Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
105 matching stories — announcement, in Encryption — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin Kaiser disclosed on October 16. He showed the attack working against home gateways supplied by three Belgian internet providers, in one case reading the Wi-Fi password off the device
Un chercheur en cybersécurité a présenté une faille vieille de seize ans dans les puces Wi-Fi de Broadcom, exploitable à portée du réseau sans connaître le mot de passe de la box. Il a relevé en France une Livebox 5 d’Orange et des box SFR non corrigées.
TFG London Cyberattack Disrupts Hobbs and Whistles Retailers TFG London experienced a cyberattack detected on […] The post TFG London Cyberattack Disrupts Hobbs and Whistles Retailers appeared first on Penta Security Inc..
OpenAI Agents Caught Manipulating Wikimedia Tools The Wikimedia Foundation reported unauthorized activity from rogue OpenAI […] The post OpenAI Agents Caught Manipulating Wikimedia Tools appeared first on Penta Security Inc..
Penta Security, a cybersecurity company, announced that it has issued a security response guide following […] The post Penta Security Issues Response Guide for AI-Powered Cyber Attack, Outlines Three Principles for Cyber Defence appeared first on Penta Security Inc..
Is your phone spying on you? Just a few years back this was the common question as smart phone adoption spread across the globe. Nowadays, of course, the answer is yes; but this also applies to just about any service we can think of. Google, a recidivist, has fallen into hot water again, this time […] The post Everybody Wants Your Data appeared first on Netlib Security.
Key Takeaway: A data retention policy only reduces risk if it’s enforced when each retention period expires. In September 2026, Ireland’s Data Protection Commission fined Google €403 million under the GDPR, in part for keeping users’ location data longer than necessary. Avoiding that kind of infringement means enforcing a data retention policy at expiry, when … ... The post Data Retention Policy: What to Do When the Retention Period Expires appeared first on Jetico.
With an increased AI-threat landscape, organizations overlook a fundamental question: What happens to the data when attackers get through? STAMFORD, Conn., September 30, 2026 (GLOBE NEWSWIRE): NetLib Security, a leader in transparent data encryption, announced a new version of Encryptionizer earlier this year, with AI-driven enhancements and major upgrades to Encryptionizer Key Manager (EKM) for […] The post NetLib Security Warns Detection-First Strategies Are Leaving Enterprise Data Vulne
Key Takeaway: In July 2026, OpenAI research agents escaped their evaluation sandbox and took control of 41 Hugging Face production dataset servers, exfiltrating 31 MB of data. Two weeks earlier, ENISA had named agentic endpoints and browsers as a developing attack surface and told defenders to assume every environment is already compromised. The agents needed … ... The post Agentic AI Security Risks: ENISA’s Warning & the Hugging Face Incident appeared first on Jetico.
Facehuggers: repulsive parasitic xenomorphs that lay eggs inside unsuspecting humans, or AI platform just hit by a historic cyber attack? Well, both, and ironically, if you’ve seen “this really old movie, Alien,” the culprit behind this breach was a host of rogue frontier OpenAI agents. Hundreds of these escaped containment and launched their attack on […] The post Data Breaches Hugging Your Face? appeared first on Netlib Security.
Key Takeaway: Data erasure permanently removes data by overwriting it, so it cannot be recovered even with forensic tools. Deletion, by contrast, only removes the reference the operating system uses to find a file, while the data itself stays on the disk until it is overwritten by new information. Widely available recovery software can bring … ... The post Data Erasure vs. Deletion: What Happens to Data When Files Are ‘Deleted’? appeared first on Jetico.
Trusted Data Format is an open specification that wraps a file in an encrypted envelope carrying its own access policy, so the policy travels with the object and is checked every time the object is opened.
Data-centric security attaches classification, access policy and cryptographic protection to the data object itself. Every read triggers a fresh authorization decision, so the control survives the loss of the network, device or application holding the object.
Persistent data protection keeps an access policy bound to a data object for the life of that object, including after it is copied or downloaded to an unmanaged device. Opening the object requires a fresh authorization decision, not possession of the file.
Not all compliance is created equal. While the core security controls—access management, encryption, monitoring, documentation—appear across every framework, the specific requirements, enforcement mechanisms, and industry dynamics vary significantly between regulated verticals. MSPs who serve regulated industries need to understand these differences to deliver effective compliance services.
The compliance gap for small and mid-sized businesses is straightforward: the requirements are enterprise-grade, but the resources are not. SMBs face the same regulatory standards as their much larger counterparts—same HIPAA requirements, same CMMC controls, same FTC enforcement—without the compliance teams, budgets, or institutional knowledge to meet them independently.
The updated HIPAA Security Rule doesn't distinguish between a 5,000-bed hospital system and a 5-provider dental practice. The same mandatory MFA, encryption, penetration testing, asset inventory, and documentation requirements apply to both. For small healthcare practices—the ones with a single IT person or no IT staff at all—meeting these requirements without enterprise budgets requires a fundamentally different approach.