Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
342 matching stories — announcement, in Container Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The FulcrumSec playbook: How to detect and stop the group behind the Novo Nordisk breach
The FulcrumSec threat actor group recently claimed to have stolen more than a terabyte of data from global pharmaceutical company Novo Nordisk, the manufacturer of Ozempic and Wegovy. News of the breach is making headlines worldwide, and this isn’t the first time this year they have breached a major organization. However, despite the group’s recent “success,” FulcrumSec’s playbook has shown a few definitive patterns. And where patterns exist, defenders have an opportunity to get ahead.
FulcrumSec Playbook: Sådan opdager og stopper du gruppen bag Novo Nordisk-bruddet
The FulcrumSec threat actor group recently claimed to have stolen more than a terabyte of data from global pharmaceutical company Novo Nordisk, the manufacturer of Ozempic and Wegovy. News of the breach is making headlines worldwide, and this isn’t the first time this year they have breached a major organization. However, despite the group’s recent “success,” FulcrumSec’s playbook has shown a few definitive patterns. And where patterns exist, defenders have an opportunity to get ahead.
You’re Securing Your Code. But Are You Securing the AI Inside It?
Modern applications don’t just run on code anymore. They run on models, agents, embeddings, datasets, and autonomous tools like MCP servers. Developers are pulling pre-trained LLMs from Hugging Face, integrating open-source agent frameworks, and wiring up AI pipelines faster than security teams can track them. Unlike rogue npm packages, these components don’t show up cleanly in your existing dependency graph.  For AppSec teams, this […
Integrate Aqua and Splunk for Full Visibility Into Runtime Threats
TL;DR When a container is compromised, the SOC needs the full picture of what happened and fast. The problem is that runtime security data from cloud native workloads often lives outside Splunk, in a separate tool the analyst must pivot to at exactly the wrong moment. Aqua’s integration with Splunk solves this by streaming its …
STIG Compliance for Chainguard Images Is Now Supported in Anchore Enterprise
The post STIG Compliance for Chainguard Images Is Now Supported in Anchore Enterprise appeared first on Anchore.Security Technical Implementation Guides (STIGs) are not optional for most Defense Department programs and agencies pursuing an Authorization to Operate (ATO) or for software vendors seeking FedRAMP authorization. But STIG scanning tooling has historically struggled with the minimalist, distroless design that makes Chainguard images attractive in the first place: no shell, no package m
Learnings From Checkmarx Agentic AppSec Unleashed ‘26
Deterministic Meets Frontier: The New Blueprint for AppSec
Checkmarx Named a Leader in Inaugural 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security
We’re proud to share that Checkmarx has been positioned as a Leader in the 2026 Gartner® Magic Quadrant™ for Software Supply Chain Security. We believe this recognition validates our dev-first, unified approach to comprehensive supply chain protection and centralized governance. Gartner evaluated vendors across two critical dimensions: Completeness of Vision and Ability to Execute, and […]
Event-Driven Workflows with Anchore Enterprise Notifications
The post Event-Driven Workflows with Anchore Enterprise Notifications appeared first on Anchore.Through the Looking Glass: A Mad Tea-Party This is post 3 in a seven-part series on what the Anchore Enterprise API makes possible for container security teams.  The fastest way to react to a new Critical CVE is to not have to ask. When a vulnerability is disclosed, a policy evaluation fails, or a container […]
CompOps: The Modern Blueprint for Continuous Compliance in the Agentic Era
The post CompOps: The Modern Blueprint for Continuous Compliance in the Agentic Era appeared first on Anchore.
How Do You Measure FAIR Risk in the Mythos Era?
TL;DR: Frontier AI models are discovering zero day vulnerabilities and weaponizing them in hours. Boards, regulators and underwriters have noticed, and they are asking a question most CISOs cannot answer: “What does our exposure cost in dollars?” Reporting in CVE counts and CVSS scores made sense when the threat timeline gave security teams room to …
The Hidden Cost of Kubernetes: How Over-Provisioning is Draining Your Cloud Budget
Your Kubernetes cluster may run smoothly, but hidden inefficiencies can increase cloud costs. Learn how over-provisioned workloads, oversized non-production environments, forgotten infrastructure, and inefficient autoscaling create waste and how platform teams can eliminate it.
Known Techniques, Unknown Speed: How AI Changes the Attack Chain
TL;DR AI-driven attacks on containerized environments are no longer theoretical. Frontier models can find vulnerabilities in hardened systems in hours and chain them into working exploits before your team has finished triaging the alert. When an attack moves that fast, the time your security program depends on between discovery and exploitation no longer exists. This …
Your Kubernetes Cluster Has GPUs. Now the Real Platform Problems Begin.
When GPUs enter your Kubernetes cluster, you’re no longer just running apps; you’re running an AI platform. Most teams aren’t ready for the scheduling, governance, and cost challenges that follow.