Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

80 matching stories — in Certificate Lifecycle Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Eight Bits of Trust; eMudhra's CA keys cracked in milliseconds

One of eMudhra's certificate authority private keys is the number 4.Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from

Announcement

Eight eMudhra CA Keys Compromised, Triggering Emergency Fixes Across Browsers and Software

The private keys of eight eMudhra intermediate certificate authority (CA) certificates are compromised, Mozilla and Google's Chrome Root Program confirms on October 20. An intermediate CA signs the certificates that websites present, so anyone holding one of these keys could issue a certificate for any website that a browser would accept. A researcher reported the

Announcement

The Myth of the Solved Secret: Why Credentials Are AI’s Most Dangerous Vulnerability

Summary AI security discussions often focus on prompt injection, model vulnerabilities, and patching. But one of the most immediate risks is much more familiar: compromised credentials. AI agents require credentials to access enterprise systems and can also discover credentials exposed elsewhere. Because agents operate at machine speed and scale, even short-lived credentials can provide enough […] The post The Myth of the Solved Secret: Why Credentials Are AI’s Most Dangerous Vulnerability

Announcement

Gartner on AI Agent Security: The Case for Runtime Authorization

Summary: AI agent security requires controls that govern what agents actually do, even when they have legitimate access. A new Gartner report makes the case for independent runtime authorization that evaluates agent actions as they happen. Here’s why traditional identity and secrets management fall short, and how Akeyless Agentic Runtime Authority addresses the gaps. On […] The post Gartner on AI Agent Security: The Case for Runtime Authorization appeared first on Akeyless.

Announcement

Top PAM Solutions for Enterprise Environments

The top PAM solutions in 2026 include Akeyless, CyberArk, BeyondTrust, Delinea, Keeper, and Teleport. Buyers should compare platforms based on deployment architecture, just-in-time (JIT) access and Zero Standing Privilege (ZSP), support for human and non-human identities, audit and compliance capabilities, and operational overhead. Modern PAM increasingly extends beyond password vaulting to identity-driven, temporary privileged access across hybrid, multi-cloud, DevOps, machine, and AI environme

Announcement

47-Day Certificates Are Coming: Five Things to Do Before They Arrive

Somewhere in your organization is a spreadsheet of certificate expiry dates, and someone who owns it. That is not a caricature. DigiCert’s 2026 research with Omdia surveyed more than 400 senior IT leaders and found that 47% still rely on manual tracking methods such as spreadsheets, and only 34% have a complete, current view of […] The post 47-Day Certificates Are Coming: Five Things to Do Before They Arrive appeared first on Blog.

Announcement

Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk

Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for enterprises over how AI tools handle sensitive source code. The company apologised and said it had “completed the necessary remediation,” disabling the workflow responsible for generating and uploading local repository snapsh

Announcement

Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.

Announcement

From Encrypted to Provable: The New Standard for Secure Communication

An executive insight brief for audit, governance, and data protection leaders in regulated industries. The through-line: consistent control, audit-ready evidence, and operational resilience — provable message by message, every jurisdiction,… The post From Encrypted to Provable: The New Standard for Secure Communication appeared first on Echoworx Email Encryption.

Announcement

Encryption Grows Up: Five Technical Shifts That Reduce Risk and Workload

For heads of operational risk and the teams running secure communications day to day, the definition of “encrypted” has shifted. It is no longer enough to scramble a message and… The post Encryption Grows Up: Five Technical Shifts That Reduce Risk and Workload appeared first on Echoworx Email Encryption.

Announcement

Five Shifts Redefining How Regulated Institutions Approach Email Encryption

Inside compliance functions at major global banks, a familiar pressure is building. Under the Digital Operational Resilience Act, institutions must demonstrate that every third-party communication system is documented, auditable, and… The post Five Shifts Redefining How Regulated Institutions Approach Email Encryption appeared first on Echoworx Email Encryption.

New capability

Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager

Somewhere in your estate right now, a certificate is counting down to its expiry date. Today you probably know which one, because renewals still come around annually and someone owns the calendar. The industry is taking that comfort away: the CA/Browser Forum has voted to cut the maximum TLS certificate lifespan to 47 days by […] The post Bring Your Own CA: Introducing the Thales Imperva SSL Integration Center, Featuring DigiCert Trust Lifecycle Manager appeared first on Blog.