Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
6 matching stories — incident, in Encryption — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Broadcom has addressed CVE-2026-59346, a critical integer-overflow vulnerability affecting VMware Workstation and VMware Fusion. The flaw carries a CVSS score of 9.3 and can allow an attacker with administrative privileges inside a virtual machine to cross the virtualization boundary and execute code on the underlying host. The issue resides in VMware’s VMXNET3 virtual network adapter […] The post CVE-2026-59346: Critical VMware Workstation and Fusion Flaw Enables Guest-to-Host Code Execut
CISA added AD FS CVE-2026-56155 to KEV on July 14, 2026 with a July 28 federal deadline. The flaw hands an attacker the token-signing keys, and a forged federation token replays against every connected application. Object-level enforcement is what still refuses it.
Chromium V8 CVE-2026-11645 is an actively exploited out-of-bounds flaw giving an attacker read and write access inside the renderer. CISA added it to KEV with a June 23, 2026 federal deadline. The browser is where enterprise data is read, and the renderer holds the cleartext.
Arista EOS CVE-2026-7473 is an actively exploited tunnel decapsulation flaw that makes a switch forward attacker traffic into isolated segments. CISA added it to KEV with a June 23, 2026 federal deadline, and Arista will not patch it.
