Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

1,467 matching stories — announcement, in Cloud-Native Application Protection (CNAPP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Google Fined €403 Million in Ireland Over Location Data Privacy Violations

Google has received a €403 million penalty from the Irish Data Protection Commission for the way it handled location data. The regulator stated that Google did not meet the essential privacy principles set out in European legislation. The case deals with location practices for a period of two years, 2018-2020. The regulator claims that users […] The post Google Fined €403 Million in Ireland Over Location Data Privacy Violations appeared first on PrivacySavvy.

Announcement

WordPress “Comment2Shell” XSS-to-RCE Chain Lets Unauthenticated Attackers Compromise Servers via Malicious Comments

Executive Summary A high-severity vulnerability (CVE-2026-93485, CVSS 7.1) was disclosed affecting WordPress Core, allowing attackers to achieve full remote code execution via a stored cross-site scripting flaw in the comment rendering pipeline. Due to the potential for complete server compromise, immediate patching is required. About CVE-2026-93485 The issue originates from the wpautop() function in wp-includes/formatting.php, […] The post WordPress “Comment2Shell” XSS-to-RCE

Announcement

The Category Has a Name. Here’s What We Think It Will Be Judged On.

The first thing we automated was restraint. Tamnoon is named as a Sample Vendor for Autonomous Exposure Remediation category in the 2026 Gartner® Emerging Tech Impact Radar: Preemptive Cybersecurity. (Full citation at the foot of this page) The word in that title we care about is preemptive. Most of cloud security is retrospective. Something gets […] The post The Category Has a Name. Here’s What We Think It Will Be Judged On. appeared first on Tamnoon.

Announcement

G2 DCAI Review - Why IL

G2 DCAI Review - Why IL ranjeesh Tue, 09/22/2026 - 15:04 Off DealCentre AI user review on G2We particularly appreciate the fast, reliable and first-class technical support. Even for special or time-sensitive requests, the team is always available and works proactively to find practical solutions. In addition, the afterhours support is available 24/7, which is outstanding. On

Announcement

G2 DCAI Review - AI Hub

G2 DCAI Review - AI Hub ranjeesh Tue, 09/22/2026 - 15:04 Off DealCentre AI user review on G2Link significantly reduces the time spent on manual tagging, document classification, and cross-referencing, which frees the team to focus more on analysis and execution. This is especially valuable when working in large, multilingual data rooms. On

Announcement

G2 DCAI Review - Prep

G2 DCAI Review - Prep ranjeesh Tue, 09/22/2026 - 15:04 Off DealCentre AI user review on G2DealCentre AI successfully combines advanced AI automations like batch watermarking and automatic file health checks with top-tier security. It provides a highly efficient environment for managing sensitive financial data without compromising compliance. On

Announcement

Building Orca’s Partner Portal: What Happens When a Non-Engineer Builds With AI

Shannon McWilliams, Head of Distribution, had been at Orca Security a few months when he was asked to look at something specific: what it actually feels like to be one of the company’s reseller partners. How do they experience Orca once they sign on? What are they given to work with? A partner portal built […] The post Building Orca’s Partner Portal: What Happens When a Non-Engineer Builds With AI appeared first on Orca Security.

Announcement

Z.ai disables coding assistant feature after flaw exposed enterprise code upload risk

Chinese artificial intelligence company Z.ai had to disable several features of its ZCode coding assistant this week after a default setting was caught sending users’ local code repositories to Alibaba Cloud servers in China without their consent, raising fresh concerns for enterprises over how AI tools handle sensitive source code. The company apologised and said it had “completed the necessary remediation,” disabling the workflow responsible for generating and uploading local repository snapsh

Announcement

Best Tools for Mapping Application Dependencies in Hybrid Environments

TL;DR: Application dependency mapping tools reveal how applications connect across on-premises and cloud infrastructure. Faddom is best for agentless hybrid mapping in under an hour, Device42 CMDB-backed asset context, ServiceNow Service Mapping ITSM-driven service models, and Dynatrace real-time topology inside observability. What Is Application Dependency Mapping? Application dependency mapping is the process of identifying and […]

Announcement

Beware these fake websites selling subscriptions to AI assistants

Websites offering fake subscriptions to AI transcription tools, image generators, and other digital assistants could be putting enterprise data at risk, according to researchers at Malwarebytes. The sites impersonate AI products with solid reputations, including GPT-6 Astra, DaVinci Resolve, PixAI and OpenCut, in addition to some that no longer exist (such as Omegle, a chat service shut down in 2023) or are less reputable. All the fake websites were polished and incorporate genuine Google authen

Announcement

What Is Penetration Testing? A Complete Guide to Secure Your Organization

Cyberattacks aren’t a matter of “if” anymore — they’re a matter of “when.” Every year, organizations pour money into firewalls, antivirus software, and security policies, yet breaches still happen. Why? Because most security tools are built to defend against known threats, while real attackers are constantly probing for the one weakness nobody thought to check. […]

Announcement

What is NFR? Complete Guide for IT and Cybersecurity Leaders

What Is 2FA? Two-factor authentication (2FA) is a security method that requires two different forms of identity verification before granting access to an account, application, or system. For example, a user might enter a password and then verify their identity with an authenticator app, security key, or fingerprint. Because an attacker needs to compromise two […]

Announcement

So I asked my agent instead…

Ask your Evo tenant about models, MCP servers, and skills across your AI estate, from the client you already work in.

Announcement

What Is 2FA? Understanding Two‑Factor Authentication

Ever wondered what is 2FA and why it’s a must for secure systems? Two‑Factor Authentication (2FA) adds a critical layer of security by requiring users to provide two pieces of evidence before granting access. For IT managers and founders, 2FA is no longer optional—it’s essential for preventing phishing, SIM swap, and credential theft attacks. In […]

Announcement

Is Your CVE (or legitimate configuration) Weaponizable? The Question That Actually Matters.

Every week brings another critical CVE, another emergency directive, another record-setting Patch Tuesday. If you read these headlines and then find one of those CVEs in your own environment, it’s natural to worry. Nobody wants vulnerabilities in their environment, and they should be patched. But a vulnerability is only a danger if an attacker can […] The post Is Your CVE (or legitimate configuration) Weaponizable? The Question That Actually Matters. appeared first on Skyhawk Securit

Announcement

Maturity Assessment: Benchmark Organizational Growth

Key Takeaways A maturity assessment scores a defined capability against a documented set of levels or criteria, using evidence rather than opinion. The method belongs to no single field. Procurement teams, data teams, and security teams all run one. This guide covers what a level asserts, what evidence a level claim requires, and how the […] The post Maturity Assessment: Benchmark Organizational Growth appeared first on Orca Security.

Announcement

Lessons From Seattle’s Floating Bridge About Preparing for the Next AI-Powered Cyberattack

If you have ever driven across Seattle’s Evergreen Point Floating Bridge, you know the feeling. Seven thousand, seven hundred and ten feet of calm, glassy water beneath you, and the longest, widest floating bridge in the world carrying you across. It is a marvel — and most people don’t realize just how much is happening […] The post Lessons From Seattle’s Floating Bridge About Preparing for the Next AI-Powered Cyberattack appeared first on ColorTokens.

Announcement

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the use of Apple

Announcement

NexusTek Positioned as a Major Contender in Everest Group Digital Workplace Services PEAK Matrix® Assessment 2026: North America

DENVER, CO, September 21, 2026 – NexusTek, a leading provider of secure, scalable IT solutions, has been positioned as a Major Contender in the Everest Group Digital Workplace Services (DWS) PEAK Matrix® Assessment 2026: North America. The assessment evaluated 29 digital workplace service providers based on market impact and vision and capability.

Announcement

Trusted Platforms for Agentless Application Discovery: Top 8 in 2026

TL;DR: Agentless application discovery identifies applications and maps their dependencies without installing software on every host. Trusted platforms include Faddom, best for credential-free hybrid mapping in under an hour, Device42, best for discovery plus CMDB, BMC Helix Discovery, best for enterprise service modeling, and ServiceNow Discovery, best for CMDB-native discovery. What Is Agentless Application Discovery? […]

Announcement

Defining the Standard for AI Security

Palo Alto Networks Named a Market Shaper in 2026 September Gartner® Emerging Market Quadrant for AI Application Security — Established Vendors. When we set out to solve AI security, we knew it … The post Defining the Standard for AI Security appeared first on Palo Alto Networks Blog.

Announcement

Your Security Team Is Stretched Thin. Can AI Return the Hours?

The Arctic Wolf® 2026 AI & Cybersecurity Trends Report asked security leaders how much time their teams spend each week on nine separate security tasks, and the answer came back between 13 and 15 hours for each one. That’s a workload that adds up to roughly three full-time people before anything unplanned arrives. Leaders are ... Your Security Team Is Stretched Thin. Can AI Return the Hours?

Announcement

Your Security Team Is Stretched Thin. Can AI Return the Hours?

The Arctic Wolf® 2026 AI & Cybersecurity Trends Report asked security leaders how much time their teams spend each week on nine separate security tasks, and the answer came back between 13 and 15 hours for each one. That’s a workload that adds up to roughly three full-time people before anything unplanned arrives. Leaders are ... Your Security Team Is Stretched Thin. Can AI Return the Hours?