Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
3,602 matching stories — in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Within A-SCEND, A-LIGN’s audit management platform, there are three stages to the audit process: Most first-time compliance teams spend the first stage gathering documentation and uploading evidence to a portal, with no way to know if that evidence is ready. They find out in the second stage, when a gap takes longer to fix, or can’t be […] The post The Audit Prep Phase: How EvidenceIQ Validates Audit Readiness Before Fieldwork Starts appeared first on A-LIGN.
For cybersecurity leaders, knowing what controls are in place is only part of the picture. The bigger question is whether those controls are consistently implemented, governed, measured, and improved as risks change. That is where cybersecurity maturity assessments become valuable. By evaluating NIST CSF 2.0 maturity levels, organizations can establish a baseline for their cybersecurity […]
Key Takeaways Without a formal data governance program, trust in organizational data is essentially a coin toss. That gap has real consequences as AI systems scale decisions at speed. A data governance program and a data strategy must work together; governance built in isolation from business objectives stalls quickly, and organizations that align both see […] The post Data Governance for AI Is Under Pressure: What the Data — and Experts — Are Telling Us appeared first on Precisely.
Today is my first day back from a two month Sabbatical. This is a benefit that all of the team members here at risk3sixty enjoy. The way it works is that you get a month off for every five years of tenure (e.g., 1 month after five years, 2 months after ten, and so on).In this article, I’d like to tell you a bit about the experience. Namely, a little about our sabbatical program, how I prepared to leave for two months, and some of the things I learned from the experience.
Third-party ecosystems are growing faster than most Third-Party Risk Management (TPRM) teams’ capacity to assess them. Every new vendor, supplier, subcontractor, and service provider adds potential exposure, pushing teams to work faster and assess more vendors with the same limited resources. This creates a vulnerability gap: a mismatch between the level of Third-Party Risk Management […] The post How to Build a Vendor Risk Tiering Model appeared first on ProcessUnity.
Most organizations seeking to meet SOC 2 requirements already know the framework exists. The challenge is understanding how the controls […] The post SOC 2 Requirements Explained: Controls, Criteria & Step-by-Step Implementation Guide appeared first on Network Intelligence.
ProcessUnity’s agents are purpose-built and woven seamlessly into the TPRM process to automate the manual work and route every judgment call to a human. CONCORD, Mass. — September 1st, 2026 — ProcessUnity, the Third-Party Risk Management (TPRM) company, today launched ProcessUnity AI Agents for TPRM, a suite of dedicated, AI agents that autonomously handle the […] The post ProcessUnity Launches AI Agents That Cut Third-Party Risk Busywork — One Early Adopter Reduced Intake Cycle Time
Most vCISO content is written for buyers. If you run an MSSP and want to add fractional CISO services to your offering, you need a provider-side playbook for packaging, pricing, and delivering at scale.
“Private.” “Secure.” “Discreet.” That is how Hims & Hers described its telehealth services to millions of customers. According to the FTC and two states, the […] The post Hims & Hers Lawsuit: FTC and Two States Sue Over Website Tracking Pixels appeared first on Reflectiz.
Sydney, Australia – 1 September, 2026 – Protecht, a global leader in Governance, Risk and Compliance (GRC), today announced the appointment of Stuart Kelly as Global Chief Revenue Officer (CRO) and Erin Marks as Global Chief Marketing Officer (CMO). The creation of these executive leadership roles reflects the company's continued investment in scaling globally as demand grows for modern enterprise risk and resilience solutions.
LONDON, September 1, 2026 — CyberCube, the leading provider of cyber risk analytics, today unveils six new AI Event Families and a new I2T2 framework, providing carriers, brokers, and risk managers with a practical way to think about and evaluate AI-driven loss.
Multiple cyber-attacks against critical infrastructure highlight a need for resilience, operational risk and governance, rather than just technical security. Critical national infrastructure (CNI) is under attack in the US and UK. In late August, it emerged that a British power plant had been hit and shut down for four days after Iranian adversaries launched an … Continued
The CSP Reporting Module turns Cognitive Security Platform® data into ready-to-use dashboards, from executive KPIs to detailed operational analysis. Discover how it works, the role-based views available, and real dashboard examples covering detection rate, risk exposure, and team workload. Download below the product sheet. The post CSP Reporting Module appeared first on XTN Cognitive Security.
The number of new Common Vulnerabilities and Exposures (CVEs) keeps piling up. Far more can land in a day than your team can realistically investigate, let alone patch. Meanwhile, endpoint drift can quietly increase your exposure to vulnerabilities.
Compliance, whether SOC 2 or otherwise, MUST be a continuous exercise. The absence of, or little attention to, it is […] The post SOC 2 Compliance Automation: How Do You Reduce Audit Time and Manual Work? appeared first on Network Intelligence.
AWS WAF logs are keeping receipts, including your session tokens. In this blog, we walk through the risk of default WAF logging configurations and the tool built to pull, analyze, and replay what gets left behind.
The Charity Commission published its Charity Sector Risk Assessment 2026 on 18 August 2026, providing trustees and charity leaders with an updated view of the risks affecting charities across England and Wales. The assessment does not introduce a new law or prescribe a particular risk-management framework. Its importance lies elsewhere: the regulator has used annual […] The post Charity Sector Risk Assessment 2026: What Trustees Should Review Now appeared first on Symbiant.
Fake listings and buyer-seller collusion rarely show up on the same dashboard, but they erode trust in commerce marketplaces in nearly identical ways. A buyer clicks, trusts what they see, and loses money before anyone flags the transaction, or a seller and buyer who are secretly the same person move stolen funds through a transaction […] The post How to Prevent Fake Listings and Collusion appeared first on Sift.
If your organization uses 100 software vendors today, chances are most of them either have AI features already or will by the end of the year. The challenge is that very few organizations know exactly how those vendors are using AI, what data is being processed, or how those new capabilities affect third-party risk. That's…
Learn how zero-trust security and data privacy initiatives reinforce each other. Discover ways to align security and privacy teams for faster maturity. The post Understanding Zero-Trust Security and Its Impact on Your Organization appeared first on Onspring.
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced that it has joined Project Watershed, a White House-led initiative focused on protecting U.S. water and wastewater systems from cyber threats. Tenable brings expertise in helping organizations unify visibility, including across IT and OT security domains, prioritize risk and automate remediation to keep pace with evolving threats related to cyber exposures in the agentic AI era.Led by the Office of the
Hyperproof’s 2026 IT Risk and Compliance Benchmark Report reveals that while 97% of GRC teams leverage AI for internal productivity, only 27% have operationalized AI for external assurance. To bridge this gap, modern compliance leaders are anchoring programs in frameworks like ISO 42001 and mapping AI risks directly into existing GRC infrastructure. Here are three... The post GRC Teams Scale AI Governance: Insights from the 2026 IT Risk and Compliance Benchmark appeared first on Hyperproof.
Scaling up your observability practice often creates access control challenges. Synthetic monitoring is no exception. As more teams rely on synthetic tests to validate releases, automate operational workflows, and monitor the availability of AI or web services, more users and automated systems need the ability to create and execute synthetic monitors. For example, QA teams […] The post Scale Synthetic monitoring with granular and team-scoped access control appeared first on Dynatrace news.
Starting today, industry benchmarks in Onyxia’s Operational Resilience Platform cover five sectors: IT & Tech, Financial Services, Healthcare, Critical Infrastructure, and Retail & eCommerce – expanded from IT and Finance.
An IT security audit is a key service for any organization. It is required for financial institutions like banks and credit unions to satisfy government regulations.
From Enterprise AI Weekly, recorded 28 August 2026. Three things happened in enterprise AI that week, and read together they settle an argument the industry […] The post ClaudeForce, and the One AI Input You Cannot Buy appeared first on Olakai.
From failed checkouts to disputed transactions, when something goes wrong in a digital customer journey, you often need more than metrics or events. You need to see what the user saw, what they did, and what exactly happened in the end-user browser or mobile application. The new Session Replay lets you replay the full experience […] The post Investigate user sessions end-to-end with the new Session Replay appeared first on Dynatrace news.
The license fee is the smallest number in a GRC platform switch. That is the single most useful thing to know before you start collecting quotes, because every vendor conversation will revolve around the subscription price, and the subscription price is not where replacement projects go over budget. The real money sits in migration labor, […] The post GRC Platform Migration Cost and Timeline for MSPs appeared first on Cynomi.
Most organizations hiring a vCISO have a version of the same question underneath the formal evaluation: how quickly will anything actually change? It’s a fair thing to ask. Security programs have a reputation for starting slow: assessments that take months, roadmaps that stay roadmaps, vendors who deliver reports without touching the problems they document. Before […] The post What a vCISO Delivers in the First 90 Days appeared first on CISOSHARE.
PaperCut RCE Chain: CVE-2026-82078 Exploited PaperCut disclosed two vulnerabilities in PaperCut NG and PaperCut MF that can be chained into a pre-authentication Remote Code Execution (RCE) path against vulnerable Applica
ServiceNow Patches Multiple CVSS 10.0 Flaws ServiceNow disclosed four vulnerabilities affecting its AI Platform and related Now Platform components on August 27, 2026 . Three received vendor-assigned CVSS v4.0 scores of
