Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
730 matching stories — in Threat Exposure Management (CTEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The next phase of cybersecurity will not be defined by whether artificial intelligence can find vulnerabilities. That threshold has already been crossed. The defining question is whether defenders can move from knowing about exposures to neutralizing them before attackers can convert them into working paths of compromise. Frontier models can discover more weaknesses, reason across […] The post AI Exploits Faster than We Can Patch appeared first on Skyhawk Security.
Most enterprises believe their internet perimeter is a uniform security problem. In reality, the risk is sharply concentrated: a small slice of unknown, unmanaged assets carries nearly all the danger, while the vast majority of the surface is well-protected. SixMap assessed 100 enterprise organizations and found that 99.63% of service exposures carry zero known CVEs […] The post SixMap Research: Enterprise Attack Surface Report 2026 appeared first on SixMap | Bridging the Reconnaissance Ga
XM Cyber Researcher Hillel Pinto uncovered CVE-2025-34352, a critical vulnerability in the JumpCloud Remote Assist for Windows agent (versions prior to 0.317.0). The flaw allows any low-privileged local user to exploit insecure file operations—arbitrary file write/delete—performed by the agent running as NT AUTHORITYSYSTEM within the user’s temporary directory. The post Trust No One: Automating macOS Privilege Escalation at Scale appeared first on XM Cyber.
New capabilities enable organizations to extend exposure management insights beyond security teams while maintaining governance and accelerating decision-making MENLO PARK, CA – [June 24, 2026] – RedSeal, the leader in exposure management for hybrid enterprise environments, today announced new Attribute-Based Access Control (ABAC) and AI Guidance capabilities within the RedSeal One platform. These new capabilities enable [...] The post RedSeal Expands Secure Access to Exposure Intelligence with
Stop patching by severity score. See how to prioritize vulnerability remediation by what's reachable, exploited, and costly, so you fix what matters first. The post Vulnerability Prioritization: Why Basic Scoring Fails and a Better Way to Triage first appeared on SafeHill.
The Shift That Changed Cybersecurity Conversations One of the most requested presentations I have ever given is now nine years old, and it had nothing The post Getting Ahead of It: From “Are We Compliant?” to “Are We Exposed?” appeared first on Gambit Cyber.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced it is working with OpenAI as part of the OpenAI Daybreak Cyber Partner Program. The collaboration brings together OpenAI's frontier AI capabilities, including GPT-5.5, and Tenable's leadership in exposure management to help organizations better understand cyber risk, prioritize action and stay ahead of attackers through Tenable product and service workflows.The announcement comes as AI is reshaping the threa
One of the most common questions security and risk leaders ask today is: “What are the top risks in my enterprise?” Despite having access to more security data than ever before, many organizations still struggle to answer this question with confidence. Every day, enterprises generate information from vulnerability assessments, compliance reviews, audits, threat intelligence feeds, […] The post Ask Quantara: What Are the Top Risks in My Enterprise and How Can AI Help Mitigate Th
Annual penetration tests provide a snapshot in time. Learn why modern applications need continuous security testing to keep pace with change. The post Why Annual Penetration Testing No Longer Matches Modern Application Risk appeared first on Outpost24.
There’s a simple principle when it comes to building an AI enabled cyber defense program: buy the platform for the hard, durable problems, then build your edge on top of it. This post is about how to actually do the building. We call it BYOAI, or bring your own AI. Talk to enoug
In the previous post we walked through WasmForge, our Go-to-WebAssembly loader that takes existing signatured Go tools and ships them as opsec-safe binaries. This approach doesn’t just apply to Go, however, as there are many languages that can compile to WebAssembly. Another language of interest to us, especially regarding legacy tools which have been over-signatured, […] The post GhostPack Necromancy: Reforging C# Tools with WasmForge appeared first on Praetorian.
Mythos-class models have accelerated vulnerability discovery by an order of magnitude. Averlon partners with Anthropic's Cyber Verification Program to tackle the part that hasn't kept pace: getting from finding to fix.
CopyFail (CVE-2026-31431) and DirtyFrag (CVE-2026-43284 / CVE-2026-43500) are actively exploited Linux kernel privilege escalation vulnerabilities affecting every major distribution since 2017. Learn how they escape an unprivileged Kubernetes pod to the underlying node, what active exploitation looks like, and how to patch or mitigate now.
More than 73,000 FortiGate VPN devices have reportedly been linked to credentials exposed in the recently disclosed FortiBleed dataset. Security teams are understandably focused on the leaked credentials. They should be equally focused on what happens next. A compromised VPN credential doesn’t create a breach on its own. A breach happens when an attacker uses [...] The post Active FortiBleed Campaign Underway: Can Attackers Reach Your Critical Assets? appeared first on RedSeal.
Overview Earlier this year, a team at Praetorian was building Constantine, our automated 0-day discovery engine. I wanted to find techniques worth folding into it, so on the side I started poking at the FreeBSD kernel with Claude Code, running on Opus 4.6, which was the latest Opus model at the time. A few days […] The post FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2) appeared first on Praetorian.
We spend an enormous amount of energy finding and ranking exposures, and almost none confirming whether any of it is real or whether our fixes actually worked. It happens because validation is the hardest and most expensive part of the job. You can automate discovery and prioriti
The "vulnerability AI race" is vendor theater. What AI actually changes for exposure management, and why validation through exploitation beats discovery speed.
TL;DR: Sulla is an open source SMB secret scanner for discovering credentials exposed in SMB shares across enterprise networks. It leverages our recently released Titus Go library, resulting in an easy-to-use, adaptable, and highly performant standalone binary. Every network penetration tester knows the struggle: reviewing network shares for sensitive material is a painful must-do. With […] The post Sharing is Caring: SMB Secret Scanning with Sulla appeared first on Praetorian.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced extended continuous security control and validation capabilities within the Tenable One Exposure Management Platform. With security control visibility and evidence-based, contextualized insights, Tenable One confirms which cyber exposures are truly accessible and exploitable for more precise prioritization and overall risk reduction.Exploitability is highly dependent on the specifics of an organization's env
Attackers have evolved, but most vulnerability management programs are stuck in the past.  AI has drastically shortened the window between vulnerability disclosure, exploit development, and real-world weaponization. What used to take days or weeks now happens at machine speed. Despite this acceleration, many security teams are still bound to an outdated, reactive workflow:   Scan → Score → Ticket → Chase  That m
The vulnerability management category has shifted. For three consecutive years, Qualys won SC Awards Europe Best Vulnerability Management Solution. This year, the judges acknowledged... The post The VM Category Shift: XM Cyber Wins SC Awards Europe 2026 Best Vulnerability Management Solution appeared first on XM Cyber.
We're excited to announce that Onyxia Cyber has been accepted into Anthropic's Cyber Verification Program (CVP) — a designation reserved for security organizations using advanced AI capabilities strictly for defensive purposes.
Traditional phishing harvests credentials from the user. ClickFix coerces the user into opening the door themselves. Instead of stealing access, the attacker manipulates the user into creating it – launching the payload from the user’s machine, with the user’s own permissions. It’s Monday morning. You’re checking your inbox before the 10 a.m. standup. An email […] The post ClickFix: Why The Newest Phishing Technique Doesn’t Need Your Password first appeared on SafeHill.
Olivia Brännlund is recognized by The Hacker News at the 2026 Cybersecurity Stars Awards. STOCKHOLM, Sweden – June 15, 2026 – Outpost24, a leading global provider of cybersecurity solutions, today announced its Chief Information Security Officer, Olivia Brännlund, has been named Cybersecurity Woman of the Year in the 2026 Cybersecurity Stars Awards from The Hacker […] The post Outpost24 CISO Olivia Brännlund Named 2026 Cybersecurity Woman of the Year appeared first on Outpost24
It’s an exciting day at Empirical: we’ve released V5 of EPSS, the scoring system that our team helped create and which was recently recommended by Anthropic to help teams prepare for an AI-accelerated tsunami of vulnerabilities.
The Cybersecurity and Infrastructure Security Agency (CISA) has issued Binding Operational Directive (BOD) 26-04, establishing a new risk-based framework for how U.S. federal agencies prioritize vulnerability remediation. The directive supersedes earlier mandates, including BOD 19-02 and BOD 22-01, and introduces a more targeted model for focusing remediation efforts on vulnerabilities that are most likely to […] The post CISA’s New Directive Signals the End of Severity-Based Vulnerability
SafeHill opens a Tampa Bay research office led by CRO Hector Monsegur, scaling AI-driven threat exposure management in Florida's CyberBay. The post SafeHill to Open Research Office in Tampa Bay to Power Next Phase of AI-Driven Security Research first appeared on SafeHill.
In the modern enterprise, the perimeter hasn’t just shifted, it has dissolved. As organizations accelerate their digital transformation, traditional boundaries have been replaced by... The post Identity Is the Highway. Here’s How Attackers Use It. appeared first on XM Cyber.
Cloud security used to be framed as a posture problem: find the critical vulnerabilities, fix the most severe misconfigurations, and reduce the visible attack surface. That model is no longer enough. The defining change is not that artificial intelligence has created a completely new class of attacks. The change is that AI helps attackers move faster, connect more weak posture […] The post AI Has Turned Cloud Risk Into a Race and Human Defenders are Losing appeared first on Skyhawk Securit
There is a word that appears throughout Gartner® latest research on AI-driven cybersecurity that every cloud security leader should take seriously: weaponized. Not “advanced.” Not “sophisticated.” Weaponized. Gartner® June 2026 report, Build Preemptive Security to Avert Weaponized AI Risks by Emerging Tech and Trends Security Research Team. We feel it opens with a statement that […] The post Weaponized Threats Require Preemptive Security appeared first on Skyhawk Se
Yesterday, CISA Acting Director Nick Andersen stood up at a Washington, D.C. event and said something that should stop every vulnerability management team in their tracks: “We’re really asking people to take more of a focus on risk associated with each vulnerability. Is it with an asset that is internet-exposed? Does it align to a [...] The post CISA Just Described Your Monday Morning Problem — And We Already Built the Answer appeared first on RedSeal.
Originally published in Cyber Defense Magazine’s June edition page 190. Cybersecurity has entered a new acceleration cycle, and models like Anthropic’s Mythos are warning shots for defenders. AI is shortening the path from vulnerability discovery to exploitability, compressing a timeline that security teams were already struggling to manage. In enterprise environments, the natural response is […] The post The Speed Trap in Agentic Cybersecurity appeared first on Tonic Security.
For most of the last decade, the question we have spent our research time on at Empirical Security is some version of the same one. Given a vulnerability, what is the probability it will be exploited? Given an organization, how much risk does it carry? Given a remediation strategy, how much better does it perform than the alternatives? These are measurement questions. They have answers, even if the answers are imperfect.
Key takeaways Frontier AI models are accelerating vulnerability discovery faster than patches can keep up. Security teams need a different model. Continuous threat exposure management (CTEM) shifts the goal from patch counts to risk reduction across attack paths. Compensating
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced new AI-powered cloud threat detection capabilities that extend the Tenable One Exposure Management Platform, enabling security teams to prioritize and remediate the exposures attackers are actively targeting. As part of Tenable One, Tenable One Cloud Exposure correlates runtime telemetry with deep exposure context, transforming threat investigations and empowering teams to reduce risk before attacks impact t
Strobes CEO Venu Rao shares his takeaways from Gartner Security & Risk Management Summit 2026: everyone can find vulnerabilities, almost no one has cracked fixing them.
Vulnerability validation proves which scanner findings are real, reachable, and exploitable. Why manual triage fails and how agentic validation scales.
Gartner’s AI agent reasoning report signals a shift toward domain-specialized agents. See why this matters for security operations and breach-path defense.
Michael Roytman wrote an article for O’Reilly that makes it clear: the new frontier in exposure management is knowing what’s dangerous, not remediating vulns by volume.
