Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
600 matching stories — announcement, in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Today, we are unveiling our third CISO research report, “Industry Divides: Uncovering the CISO’s Resilience Priorities Across Sectors.” Based on a survey of 300 CISOs across financial services, healthcare, critical infrastructure, technology, and retail, the report exposes a stark reality: there is no single industry standard for cyber resilience.
If you have been watching the World Cup this summer, you have probably heard stadiums full of fans belting out John Denver's "Take Me Home, Country Roads." There is something undeniable about that song. It taps into a universal pull toward the places, the people, and the work where we truly belong. For me, the last few weeks have felt exactly like that. A homecoming. That is why I am incredibly excited to finally announce that I have joined Empirical as their Head of Research.
Most large provider networks, hospital systems, and digital health environments can already see a great deal. They can inventory connected assets, surface vulnerabilities, monitor traffic, detect anomalies, and generate more dashboards, alerts, findings, and reports than any team could reasonably absorb. The post From Visibility to Risk Reduction: The Missing Layer in Healthcare Security appeared first on Forescout.
Most large provider networks, hospital systems, and digital health environments can already see a great deal. They can inventory connected assets, surface vulnerabilities, monitor traffic, detect anomalies, and generate more dashboards, alerts, findings, and reports than any team could reasonably absorb. The post From Visibility to Risk Reduction: The Missing Layer in Healthcare Security appeared first on Forescout.
See how JADEPFUFFER executed the first documented LLM ransomware attack, and how organizations can reduce the risk of machine-speed attacks. The post JADEPUFFER: How an Agentic Ransomware Attack Unfolded appeared first on Outpost24.
Tidal Cyber Advances Threat-Led Defense to Transform Asset Visibility and Vulnerability Prioritization New capabilities center asset visibility, vulnerability prioritization, and defensive coverage around procedures and real adversary execution
Eleven validated Critical and High findings from Strobes AI's autonomous pentesting agents, each with the agent's reasoning, the request sent, and the response that proved it.
A founder's take on defending the enterprise when AI collapses the cost of offense — why legacy metrics like CVSS, EPSS, and KEV are dead, the three that matter now, and why defense needs an agentic workforce.
How Skyhawk’s Agentic AI Red Team took control of a production AWS organization in seconds, starting with a single low-privilege role, and without a single misconfiguration to exploit. The finding Skyhawk Security set out to test a simple question: what can an autonomous, AI-enabled attacker actually do inside a real cloud environment? So we pointed […] The post Nothing Was Broken. The Org Fell Anyway. appeared first on Skyhawk Security.
A CTEM program gives companies a continuous way to find, validate, and fix real exposures. Learn the five stages, the common objections, and how to get started. The post The Importance of Establishing a CTEM Program: Why Every Organization Needs One first appeared on SafeHill.
CISA released Binding Operational Directive 26-04 on June 10, 2026. It replaces BOD 19-02 and BOD 22-01, consolidates federal vulnerability remediation requirements into a single risk-based framework, and sets the most aggressive patch timelines in federal cybersecurity history.
Operational technology—the programmable controllers, tank gauges, and grid telecontrol systems that run physical infrastructure—was never designed to be accessible from the open internet. When exposed, these systems become an attack surface that’s both fragile and consequential: many can be disrupted by a single malformed packet, and a successful compromise can cross from the digital world […] The post SixMap Research: Operational Technology Exposure Report 2026 appeared first on Six
The European Central Bank has given eurozone banks a concrete deadline: by October 31, they need plans for AI-enabled cyber threats that could disrupt financial services and undermine trust in the banking system. This is not abstract regulatory positioning. It reflects a deeper shift in the economics of cyber risk. AI is lowering the cost […] The post The ECB’s AI Warning is Really a Remediation Warning appeared first on Tonic Security.
Enhanced platform brings continuous attack surface visibility, expert-led testing, flexible budget control and improved reporting into one risk-led AppSec program. The post Outpost24 Raises the Bar for Adaptive Application Security with Next-Gen CyberFlex appeared first on Outpost24.
Valid proof in an agentic pentest is reproducible, in-scope, and attributable evidence of exploitability. What counts, what doesn't, and how to prove it.
WiseBee founder and CEO Stoyan Stoyanov recently joined Val Tsanev on the Execweb Cybersecurity GTM Podcast to discuss one of cybersecurity's biggest challenges: when everything is critical, nothing is critical. The conversation explores how security teams can cut through the noise, focus on the risks that truly matter, and move from findings to [...]
The cybersecurity market is reactively panicking about automated vulnerability identification and autonomous AI exploit builders. With the emergence of automated toolsets like Anthropic’s Claude... The post Capitalize on Mythos Hype to Fix Your Exposure and Vulnerability Management appeared first on XM Cyber.
Overview In the first installment of this series, I walked through how I leveraged large language models to assist in identifying several vulnerabilities in the FreeBSD kernel, including a stack-based buffer overflow assigned CVE-2026-3038. This raised a natural follow-up question. Can language models effectively write exploits for memory corruption vulnerabilities? This article explores that question. […] The post FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part
IBM’s 2025 Cost of a Data Breach Report found that 97% of organizations that experienced an artificial intelligence (AI)-related security incident lacked proper access controls on AI systems. The same report highlighted that 63% of organizations lacked governance policies to manage AI or prevent shadow AI. Despite those statistics, AI is now deeply embedded in […] The post 5 Biggest Challenges of AI in Cybersecurity appeared first on Outpost24.
Cybersecurity is no longer viewed solely as an IT concern—it has become a matter of business resilience and corporate governance. Recognizing this shift, the U.S. Securities and Exchange Commission (SEC) introduced new cybersecurity disclosure rules that require public companies to report material cybersecurity incidents and provide greater transparency into their cyber risk management practices. This […] The post What Is Considered a Material Cyber Risk Under the New US SEC Rules? appeare
How we built a procedural engine that learns your real cloud environment, generates decoy environments indistinguishable from production, and converts every attacker interaction into signal. In the myth, Daedalus built the Labyrinth of Knossos so well that he nearly couldn’t escape it himself. The corridors looked real. The paths felt purposeful. And the deeper you […] The post Knossos: Procedurally Generated Decoy Environments appeared first on Praetorian.
For 19 years, every edition of the Verizon DBIR told the same story about initial access – credential theft was the number one entry... The post The 2026 Verizon DBIR Stopped Asking How Attackers Get in and Started Asking Where They Go appeared first on XM Cyber.
Most security programs are built to find risk. Very few are built to close it. Three structural problems explain that gap, but most programs are designed to address only one of them. The first problem is visibility. Nobody has a single, complete view of their environment. Scanne
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Gartner has identified Tenable as the company to beat for AI-powered exposure assessment in its report, AI Vendor Race: Tenable Is the Company to Beat for AI-Powered Exposure Assessment.According to Gartner, "Tenable's long-standing dominance in vulnerability assessment, its strong asset and attack surface discovery capabilities, and its ability to execute on its AI strategy make it the front-runner in
Between tight post-quantum deadlines and hackers turning lookalike AI tools into dangerous new entry points, today's CISOs are facing an unprecedented operational squeeze. This month, we dive into the fundamental questions security leaders must answer to protect everything from standard IT networks to critical operational technology.
Art Manion and I have been spending roughly an hour a week for the past couple of years working through what sounds like a simple question: What are the minimum viable elements needed to define and identify a vulnerability?
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that Tenable One Cloud Exposure has achieved FedRAMP® High and Impact Level (IL) 5 authorization, one of the U.S. government’s most stringent security certifications. Part of the Tenable One Exposure Management Platform, Tenable One Cloud Exposure is an actionable cloud security solution that provides unified visibility and AI-powered contextual insights to help organizations proactively identify and close c
Skyhawk Security recently engaged with a company to evaluate their readiness to prevent AI Autonomous attacks on their AWS cloud. What we found surprised even us. The security team was confident they were doing everything right and what is so eye-opening is that to a large extent, they did. They followed best practices, their identities […] The post Skyhawk’s AI Autonomous Attack Simulation Took Control of Company’s AWS Organization in Seconds appeared first on Skyhawk Security.
Using its AI Autonomous Attack Simulation, the new research exposes critical cloud security blind spot where legitimate configurations can be chained into full organizational control TEL AVIV, Israel, June 29, 2026 — Skyhawk Security, a pioneer in AI-based red team cloud security, today announced new research showcasing how its Agentic AI Red Team took control […] The post Skyhawk Security’s AI Red Team Took Over Company’s Full AWS Organization in Seconds appeared first on Skyhawk Security
AI is disclosing vulnerabilities ~16.5x faster than they are remediated. Tuskira Research on 1,596 Anthropic Mythos disclosures, and what security teams should do.
Most enterprises believe their internet perimeter is a uniform security problem. In reality, the risk is sharply concentrated: a small slice of unknown, unmanaged assets carries nearly all the danger, while the vast majority of the surface is well-protected. SixMap assessed 100 enterprise organizations and found that 99.63% of service exposures carry zero known CVEs […] The post SixMap Research: Enterprise Attack Surface Report 2026 appeared first on SixMap | Bridging the Reconnaissance Ga
XM Cyber Researcher Hillel Pinto uncovered CVE-2025-34352, a critical vulnerability in the JumpCloud Remote Assist for Windows agent (versions prior to 0.317.0). The flaw allows any low-privileged local user to exploit insecure file operations—arbitrary file write/delete—performed by the agent running as NT AUTHORITYSYSTEM within the user’s temporary directory. The post Trust No One: Automating macOS Privilege Escalation at Scale appeared first on XM Cyber.
Stop patching by severity score. See how to prioritize vulnerability remediation by what's reachable, exploited, and costly, so you fix what matters first. The post Vulnerability Prioritization: Why Basic Scoring Fails and a Better Way to Triage first appeared on SafeHill.
The Shift That Changed Cybersecurity Conversations One of the most requested presentations I have ever given is now nine years old, and it had nothing The post Getting Ahead of It: From “Are We Compliant?” to “Are We Exposed?” appeared first on Gambit Cyber.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced it is working with OpenAI as part of the OpenAI Daybreak Cyber Partner Program. The collaboration brings together OpenAI's frontier AI capabilities, including GPT-5.5, and Tenable's leadership in exposure management to help organizations better understand cyber risk, prioritize action and stay ahead of attackers through Tenable product and service workflows.The announcement comes as AI is reshaping the threa
One of the most common questions security and risk leaders ask today is: “What are the top risks in my enterprise?” Despite having access to more security data than ever before, many organizations still struggle to answer this question with confidence. Every day, enterprises generate information from vulnerability assessments, compliance reviews, audits, threat intelligence feeds, […] The post Ask Quantara: What Are the Top Risks in My Enterprise and How Can AI Help Mitigate Th
There’s a simple principle when it comes to building an AI enabled cyber defense program: buy the platform for the hard, durable problems, then build your edge on top of it. This post is about how to actually do the building. We call it BYOAI, or bring your own AI. Talk to enoug
In the previous post we walked through WasmForge, our Go-to-WebAssembly loader that takes existing signatured Go tools and ships them as opsec-safe binaries. This approach doesn’t just apply to Go, however, as there are many languages that can compile to WebAssembly. Another language of interest to us, especially regarding legacy tools which have been over-signatured, […] The post GhostPack Necromancy: Reforging C# Tools with WasmForge appeared first on Praetorian.
