Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
944 matching stories — announcement, in Breach & Attack Simulation / Pen Testing — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Jun 29, 2026 - Ayush Sethi - If you run security at a bank, the AI problem has already landed on your desk, whether or not anyone formally put it there. The question that decides how the next year goes is a simple one: can you actually see what AI your people are using, control what data goes into it, and produce a record of it on demand? For most institutions, honestly, the answer is no.Here are two things that are both true right now. AI adoption across your bank is effectively universal: peop
Jun 26, 2026 - Ayush Sethi - A junior associate pastes a deposition transcript into ChatGPT to summarise it before a 9am call. A partner uses a consumer LLM to brainstorm settlement positions on a live matter. A paralegal drops a draft complaint into a free AI tool to tighten the prose. An AI agent quietly queries the document management system overnight to pull together a closing checklist.None of it shows up in your security team's logs.That's the AI reality inside every firm in 2026. Adoption
Jun 26, 2026 - Ayush Sethi - A junior associate pastes a deposition transcript into ChatGPT to summarise it before a 9am call. A partner uses a consumer LLM to brainstorm settlement positions on a live matter. A paralegal drops a draft complaint into a free AI tool to tighten the prose. An AI agent quietly queries the document management system overnight to pull together a closing checklist.None of it shows up in your security team's logs.That's the AI reality inside every firm in 2026. Adoption
The next phase of cybersecurity will not be defined by whether artificial intelligence can find vulnerabilities. That threshold has already been crossed. The defining question is whether defenders can move from knowing about exposures to neutralizing them before attackers can convert them into working paths of compromise. Frontier models can discover more weaknesses, reason across […] The post AI Exploits Faster than We Can Patch appeared first on Skyhawk Security.
Buying a vulnerability management platform is an important decision. Living with it is a much bigger one. Most organizations spend weeks, or even months, comparing products before making a purchase. They evaluate scanning capabilities, dashboards, reporting features, integrations, and licensing models. Those factors all matter. But they only tell part of the story. The real […] The post Your Vulnerability Management Platform Shouldn’t Leave You on Your Own appeared first on Carson &
We're thrilled to share that the Filigran XTM platform has won The Hacker News Cybersecurity Stars Award for ‘Best Intelligence-Powered Cybersecurity Platform’ - a recognition that celebrates the most innovative and impactful solutions in cybersecurity. This award not only reflects the work of the Filigran team, but also the invaluable input from our customers and open-source community. It also validates that we're on the right track: make threat intelligence truly actionable, so organizations c
Frontier AI models are now a commodity, available to attackers and defenders alike. The real edge isn't the model. It's context, and only one side of this fight has it. The post Same Field, Same Players, But the Game Has Changed appeared first on Pentera.
We could have pwned every Metabase Cloud tenant by chaining an H2 INIT sanitizer bypass into RCE, then cloud misconfigurations into a full multi-tenant cluster compromise.
AI got a security consultant 80% of the way through a real web application assessment. The other 20% was where the actual security work happened. This walkthrough shows where AI delivered, where it produced confident but impossible explanations, and why human judgment still drives real findings.
No jailbreak, no tricks — just professionally framed requests. Using our Stinger red-teaming engine, we collected 83 confirmed CBRN breaches from Claude Opus 4.8.
Five Eyes warned that the timeline is months, not years. The harder truth buried in that statement: a finding is no longer a signal. Proof it's reachable and exploitable is. The post Five Eyes warned AI will upend cybersecurity in months. The same afternoon, OpenAI showed why. appeared first on Pentera.
AI cyber threats are moving beyond phishing and into operational attack paths. Attackers are experimenting with Claude Code misuse, AI-powered penetration testing tools, fake developer repositories, exposed secrets, autonomous agents, and model-connected workflows that can interact with real systems. The post AI Cyber Threats: Claude Misuse, AI Pentesting & Data Leaks appeared first on Redbot Security.
When we first covered Claude Mythos and Project Glasswing in April, the story was that Anthropic considered the model so dangerous it refused to release it publicly, restricting it to a small group of vetted partners. That changed on June 9, when Anthropic launched Claude Fable 5, a public, Mythos-class model. Three days later, on […]
In a rare joint statement, the Five Eyes intelligence alliance warned that frontier AI capable of devastating cyberattacks is months away, not years. AI risk is now a core business risk and a leadership responsibility.
TL;DR  Introduction  Recently in a test I had the joy of reverse engineering the custom binary that acts as a webserver and system controller for their ARM based device. Normally this isn’t a problem: extract the binary, throw it into Ghidra, do stuff.  The problem here was that the binary was written in Rust. Which does a lot of things differently from […] The post Decoding Rust strings appeared first on Pen Test Partners.
A no-hype 2026 buyer's guide to the leading AI penetration testing tools, compared across autonomy, human validation, compliance fit, speed, and price.
Governance teams can define policies, yet have no reliable mechanism to confirm that an AI system complies — or keeps complying as it changes. Here is what a closed-loop alternative looks like.
Discover how attackers bypassed Microsoft Entra Conditional Access Policies using Nested App Authentication (NAA) flows in this technical vulnerability breakdown. The post Bypassing Microsoft Entra Conditional Access Policies via Nested App Authentication appeared first on NetSPI.
Claude Code sandboxing: Anthropic's three-layer containment model, a real attack walked end to end, and the governance gap no single sandbox closes across a fleet.
MCP Enterprise Managed Authorization (EMA) lets your identity provider decide which MCP servers an agent can reach via corporate SSO. How it works, and where it stops.
We are proud to share an important milestone in our journey: achieving ISO/IEC 27001:2022 certification, the internationally recognized standard for Information Security Management Systems (ISMS). The post Faraday is now ISO/IEC 27001:2022 Certified! appeared first on Faraday.
For two years now the consensus was that the frontier lab providers (Anthropic, OpenAI and Google) were 6 to 9 months ahead of Chinese labs. With the release of GLM 5.2 from Z.ai, we are for the first time seeing a Chinese lab that is on par with the latest from the frontier American labs.
A recent NIST publication argues that no finite set of AI safety rules can protect against all future attacks. As AI agents gain access to tools and enterprise systems, security is shifting from static guardrails toward continuous monitoring and adaptation.
A practical 2026 guide to HIPAA penetration testing: what the Security Rule and the 2025 NPRM require, how often to test, what OCR-ready evidence looks like, and how to scope an engagement that holds up in an audit.
We walk through three eras of cyber attacks and makes a troubling case that LLMs are removing the one constraint that kept attackers slow and detectable.
Dive into this real-world social engineering assessment where a fake anonymous tip and an adversary-in-the-middle framework tested the limits of an organization's security policies. The post I’m Just Asking Questions: Social Engineering as a Reporter appeared first on NetSPI.
Most vulnerability management platforms can find vulnerabilities. That is no longer the challenge. Today’s security teams are responsible for managing growing attack surfaces, supporting compliance initiatives, reporting on risk, and coordinating remediation across multiple departments. The real question is not whether a platform can identify vulnerabilities. It’s whether it helps teams act on them efficiently. […] The post What Security Teams Need from a Vulnerability Manageme
The security and compliance problem of disposable AI-generated code, and why validation must keep pace with autonomous generation. With Contributions from Claudionor Coelho (former Chief AI Officer at Zscaler) and […] The post Disposable Code, Durable Side Effects appeared first on Ridge Security.
On June 9, Anthropic launched its shiniest model yet. On June 12, the US government made them switch it off. For everyone. Worldwide.If you build security products for a living, that three-day arc should ruin your week, not just Anthropic's. The post When Someone Pulls the AI Plug appeared first on Pentera.
Reverse engineering undocumented processors has traditionally required months of manual work. In this article, Faraday researchers share how a hybrid AI-assisted pipeline recovered a proprietary instruction set architecture, generated a working Ghidra processor specification, and transformed unreadable firmware into actionable security research. By Gastón Aznarez and Dan Borgogno, Faraday Security. A companion to our talk […] The post No Spec, No Problem: How AI is Changing Reverse Enginee
AI security tools can build an attack, but enterprise security teams in regulated industries need consistency, auditability, and predictable costs before they can trust one. Learn why the surrounding infrastructure is where most AI security vendors are still falling short. The post Beyond the Hype: What Regulated Industries Need to Know Before Trusting AI Security Tooling appeared first on NetSPI.
Boards have committees, companies have policies, and vendors fill questionnaires — yet almost none of it is verified. Governance describes what is supposed to be true; AI security tells you whether any of it actually is.
