Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,578 matching stories — in Cloud-Native Application Protection (CNAPP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
By Manuel Salazar, Director of Cyber Services, Orro Key Points AI changes what security operations can do. It does not replace the visibility, telemetry, and response discipline that security operations depends on. The alert queue problem, more alerts than security teams can meaningfully investigate, is the defining operational pressure that AI-native security operations directly addresses. […] The post Beyond the Alert Queue: What AI-Native Security Operations Actually Looks Like appeared
TL;DR — Key Points Network uptime is a legacy metric. It tells you whether the pipes are working, not whether the business is. In distributed hybrid environments, a network that is technically “up” at every measurable point can still be delivering degraded performance to users whose experience is affected by application-layer problems that uptime monitoring […] The post The Black Box Problem: Why Network Uptime Is the Wrong Thing to Measure appeared first on Orro.
By Stu Long, CTO, Orro Key Points OT/IT convergence delivers genuine operational value, but connecting previously isolated operational systems to broader networks creates a category of security risk that most organisations cannot currently see. Operational technology environments have fundamental characteristics (legacy operating systems that cannot be patched, devices with no authentication capability, proprietary protocols that […] The post The Convergence Risk: OT/IT Security Visibility
This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …
Executive Summary A routine DNSSEC key rollover at Germany’s .de top-level domain (TLD) triggered a widespread internet disruption on May 5, 2026, causing DNSSEC-validating resolvers to reject millions of legitimate DNS queries. The incident was not the result of a cyberattack, malware, or infrastructure failure. It stemmed from a misconfiguration in a trusted security control. […] The post The Day a Routine DNS Change Became a Global Incident appeared first on CheckRed.
TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Tenable One Cloud Exposure has achieved FedRAMP® High and Impact Level (IL) 5 authorization, one of the U.S. government’s most stringent security certifications. Part of the Tenable One Exposure Management Platform, Tenable One Cloud Exposure is an actionable cloud security solution that provides unified visibility and AI-powered contextual insights to help organizations proactively identify and close c
Skyhawk Security recently engaged with a company to evaluate their readiness to prevent AI Autonomous attacks on their AWS cloud. What we found surprised even us. The security team was confident they were doing everything right and what is so eye-opening is that to a large extent, they did. They followed best practices, their identities […] The post Skyhawk’s AI Autonomous Attack Simulation Took Control of Company’s AWS Organization in Seconds appeared first on Skyhawk Security.
Using its AI Autonomous Attack Simulation, the new research exposes critical cloud security blind spot where legitimate configurations can be chained into full organizational control TEL AVIV, Israel, June 29, 2026 — Skyhawk Security, a pioneer in AI-based red team cloud security, today announced new research showcasing how its Agentic AI Red Team took control […] The post Skyhawk Security’s AI Red Team Took Over Company’s Full AWS Organization in Seconds appeared first on Skyhawk Security
Oracle PeopleSoft PeopleTools is a widely deployed Enterprise Resource Planning (ERP) platform used by universities, hospitals, and government agencies worldwide to manage HR, payroll, and student records. CVE-2026-35273 is a critical zero-day vulnerability in the PeopleTools Environment Management Hub (PSEMHUB) component, allowing an unauthenticated remote attacker to achieve full OS-level code execution by chaining a Read more about [2026.06 Vulnerability Report] Oracle PeopleSoft PeopleTools
This vulnerability is a 'PHP Object Injection' vulnerability discovered in Adobe Commerce (Magento). Attackers exploit the fact that the ServiceInputProcessor component attempts deserialization without validation or inspection to send serialized malicious PHP objects to vulnerable endpoints for execution. A security patch for this vulnerability was released in September 2025, and our AIWAF products plan to Read more about [2026.06 Vulnerability Report] SessionReaper: Adobe Commerce PHP Object In
Hi hackers, Welcome to the latest edition of Bug Bytes! In this month's issue, we are featuring: A 10-year-old pre-auth RCE in phpBB Earning $500K hacking Google with AI Reading any Salesforce Marketing Cloud account's emails New DOMPurify sanitizer bypass Mapping abandoned S3 buckets to redo SolarWinds at scale And so much more! Let's dive in! Using AI the smart way: interview with Cristian Zot (CristiVlad25) Cristian Zot, better known as @CristiVlad25, needs little introduction. An activ…
The next phase of cybersecurity will not be defined by whether artificial intelligence can find vulnerabilities. That threshold has already been crossed. The defining question is whether defenders can move from knowing about exposures to neutralizing them before attackers can convert them into working paths of compromise. Frontier models can discover more weaknesses, reason across […] The post AI Exploits Faster than We Can Patch appeared first on Skyhawk Security.
Healthcare organizations are accelerating their move to the public cloud, increasing the complexity of security and compliance. A healthcare security risk assessment provides a structured method to identify data exposures,... The post Healthcare Security Risk Assessments: A Complete Guide to Identifying and Reducing Risk appeared first on ClearDATA.
In an era where cloud security is subject to increasing regulatory scrutiny and enterprise procurement demands, the difference between self-declared... The post Skyhigh Security Achieves CSA STAR Level 2 Certification, Raising the Bar for Independent Cloud Security Assurance appeared first on Skyhigh Security.
Group-IB analyzes Millenium RAT version 4.*, a remote access trojan that has undergone an architectural shift from .NET to native C++, while continuing to leverage the Telegram Bot API for command and control, requiring no dedicated server infrastructure. This blog also profiles the developer “ShinyEnigma”, and threat actor cluster “Y2K Operators” responsible for active Millenium RAT exploitation campaigns. Over 62,000 compromised endpoints across more than 160 countries have been identified, wi
Frontier AI models are now a commodity, available to attackers and defenders alike. The real edge isn't the model. It's context, and only one side of this fight has it. The post Same Field, Same Players, But the Game Has Changed appeared first on Pentera.
NIST’s shift to risk-based enrichment makes one thing clear: modern security teams need more than a single public source. In the AI era, trusted vulnerability intelligence depends on multiple signals, human validation, and clear context.
  Backups are more common than you think. Every day, you probably rely on one without realizing it, whether it’s a coworker who covers your shift or that spare tire… The post Backups Can Save Your Business appeared first on 11:11 Systems.
Executive Summary The move toward shorter SSL/TLS certificate lifecycles is one of the most significant changes to internet security in years. Beginning in March 2026, publicly trusted certificates were reduced from 398 days to 200 days, with further reductions to 100 days in 2027 and just 47 days in 2029. While these changes strengthen security […] The post The Hidden Cost of Shorter Certificate Lifecycles: Why DNSPM Matters More Than Ever appeared first on CheckRed.
Growing SMEs do not need another security dashboard to manage. They need web protection that keeps pace with how staff actually work without adding more pressure onto internal IT. That is where many security setups start to fail. A tool that worked for a smaller office can become awkward once the business expands across remote staff, browser-based systems and Microsoft 365 access. Internal staff then spend more time untangling alerts than reviewing the actual risk. The strongest web security sol
Five Eyes warned that the timeline is months, not years. The harder truth buried in that statement: a finding is no longer a signal. Proof it's reachable and exploitable is. The post Five Eyes warned AI will upend cybersecurity in months. The same afternoon, OpenAI showed why. appeared first on Pentera.
Automated golden image pipelines help media and entertainment studios cut virtual workstation provisioning from weeks to minutes. This guide explains how M&E teams can move… The post The Golden Image Pipeline for Media & Entertainment (M&E) Studios appeared first on Effectual.
TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …
Incident response plans aren't enough if the response can't activate when it matters. Discover seven signs your organization may need a cybersecurity services retainer to strengthen readiness, resilience, and incident response capabilities.
E-commerce is the second most targeted sector for cyberattacks in 2026. Get the 10 priorities every security team must act on, with Group-IB intelligence behind each.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced it is working with OpenAI as part of the OpenAI Daybreak Cyber Partner Program. The collaboration brings together OpenAI's frontier AI capabilities, including GPT-5.5, and Tenable's leadership in exposure management to help organizations better understand cyber risk, prioritize action and stay ahead of attackers through Tenable product and service workflows.The announcement comes as AI is reshaping the threa
  Quick answer: Data is growing faster than most organizations can store or protect it. Falling hardware costs, abundant bandwidth, paperless workflows, and regulatory mandates all fuel this surge. To… The post Data Growth Tests Backup Capabilities: How to Keep Up appeared first on 11:11 Systems.
Generative AI and modern messaging platforms did not create a browser problem. They created a network security problem. ChatGPT, Microsoft... The post A Different Approach: Why the Answer to Browser Security Is Not a New Browser appeared first on Skyhigh Security.
On June 9, Anthropic launched its shiniest model yet. On June 12, the US government made them switch it off. For everyone. Worldwide.If you build security products for a living, that three-day arc should ruin your week, not just Anthropic's. The post When Someone Pulls the AI Plug appeared first on Pentera.
