What Is a Security Context Graph? | Tuskira
Learn how a security data fabric connects assets, identities, vulnerabilities, controls, and detections to model reachability, breach paths, and real security risk.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
734 matching stories — in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Emerging Threat: (CVE-2026-34265) SAP NetWeaver ABAP Memory Corruption via DIAG Protocol Parsing
A memory corruption flaw in SAP NetWeaver Application Server ABAP lets an unauthenticated attacker crash the system or disclose sensitive system information through crafted DIAG protocol traffic.
Rapid7 Analysis: Microsoft SharePoint JWT Token Authentication Bypass (CVE-2026-55040)
OverviewOn July 14, 2026, Rapid7 and Microsoft disclosed CVE-2026-55040, an authentication bypass vulnerability affecting Microsoft SharePoint. Today we are publishing a technical analysis of the vulnerability along with an accompanying proof-of-concept (PoC) script.Figure 1: The Rapid7 Labs PoC for CVE-2026-55040.⠀A remote unauthenticated attacker can leverage CVE-2026-55040 to bypass authentication on a vulnerable SharePoint server, and perform operations as a SharePoint site user or administr
CVE-2026-63520: Microsoft SharePoint Remote Code Execution (FIXED)
OverviewRapid7 Labs conducted a zero-day research project against Microsoft SharePoint, resulting in the discovery of two new vulnerabilities that, when chained together, achieve unauthenticated remote code execution (RCE) against a vulnerable SharePoint server. Today, both Rapid7 and Microsoft are disclosing the second vulnerability in this chain, the RCE vulnerability CVE-2026-63520. The first vulnerability in the chain, CVE-2026-55040, was disclosed by Rapid7 and Microsoft last month.Our full
7 Things Every Architect Should Know About Universal ZTNA
On-prem users, legacy and OT systems, and unmanaged devices continue to operate with weak or absent trust rules. Here’s why you need UZTNA. The post 7 Things Every Architect Should Know About Universal ZTNA appeared first on Forescout.
7 Things Every Architect Should Know About Universal ZTNA
On-prem users, legacy and OT systems, and unmanaged devices continue to operate with weak or absent trust rules. Here’s why you need UZTNA. The post 7 Things Every Architect Should Know About Universal ZTNA appeared first on Forescout.
New Blog Post
New Blog Post New Patent: Further Advancing CYBRAL’s Transformation into an AI-Native Data Security Platform Posted by dinagawdat, 2 MIAMI, Florida, August 11, 2026 — (BUSINESS WIRE) — CYBRAL Inc. today announced the issuance of a U.S. patent for its award-winning CYBRAL GUARD® platform, marking a major milestone in the company’s transformation into a truly AI-driven, pre-emptive cybersecurity platform. Three additional patents are currently pending. CYBRAL GUARD’s newly issued U.S. utility...
New Patent: Further Advancing CYBRAL’s Transformation into an AI-Native Data Security Platform
MIAMI, Florida, August 11, 2026 — (BUSINESS WIRE) — CYBRAL Inc. today announced the issuance of a U.S. patent for its award-winning CYBRAL GUARD® platform, marking a major milestone in the company’s transformation into a truly AI-driven, pre-emptive cybersecurity platform. Three additional patents are currently pending. CYBRAL GUARD’s newly issued U.S. utility patent describes an automated, AI-driven system for continuously discovering, classifying, monitoring, labelling, enriching, and...
NSFOCUS Receives the Frost & Sullivan 2026 Global Anti-DDoS Competitive Strategy Leadership Award, Driving the Next Evolution of Intelligent DDoS Protection
SANTA CLARA, Calif., August 11, 2026 – NSFOCUS has been honored with the Frost & Sullivan 2026 Global Anti-DDoS Competitive Strategy Leadership Award, recognizing the company’s forward-looking market strategy, sustained technological innovation, and long-term commitment to delivering customer value. As one of the world’s most respected market research and consulting organizations, Frost & Sullivan conducts […] The post NSFOCUS Receives the Frost & Sullivan 2026 Global A
How to run an agentic pentesting POC
A 10-day testing playbook to evaluate agentic pentesting vendors: what to test each day, the red flags to watch for, and a scorecard that works with any vendor.
Skyhawk Security Named a Sample Vendor for Intelligent Simulation in the Gartner® Hype Cycle™ for AI in Supply Chain
Skyhawk Security is listed as a Sample Vendor in the Intelligent Simulation profile of the *Gartner Hype Cycle for AI in Supply Chain. Here is the thing about modern supply chains that I think still gets underweighted in security conversations: they are cloud estates now. The WMS, the TMS, the planning platform, the supplier portals, […] The post Skyhawk Security Named a Sample Vendor for Intelligent Simulation in the Gartner® Hype Cycle™ for AI in Supply Chain appeared first on Skyhawk Se
Empirical Foundation: The Next Frontier Of Cyber Defense Modelling
Over 100 vendors trust our models today. Open almost any exposure-management platform and EPSS is already inside it. Some examples include: Microsoft (Defender, plus GitHub Dependabot and the GitHub Advisory Database), Amazon (AWS Inspector), Alphabet/Google (Mandiant, and Wiz), Cisco, ServiceNow, IBM (Concert), Palo Alto Networks (Prisma Cloud and Xpanse), Fortinet, Datadog, Crowdstrike, Elastic, Tanium, SentinelOne, Snyk, Tenable, Qualys, Armis, Axonius, Veracode, Rapid7, Docker, Orca, Aqua Se
Skyhawk Security Named a Sample Vendor for Intelligent Simulation in the Gartner® Hype Cycle for Emerging Technologies, 2026
Skyhawk Security is listed as a Sample Vendor in the Intelligent Simulation profile of the Gartner Hype Cycle for Emerging Technologies, 2026. The Category Is the Story Skyhawk is a cloud security company. We could reasonably have expected to appear on a security Hype Cycle, next to other security vendors, in a category defined by […] The post Skyhawk Security Named a Sample Vendor for Intelligent Simulation in the Gartner® Hype Cycle for Emerging Technologies, 2026 appeared first on Skyha
Skyhawk Security Named a Sample Vendor in Eight 2026 Gartner® Hype Cycle™ Reports
In Skyhawk’s view, the recognition reflects growing role of intelligent simulations across enterprise and industrial environments Skyhawk Security, a pioneer in AI-based red team cloud security, has been named a Sample Vendor for Intelligent Simulation in eight 2026 Gartner® Hype Cycle™ reports. Skyhawk believes this recognition underscores a cross-industry shift from static security playbooks to […] The post Skyhawk Security Named a Sample Vendor in Eight 2026 Gartner® Hype Cycle™ Reports
One Breach, Three Controls: What the N-central Attack Reveals About Integrated Security
This piece breaks down the three control gaps behind the N-central attack: an exposed console, no zero-trust access, and no egress inspection. It closes with ten concrete controls MSPs can put in place before the next incident.
IBM Report 2026: The $227K Supply-Chain Penalty Starts on Your Website
TL;DR IBM’s 2026 Cost of a Data Breach Report puts the global average breach cost at a record $4.99 million (up 12%); the US average […] The post IBM Report 2026: The $227K Supply-Chain Penalty Starts on Your Website appeared first on Reflectiz.
Emerging Threat: (CVE-2026-58048) cPanel & WHM Database Privilege Escalation via Database Rename
A privilege escalation flaw in cPanel & WHM's database management lets any authenticated hosting account execute database commands with full administrative privileges, exposing every database on the server.
Tuskira Named in the 2026 Gartner® Emerging Tech: AI Vendor Race — Differentiate Agentic AI Reasoning With Cost-Efficient Deployment
Tuskira has been named in the 2026 Gartner Emerging Tech report on agentic AI reasoning and cost-efficient deployment. Our view on why reasoning architecture matters for enterprise security.
Tuskira Named in the 2026 Gartner® Emerging Tech: AI Vendor Race — Tech Innovators in AI Agent Reasoning
Tuskira has been named in the 2026 Gartner Emerging Tech: AI Vendor Race — Tech Innovators in AI Agent Reasoning report. Our view on why architecture decides what AI agents can safely do.
Rapid7 Analysis: Unauthenticated Remote Code Execution in JetBrains TeamCity (CVE-2026-63077)
OverviewOn July 27, 2026, JetBrains published a security advisory for CVE-2026-63077, a critical unsafe deserialization vulnerability affecting JetBrains TeamCity. An attacker who can reach a TeamCity server over HTTP or HTTPS can exploit the agent polling protocol without credentials and execute operating system commands with the privileges of the TeamCity server process.JetBrains reported no known active exploitation when it disclosed the vulnerability. However, on August 5, 2026, CISA added C
Meeting Canada’s Bill C-8 Cybersecurity Requirements with NodeZero®
Canada's Bill C-8 introduces new cybersecurity expectations for critical infrastructure. Learn how NodeZero® helps organizations validate security continuously, prove remediation, and build evidence-based cyber resilience.
NSFOCUS LAS: Comprehensive Log Management for Security Visibility and Compliance
The Log Management Challenge Most enterprises accumulate log sources the same way they accumulate infrastructure: one device at a time, each generating data in its own proprietary format. The result is logs scattered across security appliances, network devices, servers, databases, middleware, applications, and cloud workloads, with no unified view and unknown device status. Any issue […] The post NSFOCUS LAS: Comprehensive Log Management for Security Visibility and Compliance appeared firs
CrowdStrike Threat Hunts for Shell Command Obfuscation on VMware ESX
Payroll Pirates: Strange New Tides in Business Email Compromise
Key Takeaways Arctic Wolf is tracking an active, widespread email-driven phishing campaign that uses adversary-in-the-middle (AiTM) techniques to compromise Microsoft 365 accounts, identify personnel involved in financial workflows, and collect related email. The campaign uses residential proxies to disguise malicious sign-ins as ordinary consumer traffic. Automated activity maintains compromised sessions at approximately eight-hour intervals. Although ... Payroll Pirates: Strange New Tides in B
What a Web Application Vulnerability Scan Actually Finds: A 2026 Guide
A web application vulnerability scan catches some OWASP Top 10:2025 categories and misses others. See what black-box and credentialed scans each find. The post What a Web Application Vulnerability Scan Actually Finds: A 2026 Guide first appeared on SafeHill.
The Hidden Economics of Building an Agentic SOC: Tokens, Talent, and Scale
Active Supply Chain Attack on npm Packages (keyv, cacheable): Immediate Mitigation Required
Threat Summary A sophisticated supply chain attack has actively compromised multiple npm packages, including keyv, cacheable, cacheable-request, flat-cache, file-entry-cache, and possible related adapters. Attackers took control of a popular maintainer’s npm account on or before August 4, 2026, and began publishing trojanized package versions containing a preinstall hook (setup.mjs) as a loader. The loader downloads ... Active Supply Chain Attack on npm Packages (keyv, cacheable): Immediate Miti
Expanding AI Benchmarks in Cybersecurity Beyond Vulnerability Discovery
NSFOCUS Recognized in ADS Tools Report for Agentic Development Security Capabilities
SANTA CLARA, Calif., August 6, 2026 – Recently, the global research and advisory firm Forrester has released its first report on Agentic Development Security (ADS) tools, “The Agentic Development Security Tools Landscape, Q2 2026[1]”. NSFOCUS has been recognized among representative vendors in the report, marking international acknowledgment of the company’s technical capabilities in AI supply chain […] The post NSFOCUS Recognized in ADS Tools Report for Agentic Development Security C
CVE-2026-18556 and CVE-2026-18577 | N-able N-central Authentication Bypass Vulnerabilities
CVE-2026-18556 and CVE-2026-18577 are authentication bypass vulnerabilities affecting N-able N-central. NodeZero® Rapid Response safely validates exposure and verifies remediation.
OT Security Analysis: Exposed Devices Attacked in US Water Systems
Water systems in 12 U.S. states experienced cyber attacks on PLCs. Here is technical OT security analysis with mitigation guidance. The post OT Security Analysis: Exposed Devices Attacked in US Water Systems appeared first on Forescout.
PCI Council Revises FAQ 1331: The N/A Path for 6.4.3 and 11.6.1 Just Got Narrower
On August 4, 2026, the PCI Security Standards Council revised FAQ 1331. QSA agreement alone no longer justifies marking 6.4.3 and 11.6.1 not applicable in a Report on Compliance. The post PCI Council Revises FAQ 1331: The N/A Path for 6.4.3 and 11.6.1 Just Got Narrower appeared first on Reflectiz.
Horizon3 Accelerates Partner-Led Growth with $20 Million Investment
Horizon3 is investing $20 million to accelerate partner-led growth through expanded channel leadership, enablement, strategic alliances, and go-to-market programs that help partners deliver proactive security at scale.
How to Implement Continuous Agentic Pentesting for the Web
Continuous agentic pentesting is the practice of using autonomous AI agents to attack, validate, and report on your web applications on an ongoing basis, every […] The post How to Implement Continuous Agentic Pentesting for the Web appeared first on Reflectiz.
Tenable's Chris Day on MSNOW
In response to the cyberattack on US Water Systems, Tenable Public Sector CTO joins MSNOW to discuss what we know and practical strategies for modern security teams, demonstrating how proactive exposure management enables organizations to pinpoint high-risk vulnerabilities and block potential attack paths in real time.
Tenable Launches Industry’s First Open-Source AI Agent Exchange to Advance Collective Cyber Innovation and Defense
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today launched the CyberAgents Exchange, a new open-source AI exchange created to foster industry collaboration and improve collective cyber defense. The CyberAgents Exchange, powered by Tenable, is the only purpose-built, cybersecurity-native registry for AI agents, skills, MCP servers and multi-agent playbooks in the current market. Security teams are increasingly turning to AI to scale security operations and manage
Tenable Advances Exposure Management with Coverage Across Every Major AI Platform and Developer Tool
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced enhanced AI security capabilities within the Tenable One Exposure Management Platform. Tenable One AI Exposure now delivers expanded platform coverage with support for Google Gemini, extending its coverage across major LLMs: Google Gemini, Anthropic Claude, OpenAI ChatGPT Enterprise and Microsoft Copilot. The release also extends discovery to all major Model Context Protocol (MCP) deployments and AI-native I
Secure Agent Harness Execution: Preventing Escape
Keyv and Cacheable Supply Chain Attack Explained
An attacker hijacked the keyv and cacheable npm packages on August 4, 2026, shipping a credential stealer with valid provenance. Here's how to respond.
August 2026 CVE of the Month: The 7-Zip Bug Every Scorecard Says to Ignore (CVE-2026-58052)
In January 2023, this column's first life at Kenna featured CVE-2022-44698 , a Windows SmartScreen Mark-of-the-Web bypass that attackers were happily using while the scoring systems shrugged. Three and a half years later, here we are again. This month's pick scores 3.3 under CVSS v3.1, the kind of number that never makes a patch queue, and our sensors have recorded it being exploited in the wild multiple times in the past month.