Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,578 matching stories — in Cloud-Native Application Protection (CNAPP) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Most attacks today move faster than a human analyst can read a dashboard. AI agents, non-human identities, and automated SaaS workflows now touch as much sensitive data as the people who deployed them, and each one adds another blind spot a security team has to awkwardly bend their neck to try to watch. Understanding risk […]
Cyber Threat Intelligence (CTI) Demo page prem.shah Tue, 09/01/2026 - 16:06
Detect exposure to new vulnerabilities the moment they are published with Wiz CVA
If you’ve ever set up home internet, you’ve probably come across the term “DSL” as one of the connection options alongside cable and fiber. But what is DSL, exactly, and how does it manage to deliver internet access over the same copper wires that have carried telephone calls for over a century? This guide breaks […]
Walk into almost any IT department in 2026 and you’ll find an AI initiative somewhere on the roadmap. Walk out a few months later, and there’s a good chance it’s still there — approved, budgeted, discussed in every leadership meeting, and not yet live. That gap between ambition and adoption isn’t a lack of enthusiasm. […]
Status of High-Risk Vulnerabilities No. Vulnerability No. (CVE) Content CVSS Risk Level 1CVE-2026-48276Adobe ColdFusion Arbitrary File Upload RCE10CRITICAL 2CVE-2026-48286Adobe Campaign Classic Authorization Bypass RCE10CRITICAL 3CVE-2026-10134IBM Langflow OSS Code Injection10CRITICAL 4CVE-2026-50160Hoppscotch Mass Assignment Authentication Bypass10CRITICAL 5CVE-2026-48316Adobe ColdFusion Improper Input Validation RCE10CRITICAL 6CVE-2026-57572Crawl4AI Docker API Argument Injection RCE10CRITICAL
Learn how Datadog visualizes CUPED adjustments so you can trace which covariates change experiment lift estimates and improve precision.
Learn how to read AI agent traces as a roadmap and how to run production experiments that measure whether improvements hold in production.
Learn how Datadog improved Rust tracing by building an opinionated OpenTelemetry-based library to help ensure consistent sampling, propagation, and trace quality at scale.
Analysis of 15 intrusions revealed tradecraft used by GOLD SHERWOOD affiliates
When customers keep pointing you to a solution that overlaps with parts of your own offering, you have a choice to make. This post is about the choice we made with Upwind, and why we’d make it again. AWS Security Hub Extended exists because customers told us what was working for them in enterprise security […]
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that it has joined Project Watershed, a White House-led initiative focused on protecting U.S. water and wastewater systems from cyber threats. Tenable brings expertise in helping organizations unify visibility, including across IT and OT security domains, prioritize risk and automate remediation to keep pace with evolving threats related to cyber exposures in the agentic AI era.Led by the Office of the
See how integrated malware sandboxing cuts manual handoffs, speeds EDR investigations, and helps teams move from suspicious files to faster response. The post How Integrated Malware Sandboxing Makes EDR Investigations Faster appeared first on Fidelis Security.
Anthropic’s J-space shows what an AI agent is thinking before it acts. Why that’s a third telemetry layer for detection — and why labs should expose the feed.
AI agents have now proven, in the real world, that autonomy without a security model is a liability. At Arctic Wolf, we’ve spent years watching that same lesson play out with cloud migrations, remote work, and every other rush of new technology, and this is that pattern showing up again, just faster. OpenAI recently published ... The Trillion-Dollar AI Bet Needs a Security Strategy
Most IT teams can't say what AI is running or what it costs. BetterCloud AI governance discovery is the AI inventory tool for SaaS management for AI tools.
The florist is setting up. The catering team is doing final prep. Five hundred guests are forty-five minutes away. The AV team is doing their equipment pre-check.
If you spend any time managing websites, APIs, or internal business applications, sooner or later you’ll run into an HTTP status code that stops users cold: the 401 error. It’s short, it’s blunt, and it usually shows up at the worst possible moment — during a product launch, a client demo, or a critical system […]
Group-IB uncovers BraZetsu, a new Python-based Windows malware that serves as a master toolkit for Initial Access Brokers and powers a unique, AI-enhanced underground marketplace for commercializing compromised Iberian and Latin American targets.
Claude Code is an agentic coding tool that reads and modifies files and runs commands in a development environment. CVE-2026-39861 is a sandbox escape vulnerability affecting versions of Claude Code prior to 2.1.64. A process running inside the sandbox could create a symbolic link to a location outside the workspace, allowing a subsequent file write by Claude Code’s unsandboxed process to reach that location without prompting the user for confirmation. Reliable exploitation requires untrusted co
CVE-2026-50522 is a critical unauthenticated Remote Code Execution (RCE) vulnerability in Microsoft SharePoint Server, caused by insecure deserialization of untrusted data via the legacy BinaryFormatter in the WS-Federation token processing endpoint. An unauthenticated remote attacker can post a specially crafted malicious payload to the /_trust/default.aspx endpoint to execute arbitrary code in the context of the SharePoint service account, requiring no credentials and no user interaction (CVSS
ASD has moved from awareness to action for 2026. A practical, five-part checklist mapped directly to ASD’s own critical actions, so you know exactly where you stand. 2026 is Cyber Action Year. ASD has set five critical actions every Australian organisation should be prioritising, replacing legacy technology, implementing best practice event logging, choosing secure-by-design products […] The post The Cyber Action Year Readiness Checklist appeared first on Orro.
By Manuel Salazar, Director of Cyber Services, Orro For years, ransomware followed a pattern security teams could plan around: encrypt the data, demand payment for the key, and make recovery a race against the clock. That model has not disappeared, but it is no longer the centre of gravity. The more important shift is that […] The post The Recovery-Denial Economy: Why Modern Ransomware No Longer Needs Encryption appeared first on Orro.
Key Takeaways Zero Trust and SASE were built to secure a distributed human workforce. That problem is largely solved. The current gap is different: most architectures were never built to recognise, verify or constrain AI agents. Non-human identities, service accounts, API keys and agent credentials already outnumber human identities in many enterprise environments, and the […] The post Zero Trust Wasn’t Built for This: Securing the Rise of Non-Human Identities appeared first on Orro.
Defenses built for human speed won’t hold against AI-driven threats. That’s why stateful detections are becoming an essential tool for runtime security.
A supply chain worm was found hiding in @7nohe/openapi-react-query-codegen, a popular code generator for TanStack Query, stealing credentials and spreading itself to every package the victim maintains. Category: Vulnerabilities & Threats
Most of a container's vulnerabilities come from the base image. How to harden Docker images, why hardening is ongoing, and how to patch the base you already run. Category: Guides & Best Practices
Check the top 10 network detection and response solutions for enterprise security teams, including Fidelis, ExtraHop, NetWitness, and more. The post Top 10 Network Detection and Response Solutions for Enterprise Security Teams appeared first on Fidelis Security.
Authorities disrupt global cybercrime rings, attackers abuse DocuSign in NovaCookies phishing, and Spark RAT targets Cambodia with vulnerable drivers.
  The Migration Everyone Is Talking About Broadcom’s acquisition has every IT leader re-examining their virtualization stack. Per CloudBolt’s February 2026 survey of 302 IT decisionmakers, 86% are actively reducing… The post Hypervisor Migration Risks: What to Know Before Planning a Move appeared first on 11:11 Systems.
Pricing and reimbursement are high on the medtech executive agenda this year. In Deloitte’s 2026 Life Sciences Executive Outlook, 37% of medtech leaders identified these areas, along with contracting and access, as a key focus for the year.1
Overview On August 27, 2026, PaperCut Software published an urgent security advisory stating that it is investigating active exploitation of a vulnerability affecting PaperCut NG and PaperCut MF. PaperCut has confirmed customer incidents and is treating the issue as a security emergency. At the initial time of disclosure, the vulnerability had not been assigned a CVE identifier, and PaperCut had not publicly disclosed a CVSS score, vulnerability class, authentication requirements, or the technic
A TOCTOU attack passes the check, then swaps the resource before it is used. Scanners validate once and trust forever. Enforcement at the syscall is the only control that holds.
How Cross-Border Deal Dynamics Are Reshaping M&A in Latin America Off ani.jarrett Fri, 08/28/2026 - 04:17 Global M&A is concentrating around larger deals and strategic buyers — reshaping the competitive landscape across LATAM. M&A Due Diligence Off Luiz Felipe Machado ">Luiz Felipe Machado Luiz Felipe Machado Job Title Head of Sales - LATAM LinkedIn Handle https://www.linkedin.com/in/luiz-felipe-machado-68b93014/ Summary Luiz Felipe Machado is the Latin America Head at SS&C In