Top image hardening tools in 2026
Image hardening tools compared for 2026: Aikido, Chainguard, Docker, RapidFort, Echo, Minimus, and Wiz Category: DevSec Tools & Comparisons
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,928 matching stories — in Application Security (ASPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
91 Spring CVEs: The AI Vulnerability Consumption Problem
TL;DR Broadcom released a large batch of Spring security advisories on August 20, 2026, with Sonatype tracking 91 CVEs across Spring Framework and related projects. At the time of publishing, Sonatype Guide currently reports 148,608 software components affected by the security event. The disclosure comes amid a dramatic rise in AI-assisted vulnerability discovery. Broadcom previously reported a more than 1,700% increase in monthly Spring security advisories from March to April 2026. AI is m
Best enterprise AI pentesting tools for application security in 2026
Compare the top enterprise AI pentesting tools of 2026: Aikido, XBOW, NodeZero, Pentera, Hadrian, and Cobalt. Category: DevSec Tools & Comparisons
Time to Exploit Went Negative. Your Code Was Never On the Clock.
In 2018, the average gap between a CVE going public and the first confirmed exploitation of it in the wild was 2.3 years. Two years and change. You could see a CVE, log it, groom it, argue about severity, wait for the next maintenance window, get pulled onto something else, come back a quarter later, […] The post Time to Exploit Went Negative. Your Code Was Never On the Clock. appeared first on StackHawk, Inc..
Cursor Rules: Setup, Best Practices, and Examples
Cursor generates code that ignores your project’s conventions, puts files in the wrong directory, or reintroduces a pattern your team dropped six months ago. Not because the model is bad, but because it starts every session knowing nothing about how your team works. Cursor rules are how you fix that: instructions Cursor supplies to the […] The post Cursor Rules: Setup, Best Practices, and Examples appeared first on StackHawk, Inc..
24 Hours to Report: The EU CRA Compliance Gap
The post 24 Hours to Report: The EU CRA Compliance Gap appeared first on Anchore.
From Pwn2Own Automotive 2026: Seven Kenwood DNR1007XR Vulnerabilities Now Patched
Kenwood patched seven DNR1007XR vulnerabilities discovered at Pwn2Own Automotive 2026, addressing direct and multistep paths to root access.
AI Code Review at Enterprise Scale: Closing the Governance Blind Spot
Engineering velocity has changed fundamentally. Developers across the enterprise are leaning on AI coding assistants to write, refactor, and ship code faster than security teams have ever had to deal with. That volume creates an immediate bottleneck. Manual code reviews and legacy static analysis tools simply can't keep pace without becoming the thing that slows everyone down.
Propagating User Identity From AI Agents to Your Tools: Amazon Bedrock AgentCore Gateway and JFrog Artifactory
  Join us at swampUP New York, September 1-3, for our joint session Trusted AI Delivery at Scale: Securing Every Artifact from Curation to Cloud, where we walk the full chain of custody from the moment a package enters your organization to the moment your agent runs on Amazon Bedrock AgentCore. Register here. AI agents …
What is CVE remediation in 2026?
CVE remediation is fixing known flaws in the software you run. Why upgrading often fails, what remediation actually involves, and how backporting fixes it. Category: DevSec Tools & Comparisons
Wiz liebt OPENVAS! Unsere Sichtweise darauf, eines der besten Schwachstellenmanagement-Tools des Jahres 2026 zu sein
Als Wiz kürzlich seine Zusammenfassung der besten Schwachstellenmanagement-Tools für 2026 veröffentlichte, fiel uns etwas auf, das uns jedoch nicht überraschte: OPENVAS belegte einen Spitzenplatz und erhielt eine hervorragende Bewertung. Wiz beschreibt OPENVAS als das „Open-Source-Äquivalent“ zu kommerziellen Schwachstellenscannern. In der Rezension wird OPENVAS als „die umfassendste Abdeckung, die auf einer einzigen Plattform verfügbar ist“ bezeichnet. […]
Escape found the same XSS in two AI chatboxes. The vulnerability was in the Markdown renderer.
Weeks apart, at two unrelated companies, Escape's AI pentesting agent found the same stored XSS. Both had shipped a customer-facing chat where the model emits Markdown and the frontend renders it with raw HTML enabled and no sanitizer, so anything the model can be made to say executes
About Us
How autonomous pentesting kills false positives
Ask any security engineer what they actually think about their vulnerability scanner, and you will get a version of the same answer. They trust maybe 20% of what shows up in the patching queue. The rest gets a suspicious glance, and a slow death in a backlog. That is the real cost of a false ... Read more
Privacy Policy
Terms of Service (TOS)
AI-Assisted Exploitation Reaches the Federal Record
A new Siemens S7 Series programmable threat advisory warns of AI-assisted exploitation, exposed PLCs, and urgent mitigation steps for water utilities.
Control trace volume with OpenTelemetry tail-based sampling
Learn how to configure tail-based sampling in the OpenTelemetry Collector to drop noisy traces, keep the ones that matter, and control APM costs.
How to Achieve Cheaper, Faster and Accurate Pentests
Cheaper, faster and accurate pentests were never a real tradeoff. Context removes it: one graph of assets, code and cloud that every engagement reads from and writes back to.
Your AI Agent Has New Skills. Can You Trust Them?
Custom Detection Agents: Closing the Governance Gap AI Security Harnesses Miss
Deploying generative AI applications into production introduces new architectural complexity, and most security teams' first response is to stand up a standard AI security harness. That's the right instinct. These gateways are a necessary first line of defense: they block overt malicious prompts, prevent blatant data exfiltration, and get you aligned with baseline frameworks like the OWASP Top 10 for LLMs.
Don’t Break the Agent: Lessons in Token Optimization
This one is for the curious souls who wonder how somebody actually builds a harness optimizer — and, more to the point, how they know it works. When we launched JFrog Boost into public preview, we told the story of the bill that broke us and the 100 billion tokens we clawed back across JFrog …
Unified Compliance Self Hosted Appliance
Unified Compliance Self Hosted Appliance Puppet ttrench Thu, 08/20/2026 - 09:21 Product Description Unified Compliance Self Hosted appliance for discovering, managing, and optimizing cloud and Kubernetes resources. Current Customer Link Customer Download Non-Customer Link Learn More Exclude From Downloads List Off
Horizon3.ai alternatives in 2026: Escape vs NodeZero and 4 more tools
Escape is the best Horizon3.ai alternative for continuous AI pentesting across APIs, web apps, and complex authentication, including regression testing, developer-ready remediation, and platform pricing suited for rapidly scaling orgs.
RiskOps Studio: Your Gateway to Centralized Risk Experience
The post RiskOps Studio: Your Gateway to Centralized Risk Experience appeared first on Feedzai.
We discovered a critical vulnerability in isolated-vm a sandbox that is widely used in popular AI-related projects | Blog | Endor Labs
ws, Open Source Meta Description: We discovered a critical vulnerability in isolated-vm (1M+ weekly downloads), a sandbox that is widely used in popular AI-related projects like n8n, Activepieces, or Mastra AI. We demonstrated how attackers can weaponize this vulnerability to achieve control-flow hijacking and sandbox escape.
How JavaScript Sandboxes Work | Blog | Endor Labs
How V8 Isolates improve JavaScript sandboxing—and where the real risks remain
Managing Air-Gapped Environments: Ensuring Security and Efficiency
For years, air-gapped environments have been the gold standard for protecting classified systems and critical infrastructure. Isolate the network, remove the path, reduce the risk. The logic held, and it still does. An air gap does exactly what it was designed to do.
Fintech: Your Back Office Is Only as Smart as the Product Data Behind It
The average convenience store carries thousands of SKUs, with shelf pricing potentially changing hundreds of times a month. Consider that across a multi-location chain, and the product data (cost, pack size, UPC, vendor item number) behind every one of those changes has to be right, every time, at a speed no manual process can keep […]
Introducing Escape's Channel Partners
After announcing our channel partner program last month, we are excited to now be working with eleven incredible partners, with more soon to join us!Escape's Channel Partner Program is built on a simple principle: a two-way relationship centered on the shared goal of helping security teams do
Annual vs Continuous Mobile App Security Testing | Appknox
Why Annual Mobile App Security Testing Is Not Enough on Its Own Annual testing secures a moment. Your app keeps changing. Here is how to cover the interval between assessments.
CVE-2026-8037 wird derzeit aktiv ausgenutzt! Authentifizierungsunabhängige RCE-Angriffe auf Kemp LoadMaster und ECS Connection Manager im Gange
CVE-2026-8037 (CVSS 9,8, EPSS >= 100. Perzentil) handelt es sich um eine kritische, nicht authentifizierte Sicherheitslücke, die die Ausführung von Remote-Code (RCE) ermöglicht, in Progress Kemp LoadMaster und Progress ECS Connection Manager. eSentire berichtete, dass die Ausnutzungsversuche am 29. Juni 2026 begannen und die Schwachstelle nun in die Liste der bekannten ausgenutzten Sicherheitslücken (KEV) der […]
Reachability-Aware SBOMs: VEX That Knows What's Actually Exploitable
ZeroPath builds CycloneDX, SPDX, VEX, and AI-BOM exports from your scan inventory, and marks every CVE reachable or not_affected so you fix what's exploitable first.
From signals to systemic risk: Building Risk AI
Datadog’s Risk Engineering team built a Systemic Risk Detection Pipeline and Risk AI Agents to identify, contextualize, and prioritize systemic risks.
Detect vulnerabilities in LLM applications with Datadog’s AI-native SAST
Datadog Code Security’s AI-native SAST helps detect vulnerabilities specific to the OWASP Top 10 for LLM Applications before they reach production.
The AI-Native Runtime is Where Security Should Actually Live
AI-Native Runtime Security: The Gist AI-Native Runtime Security is a security layer that observes and protects AI agents at the point where their decisions become real actions. Instead of observing only model traffic, cloud workloads, or system calls, it captures what agents actually do in production, from prompts and tool calls to APIs, code execution, ... Read more The post The AI-Native Runtime is Where Security Should Actually Live appeared first on Rein Security.
Why C Has Always Broken Static Analysis | Endor Labs
C is the language SAST serves worst: the preprocessor, pointers, pattern rules, and no frameworks. Now AI agents are writing C faster than review can keep up.
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
OverviewOn August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0 base score of 9.3 and can be exploited remotely by an unauthenticated attacker over the network without user interaction or elevated privileges.NetScaler ADC and NetScaler Gateway are widely deployed enterprise networking products commonly positioned at or near the network perim
Agentic AppSec Tools: Why Stability and Governance Matter as Automation Scales
The application security industry has a math problem. Development teams deploy code multiple times a day. Security teams run static analysis, dynamic analysis, and software composition analysis on every build. The result is a backlog of thousands of vulnerabilities that a small team of security engineers is expected to triage, prioritize, and remediate.
PBOM vs SBOM: What’s the Difference, and Why Does It Matter in 2026?
Automatically apply security and integrity guardrails to ensure that all code in production is secure and originates from secure builds. Automatically apply security and integrity guardrails to ensure that all code in production is secure and originates from secure builds. The post PBOM vs SBOM: What’s the Difference, and Why Does It Matter in 2026? appeared first on OX Security.