Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
400 matching stories — in Cyber Asset Attack Surface Management (CAASM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Azure has been growing rapidly over the past few years As of June 2026, there were over 200 services, 897 built-in Azure RBAC roles, and 22,018 different permissions. The attack surface of Azure has also increased with this growth. There are also a number of new and updated tools that give us insight into the The post Modern Adventures in Azure Privilege Escalation appeared first on NetSPI.
Today, NetSPI and Synack announced a definitive agreement to merge, backed by KKR, forming the industry’s leading offensive cybersecurity platform. The post A New Era for Offensive Security appeared first on NetSPI.
Go to Device Platform Intelligence Added Platforms 33 Platforms are added Platform Name Node Type2 Node Type Advantech EKI-1522-CE Serial Server Router/Gateway Network Appliance Advantech EKI-1528I-CE Serial Server Serial Server IoT/OT Canon Scanner Printer Printer Canon imageFORCE 6155 Printer Printer Printer DHAUTONEX DSW1824XG Switch Switch Switch Dell Precision 7875 Tower Storage Server Storage Device Server […]
Go to Device Platform Intelligence Added Platforms 33 Platforms are added Platform Name Node Type2 Node Type Advantech EKI-1522-CE Serial Server Router/Gateway Network Appliance Advantech EKI-1528I-CE Serial Server Serial Server IoT/OT Canon Scanner Printer Printer Canon imageFORCE 6155 Printer Printer Printer DHAUTONEX DSW1824XG Switch Switch Switch Dell Precision 7875 Tower Storage Server Storage Device Server […]
Go to Device Platform Intelligence Added Platforms 1 Platforms are added Platform Name Node Type2 Node Type Hanwha Vision XRN-420S-4T NVR NVR Security Appliance
This guide breaks down what matters when evaluating a CAASM provider, then ranks the platforms worth putting on your shortlist.
OverviewOn September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution (RCE) on affected appliances.CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. The flaw has a CVSS v3.1 base score
The post Hardware Asset Management Lifecycle: The Accuracy Gap Most ITAM Programs Leave Open appeared first on Oomnitza.
Your vulnerability scanner just flagged 10,000 issues across your client environments. An exposed service here. An outdated TLS version there. An admin account that may be genuine. Or just a test login spun up for a project two years ago. Where does your team start? That’s the question that separates MSPs with a trusted vulnerability […] The post From 10,000 Vulnerabilities to 10 Priorities: The Risk Context Gap appeared first on Liongard.
Frontier AI models, such as Mythos and GPT-5.5-Cyber, are now finding vulnerabilities at scale and changing the threat landscape. We’ve already shown that generally available, non-frontier models can find and exploit new vulnerabilities in open-source software. In May, Google published what they believe was the first time a threat actor used an AI-generated exploit for […] The post Can AI Create PLC Attacks? Yes, But It’s Not That Easy Yet appeared first on Forescout.
Critical infrastructure cyber attacks are rising. Learn why OT systems are so vulnerable and how runZero helps identify hidden PLC and edge device risks.
Continuous Controls Monitoring (CCM) is the practice of encoding security controls as automated tests that run continuously against the live state of an environment.
Can a point-in-time network admission model keep up with how access works today? Forescout explores the evolution of network access control. The post UZTNA: the Evolution of Network Access Control appeared first on Forescout.
Federal agencies are navigating one of the most demanding periods of technology change in recent memory. Cloud adoption, Zero Trust, AI, evolving cyberthreats and rising expectations for digital services are converging as budgets tighten and teams remain lean. Yet modernization is not a one-time initiative or an optional opportunity. It is a continuous cycle of […] The post Modernizing Federal Networks without Compromise appeared first on Infoblox Blog.
The Internet Engineering Task Force (IETF) is the organization where development of the Domain Name System (DNS) protocol takes place. Work takes place within Working Groups that each have a mailing list, and you can see archives on the IETF Datatracker, along with the agenda and presentations from meetings that take place three times a […] The post DNS at IETF 126 appeared first on Infoblox Blog.
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the initial time of disclosure, the vulnerability had not been assigned a CVE identifier, and PaperCut had not publicly disclosed a CVSS score, vulnerability class, authentication requirements, or the technic
Certain versions of PaperCut NG and PaperCut MF are affected by two vulnerabilities. Here's how to find impacted assets with runZero.
Between CVEs, CPEs, and CISA's Vulnrichment, vulnerability management is an alphabet soup. NIST wants your expert input on using AI to fix NVD before October 13, 2026.
The post CMDB Data Quality: Why Cleanup Projects Fail and What Continuous Reconciliation Actually Achieves appeared first on Oomnitza.
Earlier this year, we introduced Ivanti Innovators Hub to bring together support, knowledge and community into a more unified experience. That launch established a strong foundation for a more effortless and predictable experience. Now, we're building on it with new enhancements designed to make the Hub more personalized, connected and relevant, with integrated learning opportunities, stronger community engagement and more tailored experiences. A more personalized experience Th
For the last decade, cybersecurity has responded to an evolving threat landscape by adding new layers of defense. Organizations invested in endpoint security, identity, cloud security, vulnerability management, detection and...
NetSPI introduces EchoBench, a human-calibrated benchmark for autonomous AI web app pentesting. EchoBench measures finding fidelity, difficulty-reach, OWASP breadth, and repeatability to accurately gauge AI security capabilities against real human outcomes. The post Introducing EchoBench: A Human Calibrated Benchmark for Autonomous Pentesting appeared first on NetSPI.
The post The Three-Layer Architecture Modern Enterprises Actually Need as an IT Asset Management Framework appeared first on Oomnitza.
The cybersecurity industry is approaching an uncomfortable inflection point. AI is rapidly becoming capable of doing work that once required highly skilled security researchers: navigating unfamiliar codebases, finding vulnerabilities, building exploit chains, testing hypotheses and sustaining complex operations for long periods of time. Frontier AI models are not just about discovering vulnerabilities anymore. They can […] The post To Open Weight or Not to Open Weight—That Should NOT Be t
Ask an MSP when they last ran a full asset discovery on a client environment and you’ll usually get one of two answers. During onboarding. Or during the last audit. Both answers say the same thing: The IT asset discovery process happened once. And that was that. Today, that asset inventory sits in a document […] The post How Continuous Discovery Eliminates the Asset Blind Spot appeared first on Liongard.
Hybrid enterprise security now depends on more than broad Zero Trust intent. Organizations are investing in microsegmentation, cloud security, network access controls, identity platforms, and next-generation firewalls to reduce risk...
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discove
On-prem users, legacy and OT systems, and unmanaged devices continue to operate with weak or absent trust rules. Here’s why you need UZTNA. The post 7 Things Every Architect Should Know About Universal ZTNA appeared first on Forescout.
Vulnerability scanners provide a lot of important insights into MSPs’ client environments. Run one, and you’ll get a list of hundreds of CVEs (Common Vulnerabilities and Exposures), each stamped with a severity score and a patch recommendation. But what vulnerability scanners can’t tell you is which of those findings need your team’s attention now. And […] The post Why Vulnerability Scanners Fail Without Real-World Asset Context appeared first on Liongard.
JupiterOne's MCP server is now listed as a community server in Anthropic's MCP directory. Here's what it enables and how to connect Claude to your security graph.
Every IT leader has felt this tension: your organization has invested in AI, automation and digital operations, and yet outcomes still fall short of expectations. Even with the right tools and intent, you won’t be able to fully realize the value of your AI investments if they’re built on an unsteady foundation. The data confirms this challenge. Ivanti’s 2025 AITSM research found that 89% of organizations say siloed data negatively impacts IT operations, and 44% cite security and compliance conce
Cloud-delivered management platforms have transformed how organizations operate their security infrastructure. Tasks that once required managing individual devices can now be centralized, automated, and executed at scale. For security teams...
Four-day virtual program delivers practical training on CIS IG1 Safeguards and awards co-branded certification TAMPA, Fla., July 23, 2026 — With AI accelerating the pace and complexity of cyber threats, organizations must prioritize strong cyber hygiene. To help meet that need, ConnectSecure, a leading provider of vulnerability and compliance management solutions, is launching a new training program developed in partnership with the Center for Internet Security, Inc. (CIS). The Essential Cyber H
What Is Cloud Migration? Cloud migrations are complex transitions that frequently lead to budget overruns, security vulnerabilities, and operational downtime if not properly executed. Key challenges include aligning legacy system compatibility, bridging internal skills gaps, and avoiding vendor lock-in with major hyperscalers. The most critical hurdles organizations face include: Why Cloud Migrations Fail Cloud migrations […]
What Is Hybrid Cloud Security? Hybrid cloud security is the practice of protecting data, workloads, and identities across both on-premises private servers and public cloud platforms. It requires a unified Zero Trust strategy, centralized identity and access management (IAM), and consistent encryption to prevent data breaches as environments intersect. Key hybrid cloud security solutions include: […]
What Is Technical Due Diligence? Tech due diligence is an independent, expert-led assessment of a company’s software, infrastructure, security, and engineering team. Conducted during M&A or funding rounds, its goal is to validate technology claims, uncover hidden technical debt, mitigate risks, and evaluate whether the technology can support future business growth. Types of technical due […]