how organizations collect traces, metrics, and logs. Dynatrace adds the topology and context needed to connect that telemetry across user experiences, services, databases, hosts, and AI workloads. This connected context means you can spend less time trying to understand your environment and more time on the work that drives business outcomes. OpenTelemetry’s graduation […] The post Connect OpenTelemetry signals end-to-end with Dynatrace appeared first on Dy

DynatraceVendor blog
Announcement

AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768

Quantum computers could very soon undermine the public-key cryptography that secures financial transactions, health records, and other sensitive data moving over TLS today. When that happens, encrypted information protected by. The post AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768 appeared first on Indusface.

IndusfaceVendor blog
Announcement

Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said in a report. Wiz saw the attacks between August 15 and September 8. JFrog had fixed both flaws before then, so only servers that had not been updated were open to them.

JFrogIndustry coverage
Announcement

You cannot patch your way out of the CVE exposure window, but you can defend it

Every security team has a patch backlog, and every security team knows that a backlog is a form of accepted risk. Effective vulnerability management relies on understanding the depth of this risk. The uncomfortable question is how much risk, and for how long. New data from Contrast'sAppSec Overflow 2026 report answers that question with hard numbers pulled from thousands of live production applications, and it should change how security leaders think about the window between a CVE's disclosure a

Contrast SecurityVendor blog
Announcement

Meet the Semgrep Interns: Four Projects from Summer 2026

Semgrep’s 2026 summer interns worked on four very different problems: backend autoscaling, Jira integrations, program analysis, and memory profiling. Along the way, they shipped real work, navigated the tradeoffs of production engineering, and learned well beyond the projects they started with. Here’s what they built, what I saw across their internships, and how to apply for summer 2027.

SemgrepIndustry coverage
Announcement

Tenable Ranks #1 in Device Vulnerability and Exposure Management for Eighth Consecutive Year

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that it has been ranked first in worldwide market share in the IDC Worldwide Device Vulnerability and Exposure Management Market Shares report (doc #US53903826, August 2026).Exposure management is a fundamental and necessary shift in how businesses perceive and reduce risk in the AI era. Defenders have reached a crossroads: the volume of critical and complex threats has increased exponentially, and they have

TenablePress release
Announcement

Agentic AppSec on your infrastructure with Black Duck Signal

Agentic development has enabled enterprises to accelerate the pace of innovation while freeing developers to focus on more strategic initiatives. But for many regulated organizations, the idea of sending source code and analysis prompts to vendor-managed LLM endpoints is a nonstarter. That’s why Black Duck Signal™ added support for agentic AppSec testing using your own […] The post Agentic AppSec on your infrastructure with Black Duck Signal appeared first on Black Duck.

Black DuckVendor blog
Announcement

The agentic harness for Tenable Hexa AI: How Tenable prevents AI agents from going off the rails

Learn why Tenable treats agentic LLMs as untrusted insiders, and how we’ve made sure you can control and monitor the AI agents making changes in your production security environmentKey takeawaysAI models can quickly understand data, but not your business. While modern AI models are great at reasoning, they don’t automatically understand your unique environment or who is allowed to do what. The “harness” is the custom-built layer that translates AI intelligence into safe, controlled actions speci

TenableIndustry coverage
Announcement

What Your Vulnerability Scan Misses The Moment a Zero-Day Drops

The post What Your Vulnerability Scan Misses The Moment a Zero-Day Drops appeared first on Anchore.The standard security playbook for a new CVE looks something like this: the CVE is published, your environment is assessed, and the results are reviewed. This playbook assumes there is adequate time between disclosure and exploitation, which is increasingly less guaranteed.   Why zero-day exploitation now outpaces vulnerability scanning Google Cloud’s threat intelligence team, Mandi

AnchoreVendor blog