Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
3,478 matching stories — announcement, in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
When Engineering Metrics Reveal Business Risk
This is a perspective from my role as Director of Software Development at LogicManager. We’re sharing it because engineering metrics are not just a measure of team activity. When viewed together, they can reveal where delivery risk, quality concerns, customer impact, and operational pressure may be building. Risk management [...]
uRISQ Vendor Management Enhances Assessments with Flexible Text Response Capabilities
The uRISQ mission has always been clear: provide businesses with the solutions they need to understand, decrease, and avoid the risk of data loss. As organizations continue to rely on third-party vendors for critical operations and services, the need for deeper visibility into vendor risk has never been more important. That’s why we are excited […] The post uRISQ Vendor Management Enhances Assessments with Flexible Text Response Capabilities appeared first on uRISQ | Cyber Privacy and Cybe
A Reminder: Your Compliance Is Only as Stable as the IP Behind It
The post A Reminder: Your Compliance Is Only as Stable as the IP Behind It appeared first on Deepview.
REST API security testing: A complete guide
Learn how to perform REST API security testing with a practical, step-by-step approach. This guide covers the OWASP API Security Top 10, common vulnerabilities, and proven techniques to discover, test, and validate real API risks using modern automated tools. Read more The post REST API security testing: A complete guide appeared first on Invicti.
CREST Research: How AI is Changing Penetration Testing
CREST research into AI in penetration testing shows wide adoption for supporting tasks, while human-led oversight remains key to maintaining trust. The post CREST Research: How AI is Changing Penetration Testing appeared first on CREST.
2026 HIPAA Updates: What Security Leaders Need to Know + Compliance Checklist
After years of static regulation, HIPAA is finally evolving. Learn about the new requirements and access a full compliance checklist to ensure your security team is ready for the new regulations.
El problema no es la falta de herramientas. Es la falta de control
La mayoría de las brechas no ocurren por falta de herramientas, sino porque docenas de plataformas operan aisladas y se desalinean con el tiempo. El control unificado de seguridad convierte ese stack fragmentado en una postura medible y continua, donde la exposición disminuye con cada iteración. The post El problema no es la falta de herramientas. Es la falta de control appeared first on Batuta.
Healthcare Cybersecurity Plan: How to Align Risk Management and Compliance for a Unified Strategy
In the rapidly evolving cybersecurity landscape of 2026, healthcare organizations are no longer just “managing IT”, they are protecting a digital delivery system where patient safety and data integrity are inextricably linked. As regulatory scrutiny… The post Healthcare Cybersecurity Plan: How to Align Risk Management and Compliance for a Unified Strategy appeared first on Meditology Services.
Sydney-Based CypherLeap Achieves Global CREST Accreditation for Penetration Testing
Sydney-Based CypherLeap Achieves Global CREST Accreditation for Penetration Testing SYDNEY, AUSTRALIA [14 May 2026] – CypherLeap, a Sydney-based cybersecurity consultancy firm, has officially been granted CREST (International) accreditation for its penetration testing services. This global recognition follows a rigorous independent […] The post Sydney-Based CypherLeap Achieves Global CREST Accreditation for Penetration Testing appeared first on CREST.
What Is TSA PreCheck? A Complete Guide to Enrollment, Renewal, and Your KTN
Discover TSA PreCheck benefits, enrollment and renewal steps, plus what a Known Traveler Number (KTN) is and where to find it. The post What Is TSA PreCheck? A Complete Guide to Enrollment, Renewal, and Your KTN appeared first on Telos.
The Human Firewall: Why AI Literacy Is Your Best Defense Against Shadow AI
The human firewall is the workforce judgment layer that helps prevent risky AI use before it becomes a data, compliance, or trust issue. In AI governance, it means employees understand what AI tools do, what information they should not share, when outputs need review, which use cases create higher risk, and how to raise concerns before a shortcut becomes an incident.
The AI governance gap
The post The AI governance gap appeared first on Resilience.
AirMDR Article: For MDR, “Not Clearly Failing” Is Often Enough to Renew.
The renewal moment Your MDR contract is coming up. Your provider has been responsive enough. Tickets are flowing. Reports arrive. Nothing catastrophic has happened. The easy path is to renew.
8 Best Security Awareness Training Platforms for Enterprise (2026) | Hoxhunt SAT category highlights
May 14, 2026 | Eight security awareness training platforms compared for enterprises: G2's #1 for enterprise, verified reviews, published pricing, channels covered and pilot tests.
Instructure Canvas Breach: What Happened, What It Means for Your Vendor Risk Program
The Canvas Breach Is a Third-Party Risk Story. Treat It Like One. The Instructure Canvas breach that unfolded across the last two weeks of April and the first two weeks of May 2026 is not just a cybersecurity incident affecting one vendor. For higher education institutions, it is a case study in exactly what happens when […] The post Instructure Canvas Breach: What Happened, What It Means for Your Vendor Risk Program appeared first on Consolidated Cyber Risk Management Platform | FortifyDa
When Banking Risk Workflows Don’t Match Reality
This is a perspective from Christian Parker, Senior Onboarding & Enablement Specialist at LogicManager. We’re sharing it because strong risk programs are not built through configuration alone. They are built when workflows reflect how risk work actually moves across teams, approvals, evidence, and ownership. In banking, especially, a process [...]
Third Party Risk Portfolio Report for Education
Third Party Risk Portfolio Report for Education Eric Cisternelli Wed, 05/13/2026 - 12:48 Custom report of third party vendors. After you submit the form, our team will begin preparing a custom vendor risk report based on your organization’s third-party ecosystem. While we build it, you’ll get immediate access to an example report showing the type of vendor risk intelligence Bitsight provides, including: Commonly used third-party risk reports available in Bitsight How cyber risk data can help you
Webinar Recap – Introducing CRQ.AI: A New Standard in Cyber Risk Quantification
From Blank Page to Quantified Cyber Risk in 30 Minutes Anyone who has launched a cyber risk quantification program knows the hardest part isn’t the math, it’s facing a blank Read More The post Webinar Recap – Introducing CRQ.AI: A New Standard in Cyber Risk Quantification appeared first on Axio.
Raz-Lee at COMMON POWERUp 2026 in New Orleans
The Raz-Lee team was proud to participate in COMMON POWERUp 2026, one of the largest and most important gatherings for the IBM i community. Held in vibrant New Orleans, the event brought together IBM i professionals, technology leaders, business partners, and innovators from around the world for several days of education, collaboration, and networking. We […] The post Raz-Lee at COMMON POWERUp 2026 in New Orleans appeared first on Raz-Lee Security.
ACH Fraud Rules Are Shifting: What Nacha 2026 Means for Banks and Credit Unions
Beginning March 2026, Nacha’s amended risk management rules introduced new compliance obligations for most ACH participants. By June 2026, these requirements extend across the ACH Network, bringing financial institutions of all sizes, including credit unions, into scope. The question is:... Read More »
NIST AI RMF 2025–2026 Updates: What You Need to Know About the Latest Framework Changes
AI systems continue to expand across enterprise, government, and critical infrastructure environments—making governance, transparency, and risk management more critical than ever. The NIST AI Risk Management Framework (AI RMF) remains the leading voluntary standard helping organizations manage AI risk in a structured, defensible way. Since its initial release in January 2023, the framework has steadily […]
Blueprint: Secure Exchange on-premises access for higher education
Blueprint: Secure Exchange on-premises access for higher education fredrik.werstroh Wed, 05/13/2026 - 10:51 Download Please enter your business email and you will receive a download link for the document. Off Off Secure Exchange on-premises access- a blueprint made for higher education. Discover how a medium-sized university modernized remote email access for 12,000 employees and students without relying on VPN, device management software, or password-based authentication. This blueprint sh
SecurityPal Flows: Workflow Automation for Cybersecurity Assurance
SecurityPal Flows automates cybersecurity assurance end to end by orchestrating AI agents, certified analysts, approvals, notifications, and workflows across your existing systems.
Board committee charters: Your governance playbook decoded
A board committee charter is more than governance paperwork; it’s the rulebook that keeps the board’s engine humming when pressure rises and complexity grows. At its best, a charter makes responsibilities visible, removes guesswork, and creates a predictable rhythm for oversight so directors and management spend less time arguing about who should do what and […] The post Board committee charters: Your governance playbook decoded first appeared on TrustCloud.
APRA and ASIC AI Guidance: Governance Must Catch Up
Artificial intelligence is no longer a future-state risk. It is already reshaping how organisations operate, compete, serve customers and defend themselves. Within the same week, APRA and ASIC each released guidance on AI. Their focus differs, but the message is consistent: AI is moving faster than many governance, risk, assurance and resilience practices can support. APRA is focused on AI adoption. Are organisations using AI in a controlled, accountable and resilient way? ASIC is focused on AI-
Vendor-Enabled Realism: Verify AI-Era Cyber Resilience
:Cyber Resilience: !cyber-resilience! Turn security and AI tool investments into validated proof of capability with Immersive One’s Vendor-Enabled Realism capability.
Enhancing Firmware Security with ML & LLMs Webinar | ONEKEY
Learn how ML and LLMs improve firmware security through automated component discovery and actionable security insights. Register now.
Best Phishing Simulation Tools (2026): Compared & Ranked | Hoxhunt Phishing category highlights
May 13, 2026 | The 9 best phishing simulation tools in 2026, compared on email, Teams, voice, SMS and deepfake simulations, adaptive difficulty, reporting and pricing.
What to Expect from Your C3PAO Assessor: 5 Actions to Prepare
The post What to Expect from Your C3PAO Assessor: 5 Actions to Prepare appeared first on Exostar.
Temporarily Deficient: A Common SC.L2 3.13.11 Concern
When the Rules and Reality Don’t Quite Line Up A few days ago, as I was preparing myself a nutritious midnight snack, a bowl of Cap’n Crunch cereal. Don’t shame me. It has some vitamins in it…. I think. Anyways… I focused with great precision on getting the right amount of that sugary goodness in the bowl, then, with a steady arm, I prepared to pour the milk. Like […] The post Temporarily Deficient: A Common SC.L2
DISA J9 Directorate Pivots to Customer-Centric Hybrid Cloud Model
Defense Information Systems Agency (DISA) J9 Directorate Pivots to Customer-Centric Hybrid Cloud Model The DISA J9 directorate, the agency’s hosting... The post DISA J9 Directorate Pivots to Customer-Centric Hybrid Cloud Model first appeared on SecureStrux.
CSPM (Cloud Security Posture Management) : définition, enjeux et mise en œuvre avec Cyberwatch
En 2024, les organisations ont subi en moyenne neuf incidents de sécurité cloud. Et près de neuf sur dix constatent que leur nombre augmente d’une année sur l’autre (source : étude IDC / Microsoft) Derrière ces chiffres, une réalité simple : chaque ressource ajoutée dans le cloud est une nouvelle surface à défendre. Et certaines […] The post CSPM (Cloud Security Posture Management) : définition, enjeux et mise en œuvre avec Cyberwatch appeared first on Cyberwatch.
6 Functions of the NIST Cybersecurity Framework (2026 Update) & What’s Changed
The NIST Cybersecurity Framework (NIST CSF) is one of the most widely adopted frameworks for managing and reducing cybersecurity risk. Originally released in 2014, the framework provides organizations with a structured, flexible approach to identifying, protecting against, detecting, responding to, and recovering from cyber threats. While the NIST cybersecurity framework is voluntary, it has become […]
Passguard featured on the Cyber Security District podcast
Infostealer malware and stolen session data: Tom Leijte joins the Cyber Security District podcast to discuss today’s fastest-growing cyber threats.
Guidewire’s Best Training Courses for Developers (2026)
How Insurers Can Launch Agentic Quote and Buy Journeys with Guidewire Cloud APIs
Top KnowBe4 Competitors (2026): Enterprise Security Awareness Platforms Compared | Hoxhunt SAT category highlights
May 12, 2026 | The top KnowBe4 competitors for enterprise in 2026: Hoxhunt, Proofpoint, SoSafe, Cofense PhishMe and MetaCompliance, compared on outcomes, admin effort, and reporting.
DigitalXForce vs MetricStream: Which Platform Fits Which Program
DigitalXForce tests controls against live data from the security stack, maps each control once to 50+ compliance frameworks and keeps security posture and third-party risk on the same data layer. Continuous Control Assurance (CCA) uses evidence, monitoring and validation to determine whether controls continue to operate as expected. MetricStream calls its product an AI-first Connected […] The post DigitalXForce vs MetricStream: Which Platform Fits Which Program first appeared on DigitalXFo
What Bank Examiners Are Prioritizing in 2026: Cyber Edition
The post What Bank Examiners Are Prioritizing in 2026: Cyber Edition appeared first on DefenseStorm.