Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
740 matching stories — in Data Security Posture Management (DSPM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Update – August 25, 2026 Since publication, telemetry extending back to March 5, 2026 shows the extension has been continuously delivered via Google’s CRX infrastructure across seven versions. The operator relisted within two weeks of the January 14 removal and kept shipping new builds through February, March, April, May, and June before inserting the monetization […]
An access-review tool flags an account with more privilege than its role needs: routine, filed, forgotten. That same week, a separate scan shows that the same account can reach a folder of unclassified customer PII. A third system logs that its credentials have been shared outside the owner's team. Three tools, three tickets, three owners, and nobody puts them […] The post More Tools Does Not Mean Faster or More Accurate Insights appeared first on Securiti.
Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the same CVE also affected sbx cp when copying files out of Docker Sandboxes. A malicious container or sandbox could exploit the copy process to create or overwrite files outside the destination selected by the user, […] The post CopyEscape: Taking Over Docker Hosts with docker cp appeared first on Blog.
For decades now, the enterprise has followed a predictable pattern: people make decisions, machines execute instructions, and security is built around that two-actor model. A third actor has now entered the enterprise, and it behaves differently from anything that came before.
Security teams don’t have a shortage of alerts. They have a shortage of context. When Microsoft Sentinel flags something worth investigating, the question that follows is almost always … The post BigID and Microsoft: Bringing Data Context Into Security Operations appeared first on BigID.
TL;DR: CVE-2026-64638, dubbed XSS2Shell, is a high-severity WordPress Core vulnerability that begins as a pre-authentication reflected XSS on the login screen and can be chained to PHP code execution when a logged-in administrator is successfully targeted. WordPress fixed the issue in 7.0.3 and backported the fix through maintained branches. Imperva Cloud WAF and On-Prem WAF […] The post Imperva Customers Protected Against XSS2Shell (CVE-2026-64638) in WordPress Core appeared first on Blog
Resilience operations can help address evolving challenges from AI to lack of organizational alignment.
Reverse engineering Metabase CVE-2026-72898 with AI to accelerate defense.
A worm that harvests credentials is a data loss event, and most programs won't see it.On August 4, someone compromised the GitHub account of the maintainer behind keyv, a key storage library with roughly 127 million weekly downloads. Within four hours, SecurityWeek reported, 2,212 malicious package versions had been published to the npm registry. The campaign, named ChainDrop, went on to infect more than 400 packages. Infosecurity Magazine put the combined install base at two billion downloads a
Monthly breach report · September 2026 2026 Data Breaches: Cybersecurity Incidents Explained Three of September’s five breaches exposed data that had no reason to be readable where it sat: archived patient records at a migration vendor, unencrypted personnel files on more than 3 million people, 294,000 of them deceased, and Medicaid records hidden beneath a […]
Milestone-Ready - Accelerating IND Submissions and M&A Through Governed Content skittur Mon, 08/10/2026 - 01:16 Get a Demo Header Compliance Envelopes Explained Image Image Summary Streamline regulatory submissions with better data control Link Read More Header GxP Compliance & Quality Management Image Image Summary Stay inspection-ready with secure, validated workflows Link Read More Header Egnyte & LORENZ: Better Submissions Image Image Summary Compile eCTD filings seamlessly from
The European Union Artificial Intelligence Act represents one of the most comprehensive regulations directed toward the development and implementation of AI in the world. While its intended audience is mostly providers of AI models and systems, companies (even multinational ones) deploying AI within the bounds of the EU must comply with the relevant portions. For […]
Explore the best data loss prevention platforms, including key features, pros, and cons. See what users are saying about each DLP solution.
Varonis Atlas now integrates with Claude Inference hooks, routing prompts through an AI security server for real-time allow-or-deny verdicts before inference runs. That inspection happens ahead of Claude ever seeing the prompt — the request is sent off for review and policy evaluation first. If it violates policy, it never reaches the model. Support for Inference hooks helps security teams prevent sensitive data exposure, prompt injection attempts, and other risky activity.
Varonis Threat Labs uncovered a vulnerability in Rovo, Atlassian's enterprise AI assistant. Dubbed RovoBlast, a single click on a link triggers the attacker's embedded instructions and forces Rovo to accept externally supplied parameters as trusted inputs within a user's session. No jailbreaks, no permission bypass, and no warnings or confirmation.
TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently. Imperva Cloud WAF and On-Prem WAF customers are protected against practical attack patterns described in the research. Imperva’s existing security engine already blocked malicious […] The post Imp
Key Takeaways HIPAA defines 18 identifiers that can identify an individual when associated with health or healthcare payment information, making that information Protected Health Information (PHI). All 18 identifiers must be removed under HIPAA Safe Harbor for healthcare data to qualify as de-identified under that method. The identifiers cover a broad range of data, including names, addresses, dates, phone numbers, ... Read More The post PII Dataset Download – All 18 HIPAA Identifiers appeared f
How to maintain trust in a world that’s shifting from people to systems.
For years, we’ve believed that an organization’s most powerful and important asset is its data. Today, as AI, hybrid workforces,... The post The Future of Security Starts with Data: Why Our Strategy Continues to Gain Momentum appeared first on Skyhigh Security.
Cyera Agent Guardian adds a new Claude Enterprise enforcement point to block sensitive prompts before they are processed, using Anthropic's inference hooks and Cyera’s intelligent data classification and policy engine.
Cloud and AI threat activity tracked by Wiz Research and CIRT, January through June 2026
Automating DISA STIG Compliance for Amazon Linux 2023 and Windows Server 2025, giving defense and federal teams immediate and continuous hardening validation.
For the third consecutive year, Netskope has been named a Leader in the Gartner® Magic Quadrant™ for SASE Platforms. Our execution has driven real customer outcomes and we believe that shows up in our recognition as a Leader in this year’s Magic Quadrant report. Netskope is also positioned the highest on the execution axis of […]
Starting August 11, 2026, Commvault is changing how we disclose vulnerabilities in the Frontier AI era.
More businesses are using artificial intelligence, like autonomous AI agents, to handle day-to-day tasks like scheduling meetings, updating CRMs, and generating reports. While these systems help teams save … The post AI Security Posture Management (AI-SPM) in Focus appeared first on BigID.
Executive Summary: In March 2026, drone strikes physically damaged AWS data centers in the UAE - rendering standard disaster recovery mechanisms ineffective and leaving dozens of organizations unable to access mission-critical data. For Securiti customers in the region, the combination of pre-built cross-cloud data intelligence, rapid engineering response, and compliance-governed migration meant the difference between […] The post When the Cloud Goes Dark: How Securiti and Veeam Helped Cus
Thales Builds Cryptographic Security for the Age of AI and Post-Quantum Computing prezly Tue, 08/04/2026 - 13:00 Americas United States Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 04 Aug 2026 Thales launches Luna 8, a new hardware security module (HSM) to provide future-ready, quantum resistant security to protect critical data and applications Powered by a Thales designed cryptographic processor, it delivers unparalleled performance, enhanced protection and the flex
Model Context Protocol, or MCP, is changing how artificial intelligence interacts with enterprise systems. Instead of building a separate custom integration for every data source, application, or tool, … The post MCP Security: Risks, Architecture, and Best Practices appeared first on BigID.
One platform, recognized on both fronts: the data already slipping past your perimeter, and the encryption quantum is coming for.MILWAUKEE, WIS. — August 4, 2026 — PKWARE, the data-centric security platform, today announced it has been named a finalist in two categories of Cyber Defense Magazine’s 2026 InfoSec Awards: Post Quantum Crypto and Data Security […]
The addition of Agent Intent-Based Access Control (IBAC) brings a new capability to Varonis Atlas that lets businesses connect AI agents to their enterprise data with safeguards that stop dangerous or out-of-policy behavior.
Thales Launches Imperva for AWS to Help Organizations Protect Applications and APIs prezly Mon, 08/03/2026 - 13:00 Cybersecurity Application security Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 03 Aug 2026 Imperva for AWS delivers enterprise-grade web application, API, and bot protection for AWS environmentsUsing Amazon CloudFront, AWS's fully managed content delivery network, to simplify deployment while strengthening application securityReduces operational complexi
Design of uncrewed vessels for new ASW frigates gets underway prezly Mon, 08/03/2026 - 09:00 Defence Naval Europe Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 03 Aug 2026 Each of the Royal Netherlands Navy’s new Anti-Submarine Warfare (ASW) frigates will be equipped with a 12-metre-long uncrewed surface vessel (USV). A so-called FLASH dipping sonar from Thales, which is yet to be adapted, will be installed on this USV. The Ministry of Defence today gave the go-ahead f
2026년 발간된 한 글로벌 통신사업자의 연례 데이터 침해 조사 보고서가 눈여겨볼 수치를 내놨습니다. 업무용 기기에서 AI를 일상적으로 사용하는 직원 비율이 1년 만에 15%에서 45%로 늘었다는 것인데요. 그중 67%는 회사 계정이 아닌 개인 계정으로 AI 서비스에 접속하고 있었습니다. 조직이 승인하지 않은 AI 사용, 이른바 섀도우 AI는 DLP 데이터에서 탐지되는 비악의적 내부자 행위 가운데 세 번째로 흔한 유형이 됐고, 전년 대비 […] The post 우리 조직의 AI 사용 제대로 파악하고 계신가요? AI 사용 제어 및 통합 관리 플랫폼 Fasoo AI Radar appeared first on Fasoo AI.
Knowing what is there, deciding who should reach it, catching the access that should not have happened, and acting on it — without data leaving your platform. The post Sensitive Data in the Cloud Data Platform appeared first on Theom.
How Theom supplies the evidence layer that keeps a modernizing enterprise data platform governed and its catalog accurate. The post Governed Migration, Lineage, and Catalog Reconciliation appeared first on Theom.
Knowing which data your models and agents reach, deciding what each request should be allowed to return, catching the sessions nobody authorized, and controlling them — from inside the platform that holds the data. The post AI and Agents on the Data Platform appeared first on Theom.
John Bailey last quote aphoenix1 Fri, 07/31/2026 - 14:17 Share this Article First Name John Last Name Bailey Testimonial “I’ve been totally amazed and impressed with Egnyte’s forward thinking — their ability to forecast what’s coming and be ahead of it, as opposed to being reactionary to it.” Job Title CAD Manager Company Horner & Shifrin Headshot Image