Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

3,481 matching stories — announcement, in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Automated AI traceability for Snowflake Cortex

More and more organizations are building AI where their data lives: in Snowflake. With Snowflake Cortex AI, teams can create agents, analysts and AI applications on enterprise data in minutes. But speed without visibility creates risk. In McKinsey’s 2026 AI Trust Maturity Survey, only about one-third of organizations report mature AI and agentic AI governance, and nearly two-thirds cite security and risk concerns as the top barrier to scaling agentic AI. Without clear lineage from data to…

Announcement

Gemini 3.6 Flash for Cybersecurity: Fast, Not Smarter

Google's newest Flash models dropped the same week an AI agent broke out of its eval sandbox to cheat an offensive benchmark. We ran Gemini 3.6 Flash & 3.5 Flash-Lite on defense instead — and use the result to explain why, on a GPT 5.6 → Kimi 3 treadmill, only continuous evals and constant harness tuning keep a SOC on top.

Announcement

Healthcare Ransomware Incident Response Plan: The First-24-Hours Playbook and Checklist

by Bethany Page Ishii Quick answer (what to do before + during the first day) Pre-assign leadership roles (incident commander, security lead, IT ops, clinical ops, comms, legal counsel, compliance/privacy) and practice the handoffs. Decide up… The post Healthcare Ransomware Incident Response Plan: The First-24-Hours Playbook and Checklist appeared first on Meditology Services.

Announcement

Your Data Was Built for Humans. Agentic AI Readiness Means Something Different.

Key Takeaways Agentic AI removes the human safety net from data pipelines, raising the bar from “good enough to interpret” to “good enough to act on autonomously, without review.” Closing the Agentic AI Data Integrity Gap requires unified, context-rich, and governed data that agents can reliably reason with and act on. Organizations should start with a single, high-value […] The post Your Data Was Built for Humans. Agentic AI Readiness Means Something Different. app

Announcement

IRS Automatic Exemption From Penalty (AEP): What Financial Institutions Should Know

By: Emma Hill, Pinion Financial Institutions Advisor The IRS recently announced a new systemic penalty relief program called Automatic Exemption from Penalty (AEP), which will begin rolling out in summer […] The post IRS Automatic Exemption From Penalty (AEP): What Financial Institutions Should Know appeared first on Pinion Global.

Announcement

15 Questions Every Cybersecurity Tabletop Exercise Should Answer

A Tabletop Exercise Should Test More Than Your Incident Response Plan Most organizations have some form of incident response plan. The more important question is whether that plan will hold up when teams are under pressure, information is incomplete, and business operations are at risk. A cybersecurity tabletop exercise, often called a TTX, gives key […] The post 15 Questions Every Cybersecurity Tabletop Exercise Should Answer appeared first on Lumifi Cybersecurity.

Announcement

97 C3PAOs. 80,000 Contractors. The CMMC Numbers Don’t Add Up and Your 2027 Contracts Could Be at Risk.

The bottleneck isn’t temporary. It’s built into the system. Here’s what that means for your timeline. As of March 2026, there are just 97 authorized C3PAOs serving an estimated 80,000 organizations across the Defense Industrial Base that require CMMC Level 2 certification to remain eligible for DoD contracts. Even if every C3PAO completed one assessment… The post 97 C3PAOs. 80,000 Contractors. The CMMC Numbers Don’t Add Up and Your 2027 Contracts Could Be at Risk. a

Announcement

Build or Buy: The Arithmetic on Running Your Own Model

From the AI ROI Series, recorded 28 July 2026. Two things happened that week, and they are more connected than they look. Visa cut 2,600 […] The post Build or Buy: The Arithmetic on Running Your Own Model appeared first on Olakai.

Announcement

What’s New in Scytale Q2 2026

Explore the latest updates in Scytale's AI GRC platform - Smarter Scy, AI Questionnaires, ROPA, AI TPRM, and more. The post What’s New in Scytale Q2 2026 appeared first on Scytale.

Announcement

Tenable Delivers the Industry’s First Always-On Agentic Fleet for Exposure Management

Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced new always-on capabilities for Tenable Hexa AI, the agentic engine of the Tenable One Exposure Management Platform. Tenable Hexa AI equips security teams with a connected fleet of agents that acts as an autonomous workforce, seamlessly coordinating complex, multi-step security tasks. Threat actors are moving at unprecedented speeds, and while vendors promise AI to match this velocity, that speed is lost

Announcement

CMMC Phase II Suspended: What Defense Contractors Need to Know

On July 13, 2026, the Department of War (DoW) announced the immediate suspension of Cybersecurity Maturity Model Certification (CMMC) Phase II requirements. Those requirements had been scheduled to take effect on November 10, 2026. The announcement is significant, but it does not eliminate CMMC, shut down the certification ecosystem, or release defense contractors from their […]

Announcement

Alertas de seguridad – Julio 2026

Vulnerabilidad en productos de Lenze Se ha reportado una vulnerabilidad de severidad alta. La explotación de este fallo por parte de un atacante podría habilitar el acceso administrativo al dispositivo sin autorización, comprometiendo así la confidencialidad, integridad y disponibilidad del dispositivo afectado. Recursos Afectados Controller c430: firmware c4x0 anteriores a 1.15.2 Controller c520: firmware c5x0 anteriores a 1.15.2 […] La entrada Alertas de seguridad – Julio 2026 apar

Announcement

Not the Target, Yet Still at Risk

Why attackers don’t have to target your bank to impact it An Article Review Nation-state threat actors sound like something only federal agencies need to worry about, but the line isn’t that clean anymore. A recent SC Media explainer breaks down what the term actually means: these groups have some level of government backing, a […] The post Not the Target, Yet Still at Risk appeared first on infotex.

Announcement

Bank Websites Are Sending Loan Data to TikTok and Google

New research found bank websites sending loan amounts, tax IDs, and contact details to TikTok, Google, and Meta, often without consent. Here is why server-side security never saw it, and how to close the gap. The post Bank Websites Are Sending Loan Data to TikTok and Google appeared first on Reflectiz.

Announcement

What Is ITSP.10.171? A Plain-Language Guide for Canadian Defence Suppliers

If you supply products or services to Canada’s Department of National Defence (DND), or you are a subcontractor to a company that does, you have likely started seeing a document number appear in contract language and supplier questionnaires: ITSP.10.171. This post explains what it is, who it applies to, what it requires, and how it […] The post What Is ITSP.10.171? A Plain-Language Guide for Canadian Defence Suppliers appeared first on Carbide.

Announcement

Proposta nostro comunicato CS per CGross

L’iniziativa rappresenta un ulteriore passo nel percorso di CY4GATE volto a consolidare il proprio ruolo di riferimento nel panorama della cybersecurity italiana, valorizzando un modello tecnologico proprietario e un approccio orientato alla protezione di infrastrutture, organizzazioni e asset strategici in scenari sempre più complessi e interconnessi.   Clicca qui per leggere il comunicato stampa

Announcement

Proposta nostro comunicato CS per CGROSS

IL GRUPPO CY4GATE SIGLA UN ACCORDO CON COMPUTER GROSS PER POTENZIARE LA DISTRIBUZIONE DELLE PROPRIE SOLUZIONI DI CYBER SECURITY E CYBER INTELLIGENCE IN ITALIA Roma, 28 Luglio 2026 – CY4GATE Group (CY4.MI), attore di riferimento sul piano nazionale ed europeo nei settori della cyber security e della cyber intelligence, comunica la firma di un accordo di distribuzione con Computer Gross, leader italiano nella distribuzione a valore aggiunto, da sempre attenta all’evoluzione del mercato ICT e&#8230

Announcement

Revenue Analytics: Don’t Miss the Signals That Drive ARR Growth

Revenue analytics is one of the most important disciplines in software. Until recently, Annual Recurring Revenue (ARR) was relatively straightforward. Customers purchased licenses or subscriptions, renewed periodically, and growth was tracked through a familiar set of metrics. However, AI capabilities, consumption-based pricing, shared credit pools, and hybrid models are changing how software is bought and sold. Revenue no longer comes solely from a contract signed 12 months ago. It comes from t

Announcement

The Hugging Face Breach: When the Attacker Was an AI

An autonomous AI agent chained two code-execution flaws in Hugging Face's dataset pipeline, harvested credentials, and moved laterally at machine speed — and it turned out to be OpenAI's own pre-release models, escaped from a benchmark test. The full technical breakdown. The post The Hugging Face Breach: When the Attacker Was an AI first appeared on Zeron.

Announcement

AI Directives and AI Strategy Development

The hardest part of AI adoption isn't the tech, it's the strategy. In this blog, we outline a practical framework covering governance, risk classification, threat modeling, and monitoring before the tools ever go live.

Announcement

TPRM Maturity: Why Your Operating Model Matters More Than You Think

The surface-level metrics say your Third-Party Risk Management (TPRM) program is working. Assessments are moving. Vendors are being reviewed. Workflows are being documented. On paper, the program looks mature. So why is it still failing to prevent gaps and risk exposure points from existing? Despite assessments regularly occurring, procurement still waits on risk decisions before […] The post TPRM Maturity: Why Your Operating Model Matters More Than You Think appeared first on ProcessUnity

Announcement

Defensibility by Design: How to Build an AI-Powered GRC Program That Stands Up to Scrutiny

The Bottom Line: Artificial intelligence is radically shifting how we approach risk management. If your Chief Compliance Officer or Head of Risk cannot show what information an AI system evaluated, what it recommended, and how a human reached the final decision, the organization may struggle to defend the outcome. To survive modern regulatory scrutiny, you must move beyond ... The post Defensibility by Design: How to Build an AI-Powered GRC Program That Stands Up to Scrutiny appeared first on SA

Announcement

Delivering operational trust for AI agents

AI agents are moving into production faster than organizations can govern them. According to Deloitte's 2026 State of AI in the Enterprise survey, 74% of organizations expect to be using AI agents at least moderately by 2027, up from 23% today. Yet only 21% have a mature governance model in place for agentic AI — meaning roughly 80% lack capabilities like clear agent decision boundaries, real-time monitoring and audit trails. Closing the gap between agent adoption and agent trust requires trust…

Announcement

Finosec Forward: $8,000 to Folds of Honor

Every scholarship Folds of Honor delivers is for a family that gave something enormous. The organization provides educational scholarships to the families of fallen and disabled military service members and first responders, year-round. Over the Fourth of July weekend, Finosec donated $8,000 to that mission. How the number was built Here’s the part we love […]

Announcement

What Is an Audit Management Platform and How Does It Fit With Your GRC Tool?

Compliance programs typically run on two different kinds of software. A GRC platform manages your compliance program including the continuous, internal work of keeping controls, policies, and risks in order year-round. An audit management platform manages your audit and is the structured engagement between your organization and your audit firm, from kickoff through final report. […] The post What Is an Audit Management Platform and How Does It Fit With Your GRC Tool? appeared first on A-LI

Announcement

Iranian-Affiliated Actors Expand PLC Targeting to Siemens and Schneider Electric: What CISA’s Updated Advisory Means for CNI

Key Takeaways On 22 July 2026, CISA, the FBI, NSA, and five other US agencies updated joint advisory AA26-097A, expanding the scope of an ongoing Iranian-affiliated campaign against internet-exposed PLCs from Rockwell Automation to now include Schneider Electric and Siemens devices [1]. The update adds a new exfiltration technique (MITRE ATT&CK T1041): actors are using vendors’ own legitimate engineering software to steal PLC project files from victim environments [1]. At one confirmed US vi

Announcement

Optimized CyberVault Integration with CohesityOS 7.4

Nearly nine months after launching Cyber Vault for Cohesity, 11:11 Systems continues to advance a cost- and performance-optimized solution for moving a copy of Cohesity backups offsite into immutable AWS… The post Optimized CyberVault Integration with CohesityOS 7.4 appeared first on 11:11 Systems.