How runtime insights helps with container security
Runtime insights offers key visibility and intelligence to help detect real risk, cut through noise, and secure containerized applications.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
342 matching stories — announcement, in Container Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Stop Fixing CVEs One by One: Eliminate up to 99.9% Before Production
Stop fixing CVEs after deployment. Learn how RapidFort’s prevention-first platform — featuring RF Near Zero CVE Images, DevTime RBOM™ profiling, and RunTime hardening — helps eliminate up to 95% of container vulnerabilities and secure your software supply chain without code changes.
Cloud security and the power of runtime insights
As organizations move to the cloud, the adoption of a CNAPP with runtime insights becomes a pivotal strategy for securing cloud environments.
Runtime is the real defense, not just posture
Instead of trying to build a forward-looking defense with backward-facing tools, it's time to flip the script: Start with runtime security.
Mend Renovate Enterprise: managing dependencies at agentic scale
How Mend Renovate Enterprise keeps dependency updates flowing at agentic scale.
Beyond the Merge: Enforcing Policy Before the Terraform Apply
Anchore + AI Just Got Easier: The Anchore Enterprise MCP Server
The post Anchore + AI Just Got Easier: The Anchore Enterprise MCP Server appeared first on Anchore.Anchore Enterprise was built on an automation-first philosophy from day one. We have always believed that security is an inherently complex process and tools need to be adaptable to fit in a wide variety of workflows and ecosystems to be successful. Every capability in the platform is exposed through a full-coverage API. Anchore has never […]
The CRA Reporting Deadline Is Almost Here
The European Union (EU) Cyber Resilience Act (CRA) is no longer a future-looking compliance project. Its first major operational deadline is now days away.
Your Kubernetes cluster is running images your registry scan never checked
The post Your Kubernetes cluster is running images your registry scan never checked appeared first on Anchore.Most container security programs put real effort into scanning images before they reach a registry, then treat the job as done. That’s a reasonable place to focus, but it leaves something out: what’s declared in a manifest and what’s actually running in a live cluster can drift apart fast. An image gets patched in the […]
What Is DSL: A Deep Dive into Digital Subscriber Line Technology
If you’ve ever set up home internet, you’ve probably come across the term “DSL” as one of the connection options alongside cable and fiber. But what is DSL, exactly, and how does it manage to deliver internet access over the same copper wires that have carried telephone calls for over a century? This guide breaks […]
7 Reasons Company AI Projects Stall Before They Ever Launch
Walk into almost any IT department in 2026 and you’ll find an AI initiative somewhere on the roadmap. Walk out a few months later, and there’s a good chance it’s still there — approved, budgeted, discussed in every leadership meeting, and not yet live. That gap between ambition and adoption isn’t a lack of enthusiasm. […]
Silence Is Now a Statement: Why CISA’s 2026 SBOM Minimum Elements Are a Real Improvement
The post Silence Is Now a Statement: Why CISA’s 2026 SBOM Minimum Elements Are a Real Improvement appeared first on Anchore.For 5 years, the SBOM conversation has been stuck on just generating one, saving it as an artifact, and “it’s done.” That’s what you get from a mandate measuring existence rather than quality: a lot of documents and very little consumption. ENISA’s 2026 adoption survey found more than 60% of respondents naming comprehensive coverage as […]
What is 401 Error: Causes, Fixes, and Best Practices for IT Security
If you spend any time managing websites, APIs, or internal business applications, sooner or later you’ll run into an HTTP status code that stops users cold: the 401 error. It’s short, it’s blunt, and it usually shows up at the worst possible moment — during a product launch, a client demo, or a critical system […]
Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions
An npm supply chain attack published ten malicious versions
The AI Productivity Paradox: More Code, Not More Delivery
Writing code faster only helps if the rest of the software delivery system can keep up.
A Reported Log4j RCE Is More Complicated Than It Looks
TL;DR A recently circulated Log4j finding demonstrates a reproducible bypass of a defense-in-depth deserialization control involving FilteredObjectInputStream. Sonatype does not currently consider this a clear-cut Log4j vulnerability. Apache explicitly warns that deserializing untrusted data is unsafe and treats these filters as hardening measures rather than complete security boundaries. Exploitation requires uncommon, legacy-style application behavior: an application must deserialize Java-seri
The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right
Nine solved supply chain risks, one new gap: the OWASP Agentic Skills Top 10.
The Regulators Already Assume You Have an AI Inventory. Do You?
The regulators are done with “Trust as policy”.   That chain used to be an internal maturity problem, something a security program could work on over time:  A developer trusts AI-generated code because it compiles. A reviewer trusts an AI-generated summary because it reads plausibly. A security team trusts scanner output because the pipeline shows […]
Integrate Aqua and VMware Tanzu to Control What Happens in Your Private Cloud
TL;DR Highly regulated industries like financial services often choose private cloud platforms such as VMware Tanzu Application Service (TAS) to retain greater control over their infrastructure, applications and sensitive data. That control does not remove risk at runtime, where exploitation actually happens and where a patch cycle often cannot catch up in time. Aqua’s integration …
RapidFort Offers Free Migration Support to Minimus Customers
5 AI Security Maturity Models Compared (2026)
In the span of ten months, the security industry produced more AI maturity models than most teams will ever read... The post 5 AI Security Maturity Models Compared (2026) appeared first on Cycode.
Closing the Governance Gap in Nutanix Kubernetes Platform Environments
Integrate Aqua and Datadog to Connect Runtime Security with Application Performance
TL;DR AI is compressing the time between vulnerability discovery and exploitation, while security teams still depend on workflows that require people to review alerts and piece together context. A vulnerable or unauthorized image, a runtime policy violation or a change in workload protection can become relevant to application availability before teams understand what happened. Aqua …
Prompting Your Infrastructure: The Reality of LLMs in DevOps
LLMs promise instant fixes for Kubernetes, but without CI/CD context, live metrics, and governed guardrails, they're just guessing. Here's how Devtron closes that gap.
Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents
AIControls now performs the ID-JAG token exchanges on your agents’ behalf — so agents need no protocol code — and policy-checks, budgets, and attributes every delegated MCP and LLM call to the human it acts for. ID-JAG answers may this agent act for this user? AIControls answers what... The post Okta Cross App Access (XAA / ID-JAG) in Nirmata AIControls: standards-based authorization for AI agents first appeared on Nirmata.
When the NASA Ground Station Has No Lock on the Door: Unauthenticated Command Execution in AIT-GUI (GHSA-p9r8-2q67-fp86)
A web GUI used to drive spacecraft and instrument commanding shipped a server that listens on every network interface, asks nobody for a password, and can be steered by any web page an operator happens to open. Here is how a stack of small, ordinary web mistakes adds up to unauthenticated command execution against hardware ... Read more The post When the NASA Ground Station Has No Lock on the Door: Unauthenticated Command Execution in AIT-GUI (GHSA-p9r8-2q67-fp86) appeared first on Cycode.
The Next Model Won’t Fix This: Three AppSec Imperatives From Black Hat USA 2026
Black Hat USA 2026 didn’t introduce the AI security problem, but made it clear how fast that problem is becoming operational. An independent study initiated and funded by Checkmarx helps explain why. On real-world repository tasks, frontier models produced working code 83% to 95% of the time, but only 24% to 36% of their solutions […]
CISA BOD 26-04 for Critical Infrastructure: Live SLA Clocks
CISA BOD 26-04 replaces flat patching deadlines with risk-weighted clocks. RapidFort Continuous Compliance turns those deadlines into live SLA tracking.
Intellectual Property Leakage: Risks, Detection, and Prevention
Software companies used to worry about someone walking out the door with a hard drive... The post Intellectual Property Leakage: Risks, Detection, and Prevention appeared first on Cycode.
What Is Checkmarx Fusion?
Now available in Early Access for SAST within Checkmarx One, Checkmarx Fusion adds a new detection layer that advances vulnerability-finding accuracy beyond what rules-based scanning or an AI model can achieve alone.
How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
TLDR: The attacks most likely to go undetected are the ones that never touch disk. They leave no files, trigger no signatures and are specifically engineered to evade the scanners and sensors most organizations depend on. Aqua’s runtime behavioral detection engine identified a multistage fileless cryptojacking campaign in a customer environment and surfaced malicious activity …