Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
736 matching stories — in Data Security Posture Management (DSPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Varonis and Collibra: Improving Data Governance for Trusted AI
As organizations move faster to integrate AI, datasets are connected to models, agents, and analytics pipelines based on their metadata and lineage. But pressing questions often go unanswered: what’s sensitive, and who has access to it?
Vishag Krishnan
Vishag Krishnan bcollins Mon, 10/19/2026 - 11:21 Share this Article Opens in a new window Opens in a new window First Name Vishag Last Name Krishnan Job Title Chief Marketing Officer Company Egnyte Headshot Image Biography Vishag is Chief Marketing Officer at Egnyte, where he leads a global team responsible for strategic positioning, brand evolution, and revenue growth. With more than two decades of B2B technology experience, he has held senior leadership roles at companies including Symantec, R
Cybersecurity Awareness Month Bootcamp: Protect Highly-Sensitive Data from AI Exposure
Cybersecurity Awareness Month Bootcamp: Protect Highly-Sensitive Data from AI Exposure bcollins Mon, 10/19/2026 - 09:43 Roll out AI across your company without worrying about data exposure. Event Category Webinars Event Date Time Thu, 10/29/2026 - 09:00 Event Image Image Event URL Register Now Feature Event Off Event start date Thu, 10/29/2026 - 12:00 Event Time 9 am PT / 12 pm ET
Supply Chain Zero Days: Closing the Gap Between Publication and Detection
When trusted packages are compromised, malicious code can quickly spread throughout and beyond developer environments. See how Wiz’s supply chain pipeline identifies compromised packages at publication, helping teams detect zero-day supply chain compromises in Wiz Defend before a CVE is published
The Rise of the Shadow Man
Why digital identity may be the missing piece of AI readiness.
Vishag Krishnan
Vishag Krishnan poyadav Mon, 10/19/2026 - 05:07 Share this Article Opens in a new window Opens in a new window First Name Vishag Last Name Krishnan Job Title Chief Marketing Officer Company Egnyte Headshot Image Biography Vishag is Chief Marketing Officer at Egnyte, where he leads a global team responsible for strategic positioning, brand evolution, and revenue growth. With more than two decades of B2B technology experience, he has held senior leadership roles at companies including Symantec, Ri
Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
Wiz CIRT responded to AI-driven attacks spanning cloud, Kubernetes, CI/CD, and identity. Learn how these attacks behave and how to detect them.
Frozen Privilege: Remote Code Execution in Snowflake-Managed PostgreSQL
Varonis Threat Labs uncovered a remote code execution (RCE) vulnerability in Snowflake-managed PostgreSQL that turns an ordinary database privilege into control of the underlying server by chaining together legitimate features.
Secure Where Work Happens: Stop Paying Cloud Rates for Local AI
Let’s address the elephant in the server room: why are you still paying premium cloud-processing rates for data that doesn’t... The post Secure Where Work Happens: Stop Paying Cloud Rates for Local AI appeared first on Skyhigh Security.
What JadePuffer Reveals About Who Holds the Keys
Recovery means knowing what your accounts and agents can reach, and whether they should.
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
What if the data that was stolen wasn’t real, anyway?
What executives learned in a live breach simulation at the uOttawa-IBM Cyber Range, and why tokenization answers quantum risk and safe AI adoption.
EY Data Breach: How Customer Tax Files Leaked Through an IT Help Desk, and What It Means for Your Data
How client tax files ended up in an IT help desk at EY, what the breach is costing, why vendor vetting alone wouldn't have changed much, and the four-part framework that keeps regulated data out of places nobody counts as a data store.
EY Data Breach: How Customer Tax Files Leaked Through an IT Help Desk, and What It Means for Your Data
How client tax files ended up in an IT help desk at EY, what the breach is costing, why vendor vetting alone wouldn't have changed much, and the four-part framework that keeps regulated data out of places nobody counts as a data store.
Krybit ransomware: what you need to know
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.
CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO
James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope. The post CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO appeared first on SecurityWeek.
Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts
Threat actors are exploiting a critical security flaw in Langflow, according to an alert from Previdian. Langflow is an open-source platform that allows developers to build artificial intelligence (AI) applications and agentic workflows. In February 2025, DataStax, the parent company of Langflow, was acquired by IBM. The vulnerability in question is CVE-2026-105740 (CVSS score: 9.9), a case of
ASPM in the AI Era Part 1: Unified Visibility Across Your Stack
Integrate your existing code scanners into Wiz for a unified view of application risk across your environment.
IBM security advisory (AV26-1040)
Denmark CPR Data Breach: 8.8 Million People Affected
Key takeaways 8.8 million people were affected after unauthorized individuals abused a private company’s legitimate access to Denmark’s Central Person Register. Names, addresses, and CPR numbers were exposed, increasing the risk of phishing, social engineering, impersonation, and identity fraud. Legitimate access can become a security risk when compromised, making data minimization an important layer of defense. Sensitive data discovery helps ... Read More The post Denmark CPR Data Breach: 8.8 M
Security friction: Why simple DLP keeps data on the safe path
When the secure route is the slow one, people find another way to get their work done.Most companies have already written their AI rules. In a Zapier survey of 548 US directors, VPs and C-suite executives at companies with 500 or more employees, 91% said their organization has AI governance policies in place. Nearly four in five also said their employees actively bypass or work around those processes to get AI workflows live faster.Twenty-eight percent of the same executives told Zapier their fo
We went looking for the P in DLP
Jazz asked the Cloud Security Alliance to survey security professionals about their DLP program. The results, while shocking, are not surprising. The post We went looking for the P in DLP appeared first on Jazz.
Security vendors are racing to govern AI agents. Are they protecting the right thing?
BigID and Varonis, two of the larger companies in data security, have both shipped products in the last couple of months aimed at the same problem: AI agents getting to company data. BigID launched AgentIQ on September 21. It lets customers run their data security and compliance work from a prompt or an AI agent, […]
A New Patent from Velotix: AI That Designs the Data Model Itself
By Dr. Adi Hod, Founder & CEO, and Yossi Avni, CTO, Velotix Velotix Atlas, part ... The post A New Patent from Velotix: AI That Designs the Data Model Itself appeared first on Velotix.
Commvault security advisory (AV26-1033)
Reco Reaches 200 SaaS Integrations for AI Governance
Discover how Reco became the first SaaS security platform to reach 200 integrations, expanding visibility and governance for enterprise AI tools.
When AI Becomes the Insider Threat: Risk in SaaS Environments
Learn how AI can become an insider threat in SaaS environments, the risks it creates, warning signs to watch, and how to prevent breaches with Reco.
The 4 AI Blindspots Your Security Controls Miss
Ask a security team where AI runs in their company and you’ll usually get the approved list: the enterprise chatbot, the copilot licenses. Ask a developer and you’ll get a longer answer. If your AI inventory came from procurement records and app approvals, I’d bet it’s missing the AI most likely to leak data. Most […]
Stordata and Qohash Announce Transatlantic Partnership for Data Security in the French Market
The leading French integrator is adopting Qohash’s Canadian technology to help organizations keep control of their sensitive data, directly at the source. PARIS, October 13, 2026. Stordata, a leading French integrator in data management and security, and Qohash, a Canadian data security company, today announced a strategic partnership for the French market. Stordata is adding […]
DSPM for SaaS Applications: 2026 Guide
Key Takeaways DSPM for SaaS protects data within applications, not the perimeters around them. Robust DSPM should discover shadow data assets and deliver context-aware classification. Findings should feed the existing security stack. Top use cases include data and AI asset discovery, ROT minimization, access governance, safe AI adoption, and compliance. Data left the typical on-prem […] The post DSPM for SaaS Applications: 2026 Guide appeared first on Securiti.
XWorm Reborn: From infostealer to surveillance platform
In September 2024, Netskope Threat Labs first reported on XWorm and its infection chain. The following year, in July 2025, we reported version 6.0 and its more advanced features. As we continued tracking the malware over the past year, we identified four distinct XWorm versions operating concurrently in the wild. Detection volume remains elevated, with […]
ARTEX bank breaches: AI attack agents put every data copy at risk
When AI makes breaking in cheap, what matters is how much data sits behind each door.ARTEX is an open-source AI agent built for penetration testing, and anyone can download it. Between late September and early October, one attacker pointed it at South Korean banks and left with customer data, according to CrowdStrike.Shinhan Bank and Yegaram Savings Bank reported breaches affecting 25,000 and 40,000 people, Infosecurity Magazine reported, citing The Straits Times. CrowdStrike assessed the attack
Data Loss Prevention (DLP) Software Tools: Top Vendors Compared in 2026
Key Takeaways: Data loss prevention tools decide what happens when sensitive data moves. In 2026, the channels they watch include every AI assistant an employee can paste a document into, alongside email, SaaS sharing, and cloud storage. Most DLP platforms still recognize sensitive content through patterns, keywords, and fingerprints. That approach catches credit card and ... The post Data Loss Prevention (DLP) Software Tools: Top Vendors Compared in 2026 appeared first on Concentric AI.
RAG Poisoning: How It Works & How to Defend Against It
Explore RAG poisoning attacks, their impact on enterprise AI, common techniques, and strategies to prevent malicious data from influencing AI models.
AI agent access: Why identity alone can't make data security complete
An agent's identity tells you who asked for the file. Only the data can tell you what left with it.Almost every organization now has a written policy for what its AI agents can touch. In Delinea's 2026 Identity Security Report, covered by Help Net Security, 99.7% of IT and security leaders said they had a formal policy governing the data AI tools and agents could access. Most of them also reported or suspected that an AI tool or agent had reached sensitive data beyond what its task required
Velotix Joins MIT Startup Exchange
Velotix is proud to announce that it has joined MIT Startup Exchange (MIT STEX), the ... The post Velotix Joins MIT Startup Exchange appeared first on Velotix.
The EU Cyber Resilience Act (CRA): A Complete Guide for Compliance
Introduction It’s not enough to have the most innovative products in the modern corporate environment without the assurance of foolproof cybersecurity resilience. Users and corporations are more wary than ever before about who they give access to their data. Any device or software that cannot provide sufficient cybersecurity assurances will fail to attract customers. The […] The post The EU Cyber Resilience Act (CRA): A Complete Guide for Compliance appeared first on Securiti.
Anthropic’s approach to stopping GenAI attacks
How Anthropic's Safeguards team tells attackers from defenders when both use the same techniques, and what security teams should prepare for as AI agents take on more of the attack. The post Anthropic’s approach to stopping GenAI attacks appeared first on Jazz.
What is Access Control? Definition, Types, & Components
The moment a security incident occurs, the first question is: who had access? This is followed by what was accessed, from where it was accessed, how much was accessed and exposed, etc. As organizations migrate to cloud services and adopt AI-driven technologies, managing access controls isn’t just a best practice; it's a business imperative and […] The post What is Access Control? Definition, Types, & Components appeared first on Securiti.