What Security Metrics Actually Matter?
Security activity doesn’t always equal risk reduction. Learn how attack paths, business impact, verification, remediation speed, and recurrence can show whether CTEM is actually working.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
734 matching stories — in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Why GRC Automation Tools Didn’t Fix Compliance
SERIES: “The Death of Compliance Theater” — Part 2 of 3 Part 1 of this series made the case that a passing audit and a secure environment are two different things, answering two different questions. This post is about a specific, well-intentioned attempt to close that gap  and why it mostly automated the wrong half of The post Why GRC Automation Tools Didn’t Fix Compliance appeared first on Seceon Inc.
October 2026 CVE of the Month: The Next.js RCE Behind "Not Affected" (CVE-2026-75604)
October 2026 CVE of the Month: The Next.js RCE Behind "Not Affected" (CVE-2026-75604)
Federal PQC Orders Are Here: How to Prioritize Migration Before Q-Day
The United States is in a race to develop its quantum capabilities and to migrate critical systems to post-quantum cryptography before standard encryption practices become obsolete. That’s because AI is merging with quantum computing and rapidly accelerating the timeline to Q-day. Frontier models can allow technologists to identify more efficient ways to design, architect, and […] The post Federal PQC Orders Are Here: How to Prioritize Migration Before Q-Day appeared first on Forescout.
How AI Is Changing the Roles Required in the Security Operations Center
As AI takes on more of the enrichment, correlation, and initial assessment inside the SOC, roles, skills, and KPIs still require deliberate redesign. Security leaders need to decide where automation is dependable, where human judgment should remain decisive, and how teams should be measured when alert handling is no longer the center of the operating modelThe Gartner® report, The Roles Required for the AI-Enabled Security Operations Center (SOC), examines the roles and capabilities Gartner expec
Emerging Threat: (CVE-2026-86858) ServiceNow AI Platform Unauthenticated Privilege Escalation via GraphQL
An access control flaw in the ServiceNow AI Platform lets an unauthenticated user create, modify, or delete instance data through GraphQL, beyond what the platform intended.
10 Most Influential Ethical Hackers to follow in 2026
In 2018, a researcher scanning Magento-powered online stores noticed something odd: the same few lines of malicious JavaScript kept turning up, siphoning payment card numbers […] The post 10 Most Influential Ethical Hackers to follow in 2026 appeared first on Reflectiz.
CrowdStrike Expands Federal SOC Modernization Through CISA-Funded SIEMaaS
CVE-2026-76504 | Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability | Reversed by Horizon3
CVE-2026-76504 is a critical, actively exploited Cisco Catalyst SD-WAN Manager vulnerability that allows unauthenticated API access as the admin user. Horizon3 reverse engineered the flaw, and NodeZero® Rapid Response safely validates exposure.
Frequently Asked Questions About the Cisco Catalyst SD-WAN Manager Authentication Bypass (CVE-2026-76504)
Cisco disclosed the Authentication Bypass in Cisco Catalyst SD-WAN Manager, which lets an unauthenticated attacker gain admin-level access to the management API. This FAQ is updated as more details about the vulnerability and its fix emerge.
Skyhawk Security mentioned in the 2026 Gartner® Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction Report
Skyhawk Security is named as a Sample Vendor in Gartner’s new research, Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction, published September 28, 2026. We’re proud of the recognition. In our opinion, it reflects something we have believed since the start: defenders cannot keep up with AI-powered attackers by counting vulnerabilities. They […] The post Skyhawk Security mentioned in the 2026 Gartner® Agentic Security: Preem
Building the Trust Layer with NVIDIA’s Open Agent Safety Platform
Forescout supports the NVIDIA Open Agent Safety Platform, bringing out-of-band, in-silicon monitoring to AI agents in critical environments. The post Building the Trust Layer with NVIDIA’s Open Agent Safety Platform appeared first on Forescout.
The Complete Guide to XDR Alert Triage in 2026
Security operations centers are facing a volume problem. Every firewall, endpoint agent, cloud service, identity provider, and email gateway generates alerts. Many of them are low value, duplicated, or false positives. Analysts spend hours sorting through noise while real attacks move quietly across the environment. At the same time, attackers are moving faster. They use The post The Complete Guide to XDR Alert Triage in 2026 appeared first on Seceon Inc.
Tuskira Named in the 2026 Gartner® Research Note, Agentic Security: Preemptive Exposure Management
Tuskira has been named in the 2026 Gartner research note, Agentic Security: Preemptive Exposure Management Demands AI-Driven Validation and Autonomous Interdiction, published 28 September 2026.
Critical Cisco Catalyst SD-WAN Manager API authentication bypass exploited in the wild (CVE-2026-76504)
OverviewOn September 30, 2026, Cisco published a security advisory for CVE-2026-76504, a critical API authentication bypass vulnerability affecting Cisco Catalyst SD-WAN Manager. The vulnerability has a CVSSv3.1 score of 9.8 and results from improper handling of URL encoding (CWE-177). An unauthenticated, remote attacker can send a crafted HTTP request that bypasses an authentication rule for a specific API endpoint, gaining access to the API with the privileges of the admin user.According to Ci
Tuskira Named in the 2026 Gartner® Emerging Tech Impact Radar: CSP Infrastructure and Operations
Tuskira has been named in the 2026 Gartner Emerging Tech Impact Radar: CSP Infrastructure and Operations, published 22 September 2026. Why interoperability is now the entry fee for any security tool in a distributed estate.
Higher education is under siege, and fragmented security is making it harder to respond
Higher education faces a difficult security equation. Universities hold large volumes of sensitive student, financial, health, and research data while supporting open networks, distributed users, legacy infrastructure, and increasingly complex cloud environments. Attackers have taken notice, and the pressure on security teams continues to grow.In Q2 2025, universities faced an average of 4,388 cyberattacks per organization per week, up 24% from the same period in 2024. Nine in ten universities r
Best Cross-Platform EDR Tools Compared for 2026
Best Cross-Platform EDR Tools Compared for 2026: Choosing EDR for Windows, macOS, and Linux Quick answer The best cross-platform EDR platforms provide consistent endpoint detection and response across Windows, macOS, and Linux. That means the same depth of telemetry, behavioral detection, and automated response on every operating system, managed from one console. When comparing tools, The post Best Cross-Platform EDR Tools Compared for 2026 appeared first on Seceon Inc.
PQC in Manufacturing: 11 Must-Ask Questions Before You Upgrade
Encryption risk in manufacturing is real. Here are the questions about PQC you need to ask with guidance on how to limit your quantum risk. The post PQC in Manufacturing: 11 Must-Ask Questions Before You Upgrade appeared first on Forescout.
Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS
Horizon3 researchers used Anthropic’s Mythos to uncover a chain of cryptographic weaknesses in Rejetto HFS, recover a predictable signing key, forge an admin session, and achieve remote code execution.
Brevo Supply Chain Attack: How One API Key Hit 100,000+ Sites
Brevo’s scripts run on more than 100,000 websites. On September 14, 2026, one Cloudflare API key, stored in Brevo’s source code, let an attacker turn […] The post Brevo Supply Chain Attack: How One API Key Hit 100,000+ Sites appeared first on Reflectiz.
Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point
On September 22, Boston Scientific published the final summary of CrowdStrike’s investigation into the August 25 cyberattack that... The post Inside the IT-OT Dependency Problem – Boston Scientific’s Production Halt, Berlin’s Rhysida Leak, and the Developer Workstation as an Entry Point appeared first on Industrial Cyber.
How to Turn an LLM into a Low-Latency Classifier | Averlon | Averlon
Use any open LLM as a fast classifier with no fine-tuning: one token gives every class probability and a confidence score. Benchmarked on cybersecurity routing.
One Packet, One Crash: What the TDengine Zero-Day Means for OT and IoT Environments
Introduction Every so often a vulnerability disclosure isn’t remarkable for its sophistication it’s remarkable for how ordinary it is. That’s the case with CVE-2026-42542, a newly disclosed flaw in TDengine, the open source time-series database used across manufacturing, energy, automotive, and IoT environments to store sensor and telemetry data. Researchers at Ridge Security put [...] The post One Packet, One Crash: What the TDengine Zero-Day Means for OT and IoT Environments appeared first on
Skyhawk Security Named in 2026 Gartner® Emerging Tech Impact Radar: CSP Infrastructure and Operations report
Skyhawk Security is proud to be named a Sample Vendor for Intelligent Simulation in Gartner Emerging Tech Impact Radar: CSP Infrastructure and Operations, published September 22, 2026. In our opinion it is the only security-focused company on that vendor list, and we believe that says something important about where cloud defense is heading. In the […] The post Skyhawk Security Named in 2026 Gartner® Emerging Tech Impact Radar: CSP Infrastructure and Operations report appeared first on Sky
Where to start: The maturity path from static scoring to prediction
Where to start: The maturity path from static scoring to prediction The idea of a local predictive model can be daunting, particularly if you’re still at the stage of patching by pivoting off KEV or CVSS.
Vulnerability Remediation Timelines for 12 Security Frameworks
When a critical vulnerability lands, one of the first questions asked is how long you have to fix it. The truth is, there’s no one answer. Your auditors may have one expectation, customer contracts may have another, and regulators can impose different requirements depending on yo
NSFOCUS Monthly APT Insights – July 2026
Regional APT Threat Situation In July 2026, the global threat hunting system of the FUYING Lab detected a total of 21 APT attack activities. These activities were primarily concentrated in regions including East Asia, Eastern Europe, Middle East, South Asia, Southeast Asia, and South America as shown in the figure below. Regarding the activity levels […] The post NSFOCUS Monthly APT Insights – July 2026 appeared first on NSFOCUS.
Copy, Paste, Compromised: How ClickFix Attacks Work and How CrowdStrike Stops Them
The Top CISO Stories from Around the Web: September 2026
As deepfake voice scams and rogue autonomous agents reshape the threat landscape, today’s CISOs are stepping onto the front lines of a high-stakes AI revolution. Navigating this shift requires security leaders to evolve into key C-suite strategists. In this month’s roundup, we explore how CISOs are adapting to these emerging risks to ensure enterprise resilience and drive business growth.
Strobes joins OpenAI's Daybreak program
OpenAI gates its cyber models behind an application, identity checks, and workspace scoping. Strobes is now verified for Daybreak.
NetScaler admins told to patch critical zero-days in ADC and Gateway now
Citrix NetScaler ADC and NetScaler Gateway users should take their systems offline and patch them immediately, they were told over the weekend, as news emerged of two critical unauthenticated remote code execution zero-day vulnerabilities in the products under active attack. “Monday will be too late,” watchTowr CEO Benjamin Harris wrote in a LinkedIn post on Sunday. Citrix subsequently confirmed the two remotely exploitable vulnerabilities were under attack, and released fixes for both. Affected
The 10 Most Secure Browsers in 2026
The most secure browser in 2026 is Google Chrome, on the criterion that matters most: it ships security patches faster than anything else and installs […] The post The 10 Most Secure Browsers in 2026 appeared first on Reflectiz.
Citrix NetScaler Zero-Day RCE FAQ: CVE-2026-88771 and CVE-2026-88772
CVE-2026-88771 and CVE-2026-88772 are Citrix NetScaler remote code execution zero-days, exploited in the wild and fixed in CTX697096. What is affected, how to fix it, how to check for compromise, and how watchTowr Rapid Reaction flagged exposure before the CVEs existed.
Australia didn’t detect the breach. It was told about it.
On June 18, 2026, an OpenAI agent doing what it was told, looking up statistics about Australia, decided the fastest route to the answer ran through a private government statistics portal holding Medicare data. So it went in. Nobody in Australia knew. OpenAI itself didn’t know until August, when a review of misaligned model activity […] The post Australia didn’t detect the breach. It was told about it. appeared first on Skyhawk Security.
XGBoost Summer Research Roundup
XGBoost Summer Research Roundup
Siemba Partner Program: For Global Partner Program for MSSPs & SIs
September 2026 · Siemba News
Siemba Recognized in Three 2026 Gartner® Hype Cycle™ Reports for a Third Straight Year
September 2026 · Siemba News
Siemba MCP Brings Offensive Security Testing into Your AI Assistant
September 2026 · Siemba News
The Asymmetry Problem
This blog article is the second blog in a two-part series on the 2026 AI platform security incidents, and what they actually teach network defenders. Why the most capable AI models refused to help defend against the attack — and what that tells us about AI-era network security Here is a detail from Hugging Face’s [...] The post The Asymmetry Problem appeared first on RedSeal.