Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
134 matching stories — announcement, in Continuous Controls Monitoring — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Lord of the Controls, Part 1: Leaving the Shire of Static PDFs October 20, 2026 | By Travis Howerton “Three Rings for the Cloud Kings under the federal sky, Seven for the Auditors in their halls of stone, Nine for Mortal CISOs doomed to manually reply, One for the Dark Lord on his SharePoint throne… One Trust Center to... The post Lord of the Controls, Part 1: Leaving the Shire of Static PDFs appeared first on RegScale.
Discover the top 10 CCPA compliance tools of 2026 to protect customer data and streamline compliance. The post Top 10 CCPA Compliance Tools in 2026 appeared first on Scytale.
The Stack Keeps Growing, the Trust Doesn’t The average MSP stack adds a new point solution every year without retiring the ones that came before it, and the CTO is left to make them talk to each other. The pattern looks reasonable one decision at a time. A client asks for better network visibility, so […] The post MSP Stack Architecture: The CTO’s Real Job in 2026 appeared first on Liongard.
Learn about ISO 42001 certification costs, key cost drivers, and practical ways to reduce expenses without compromising audit readiness. The post How Much Does ISO 42001 Certification Cost? appeared first on Scytale.
Learn how to build a risk heat map from your risk register and prioritize effective risk treatment decisions. The post Risk Heat Map: How to Build One and Use It to Prioritize Cyber Risk appeared first on Scytale.
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.
As you review CTEM vendors, consider how each handles the five stages, whether natively or through integrations, and where it hands the work to another tool.
Your scanner and your EDR each see a different slice of your environment. Here is how to find the assets one sees and the other misses, in a single query.
CIS Benchmarks: The Configuration Baseline Regulators Expect Every major security regulation now asks the same question: can you prove your systems are securely configured? Few of them define what “secure” means. CIS Benchmarks® fill that gap.  Misconfiguration remains one of the easiest ways into an organisation. Default accounts, legacy protocols and inconsistent settings across thousands […] The post CIS Benchmarks: The Configuration Baseline Regulators Expect appeared
RegScale Innovates Its Way to Another Industry Accolade October 8, 2026 | By RegScale Winning awards is not primarily what motivates ourteam, but when one comes along, we’ll be sure to celebrate. For a decade, the CyberSecurity Breakthrough Awards have been recognizing solutions that advance the industry. So we’re humbled to have been chosen from... The post RegScale Innovates Its Way to Another Industry Accolade appeared first on RegScale.
Beyond Cyber Awareness: Turning Vigilance into Continuous Resilience October 7, 2026 | By Travis Howerton Cybersecurity Awareness Month has been helping to educate businesses about emerging threats for over two decades.  But true cyber resilience isn’t just about awareness of what the bad guys are doing. It also demands an understanding of whether the controls... The post Beyond Cyber Awareness: Turning Vigilance into Continuous Resilience appeared first on RegScale.
The bugs could lead to authentication bypass, shell command execution, and memory corruption. The post Fortra Patches Critical Vulnerabilities in BoKS appeared first on SecurityWeek.
N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra blog.
AI-accelerated vulnerability discovery is breaking patch-speed metrics. Here's what exposure-based vulnerability management looks like and what it takes.
Why QBR Prep Still Eats a vCIO’s Week QBR prep is slow because the asset data behind it comes from disconnected systems that don’t agree with each other, not because vCIOs lack reporting tools. Every quarter, the same scene plays out. The night before a QBR, a vCIO is pulling data from four disconnected systems […] The post QBRs Are Faster When AI Can Trust the Data Behind Them appeared first on Liongard.
MSP owners have heard enough about how cool AI is. What they actually want to know is far more grounded: what does it do for my business, today, on a real ticket, with real money, and real client trust on the line. That’s the question Liongard and Thread set out to answer together, building out […] The post What AI-Powered Service Delivery Actually Looks Like appeared first on Liongard.
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges. The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.
The UK’s Ministry of Defence has sent a clear message to organisations within the Defence supply chain. By 31 December 2026, all Defence industry partners are expected to achieve Defence Cyber Certification (DCC) Level 0, including Cyber Essentials for all applicable business-critical systems within scope. This represents a significant step in strengthening cyber resilience across […] The post December 2026 Is Closer Than You Think: What the UK’s Defence Cyber Directive Means f
Time To Build The Cybersecurity Mesh What is CSMA? As organizations transition from site-centric architectures to identity-first and distributed frameworks, the need for transformational security strategies becomes paramount. In response to evolving security threats, Gartner’s VP analyst, Patrick Hevesi, introduced the concept of Cybersecurity Mesh Architecture in 2021. CSMA aims to bridge the shortcomings of […]
AI is compressing exploit timelines. The real question isn’t whether your vulnerability management playbook needs to change, it’s which part of it you’ve been getting wrong all along. The conversation happening in security circles right now goes something like this: Mythos is here. Exploit timelines are collapsing. Does the vulnerability management playbook need to change? […]
Continuous asset visibility has become one of the most critical capabilities in modern cybersecurity. You cannot protect what you cannot see, and in today’s hybrid, cloud-connected, BYOD-driven IT environment, most organisations have more assets than they realise. Cyber Asset Attack Surface Management (CAASM) is the discipline and technology that fixes this. Here is everything you… The post What is CAASM? The Complete Guide to Continuous Asset Visibility first appeared on Quod Orbis.
Cloud Security Posture Management (CSPM) is a dedicated capability focused entirely on protecting an organisation’s assets and data within cloud environments. As businesses increasingly migrate workloads and sensitive data to the cloud, the need for robust, continuous cloud security has become critical. CSPM identifies, manages and mitigates security risks across cloud infrastructure and applications, providing… The post Cloud Security Posture Management: Your Complete Guide first appeared
Cyber and compliance leaders are being asked to do more with less, and faster than ever. Attack surfaces are expanding as cloud, SaaS and third-party integrations multiply. Regulators are tightening expectations – DORA, NIS2, the FCA’s operational resilience rules, and an ever-growing list of frameworks all demand evidence that controls aren’t just in place, but… The post How Organisations Adopt Continuous Controls Monitoring first appeared on Quod Orbis.
Financial institutions don’t have a tool problem. They have a context problem. The average enterprise runs 83 security tools. In financial services, that number trends higher. Each tool does its job. But none of them answers the question regulators, auditors, and attackers all ask in different ways: where are the real paths to your critical […]
Summer is a good time to catch up on hardening work that gets postponed the rest of the year. Change freezes ease up, project calendars thin out, and the servers that quietly drifted out of spec during Q1 and Q2 finally get some attention. Over the next eight weeks, we’re publishing one practical hardening review […] The post Server Hardening Checklist: 8 Weekly Checks to Reduce Configuration Drift appeared first on CalCom.
Cybersecurity is no longer viewed solely as an IT concern—it has become a matter of business resilience and corporate governance. Recognizing this shift, the U.S. Securities and Exchange Commission (SEC) introduced new cybersecurity disclosure rules that require public companies to report material cybersecurity incidents and provide greater transparency into their cyber risk management practices. This […] The post What Is Considered a Material Cyber Risk Under the New US SEC Rules? appeare
One of the most common questions security and risk leaders ask today is: “What are the top risks in my enterprise?” Despite having access to more security data than ever before, many organizations still struggle to answer this question with confidence. Every day, enterprises generate information from vulnerability assessments, compliance reviews, audits, threat intelligence feeds, […] The post Ask Quantara: What Are the Top Risks in My Enterprise and How Can AI Help Mitigate Th
Anthropic’s Mythos AI model reportedly leapfrogs the coding and cyber security hacking capabilities of previous Frontier AI models. Similar future developments will undoubtedly further challenge effective cyber security protection. Testament to that is the recent revelation that Mythos has successfully reverse-engineered a cell type from raw DNA data. AI will soon grant people extremely dangerous powers and our […] The post The Mythos moment appeared first on Huntsman.
Cyber security has firmly entered the domain of enterprise risk management. Boards, regulators, insurers and investors are no longer satisfied with compliance statements or maturity scores. They want clear, defensible evidence of how well the organisation is protected and what level of risk remains. Yet many organisations still rely on periodic assessments, manual audits and […] The post From Cyber Activity to Measurable Business Protection appeared first on Huntsman.
