Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
600 matching stories — announcement, in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
In this demo, you will see the how the Arctic Wolf mobile app delivers the power of the Aurora Platform to the palm of your hand. This secure, always on access ensures that you can maintain oversight, view tickets, respond faster and have peace of mind anywhere, anytime.
See how a North American manufacturer used NodeZero to connect password weaknesses to real attack paths and turn security findings into measurable remediation.
On August 18, the “2026 IDC China Artificial Intelligence and Data Summit,” hosted by IDC, was grandly held in Beijing, bringing together numerous industry elites and technology leaders. With its solid technical foundation and mature, proven industry solutions in AI security, NSFOCUS was named to the “2026 IDC China AI Top 50” list, joining the […] The post NSFOCUS Named to the 2026 IDC China AI Top 50 appeared first on NSFOCUS.
Cloud computing has transformed how organizations build, deploy, and operate digital services. Businesses can launch applications faster, scale infrastructure on demand, support remote workforces, and access powerful computing resources without maintaining traditional data-center infrastructure for every workload. However, the advantages of cloud computing also introduce new cybersecurity challenges. Modern cloud environments can include: Public cloud The post Best Cloud Security Platform appear
A traditional corporate network may once have consisted primarily of office computers, servers, switches, routers, and a centralized data center. Today, organizations operate across cloud platforms, remote offices, SaaS applications, mobile devices, IoT systems, endpoints, APIs, data centers, and operational technology environments. Employees can access business resources from almost anywhere. Applications may be distributed across The post Enterprise Network Security Solution appeared first on
Cheaper, faster and accurate pentests were never a real tradeoff. Context removes it: one graph of assets, code and cloud that every engagement reads from and writes back to.
For four decades, U.S. law drew a hard line around private-sector cybersecurity. Companies could detect, respond to, and report attacks. They could not fight back. On Wednesday, August 12, 2026, that line moved. President Trump signed a National Security Presidential Memorandum (NSPM) directing the Department of Justice (DOJ) and the Department of Homeland Security (DHS) ... The Line Between Defense and Offense Just Moved. Here’s What Comes Next.
This marquee event brings together senior leaders from across Arctic Wolf to share what we’ve launched, what matters most at the moment, and what’s coming next, all in one session.
A practical evaluation framework for AI cyber defense platforms: five dimensions, fifteen vendor questions, and the ROI measures that matter for CISOs and SOC leaders.
Drawing on the 2026 CTEM study, this article examines why most CTEM efforts stop at visibility and why continuous attack-path validation is what truly drives risk reduction.
Discover the strategic balance between fixing vulnerabilities and protecting against exploits. Learn how to prioritize resources effectively in cybersecurity.
Explore how cyber diplomacy can become an operational capability that helps governments and partners reduce exploitable risk and strengthen resilience across shared ecosystems.
Learn how to operationalize CTEM as a continuous cycle that validates exploitable risk, prioritizes what matters, verifies remediation, and drives measurable risk reduction.
The security industry has spent two decades getting very good at finding problems. Scanners find vulnerabilities. Pen testers find exploitable paths. Cloud tools find misconfigurations. What the industry has been far less good at is turning that mountain of findings into confiden
Cássio De Alcântara is Director, LATAM Sales at Rapid7.Across Latin America, organizations are embracing cloud, AI, and digital transformation to drive innovation and business growth. These technologies create new opportunities, but also introduce greater complexity and expanding attack surfaces.In this environment, security leaders are being asked to understand where risk exists across increasingly distributed environments and quickly eliminate blind spots like Shadow IT and Shadow AI – all wit
Organizations are generating unprecedented amounts of digital data from endpoints, networks, cloud workloads, applications, identities, IoT devices, SaaS platforms, and operational technology. At the same time, cybercriminals are becoming more sophisticated, using automation, credential theft, social engineering, malware, ransomware, living-off-the-land techniques, and increasingly AI-assisted attack methods. Traditional cybersecurity tools remain important, but security teams can The post AI Cy
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers.The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time between disclosure and exploitation. The gap that patch cycles were built to fill is closing. Speed and volume are overwhelming security teams that have relied on traditional patch cycles and reactive programs
An unauthenticated SQL injection in GeoServer's jsonArrayContains filter function lets attackers inject arbitrary SQL through public WMS and WFS endpoints, reaching remote code execution on privileged database hosts.
Everyone runs Apache Airflow. Almost nobody treats it like the production control plane it is. Offensive research into real exposed instances, leaked secrets, default creds, and new CVEs, including one found on the current release. The post Who Let the DAGs Out? When Your Orchestrator Plays the Wrong Tune appeared first on Reflectiz.
Overview On August 12, NSFOCUS CERT monitored that Microsoft released its August security update patch, fixing 421 security issues. These affect widely used products such as Windows, Microsoft Office, Azure, Visual Studio Code, Microsoft Exchange Server, etc., which include high-risk vulnerability types such as privilege escalation and remote code execution. Among the vulnerabilities fixed in […] The post Microsoft’s August Security Update of High-Risk Vulnerability Notice for Multip
It comes as no surprise that the Mythos era continues to put pressure on security teams: it’s never been easier for attackers to find and weaponize vulnerabilities at scale, and comparable capability is only becoming more available. The gap between a CVE’s disclosure and its exploitation is compressing fast, while patches still take days to... The post NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era appeared first on IONIX.
The problem with traditional vulnerability and risk management programs hasn’t been discovery, and that’s to take nothing away from the groundbreaking frontier models that... The post The Brain Behind the Muscle: Why AI Automation Fails Without Unified Exposure Context appeared first on XM Cyber.
Operation ASTERIX overviewRapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the campaign's development; recovered p
How we wired an agentic reviewer into CircleCI and Bitbucket, and the failures that shaped it. Most AI code review tools fail the same way. They work, in the sense that comments appear on the pull request. Then you read the comments and they are 80% “consider extracting this into a helper”, “missing test coverage”,... The post We built an AI PR reviewer. The hard part was teaching it to say nothing. appeared first on IONIX.
Without structure, retrieval is just expensive search. By Ron Dovich, Chief AI Officer, and Paden Portillo, Principal Software Engineer, Brinqa You have already done the hard part: you decided to put an AI agent to work on your security data. You ask it the question that actual
Security researchers from XM Cyber have recently discovered a series of vulnerabilities in Microsoft System Center Configuration Management (SCCM) that could be chained together... The post Potential for Remote Code Execution in Microsoft SCCM via Newly-Discovered Exploit Chain appeared first on XM Cyber.
Abstract NSFOCUS has now completed a second CyberGym Level 1 evaluation of NSFOCUS AI, this time using GLM-5.3 inference. The new run solved 1,432 of 1,507 tasks, achieving a strict Pass@1 of 95.02% and extending the earlier GLM-5.2 evaluation reported below. In the earlier GLM-5.2 evaluation, NSFOCUS’s self-developed intelligent offensive-and-defensive system NSFOCUS AI achieved a […] The post NSFOCUS AI CyberGym Level 1 Technical Report appeared first on NSFOCUS.
I went to Black Hat expecting to spend the week arguing about agents, but the number I came home thinking about was 26%. 1Password’s Off-by-1 Labs tested 6,080 AI-generated patches against six recently disclosed CVEs. Only 26% fully fixed the flaw without changing how the application behaved. Another 53.9% were what [...]
So why Empirical? The technology solves a problem I watched go unsolved for a decade, and I want to be a part of the answer. And the people behind it are some of the smartest, most genuine people I know — people I've already spent years trusting. Win-win, as they say.
August 2026 Patch Tuesday arrived today with roughly 400 CVEs, making it the second-largest release in Microsoft history and still a thirty percent decline from July. One zero-day is under active exploitation, a Windows WinSock driver flaw that researchers note fits historical na
Originally published on the Hacker News here. A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, […] The post AI Recommendation Poisoning: How “Ask AI” Buttons Silently Alter LLM Memory appeared first on Reflectiz.
Discover what the OpenAI Hugging Face breach reveals about AI-driven attacks and the lessons organizations should take. The post OpenAI Hugging Face Breach: What Happened and the Security Lessons appeared first on Outpost24.
Here is the uncomfortable truth every security leader already suspects: the agencies found these weaknesses even in organizations “with mature cyber postures.” Not because those teams are careless, but because modern hybrid environments have grown too large, too interconnected, and too fast-changing for any human or any spreadsheet, or any static Visio diagram to fully [...] The post Ten Mistakes, One Blind Spot: How RedSeal Helps You Preempt the Misconfigurations Attackers Count On — Across IT
On-prem users, legacy and OT systems, and unmanaged devices continue to operate with weak or absent trust rules. Here’s why you need UZTNA. The post 7 Things Every Architect Should Know About Universal ZTNA appeared first on Forescout.
On-prem users, legacy and OT systems, and unmanaged devices continue to operate with weak or absent trust rules. Here’s why you need UZTNA. The post 7 Things Every Architect Should Know About Universal ZTNA appeared first on Forescout.
New Blog Post New Patent: Further Advancing CYBRAL’s Transformation into an AI-Native Data Security Platform Posted by dinagawdat, 2 MIAMI, Florida, August 11, 2026 — (BUSINESS WIRE) — CYBRAL Inc. today announced the issuance of a U.S. patent for its award-winning CYBRAL GUARD® platform, marking a major milestone in the company’s transformation into a truly AI-driven, pre-emptive cybersecurity platform. Three additional patents are currently pending. CYBRAL GUARD’s newly issued U.S. utility...
MIAMI, Florida, August 11, 2026 — (BUSINESS WIRE) — CYBRAL Inc. today announced the issuance of a U.S. patent for its award-winning CYBRAL GUARD® platform, marking a major milestone in the company’s transformation into a truly AI-driven, pre-emptive cybersecurity platform. Three additional patents are currently pending. CYBRAL GUARD’s newly issued U.S. utility patent describes an automated, AI-driven system for continuously discovering, classifying, monitoring, labelling, enriching, and...