Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
3,594 matching stories — in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
“We have a Shadow AI problem” is a sentence a CISO says a lot and rarely means precisely. It could mean dozens of unclassified tools […] The post Shadow AI, Caught in the Act: Inside Olakai’s App Catalog and Policy Alerts appeared first on Olakai.
Why is PKWARE changing the way it supports product versions?
If you read the July 13 news and assumed CMMC is dead, that is not what happened. If you read it and now have no idea whether your upcoming assessment still counts, that is the more useful question to be asking. The Department of War suspended the requirement for third-party certification. It did not suspend […] The post CMMC Phase 2 Suspended: What Actually Changed for Your CMMC Level 2 Compliance Timeline appeared first on Carbide.
Every organisation operates with risk. Changes to technology, regulation, suppliers, people, processes and strategic objectives continually create new uncertainties and alter existing exposures. The challenge is not simply identifying these risks. It is deciding what to do about them, and ensuring those decisions are consistently implemented, monitored and reviewed. Without a structured approach, risk registers […] The post Four Risk Treatment Strategies: How to Move from Reactive Risk Man
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced the expansion of the Tenable One Exposure Management Platform, unifying application security risks with all other exposure data. By integrating static code vulnerability data, Tenable One delivers complete, code-to-runtime visibility across the entire attack surface.Security teams have long struggled with a code security problem where vulnerable code reaches production faster than it can be reviewed. This pr
BLUF; CMMC Phase II has been paused, but CMMC has not been canceled. NIST SP 800-171 Rev. 2, DFARS 252.204-7012,... The post CMMC Phase II Delayed: What Defense Contractors Need to Know first appeared on SecureStrux.
InstallShield 2026 is now available and introduces several enhancements designed to simplify application packaging, modernize installer experiences, and support evolving enterprise requirements. This release includes support for Microsoft Entra ID authentication for SQL Server connections, a new WinUI 3-based installer experience, and expanded Package Support Framework (PSF) capabilities for MSIX packages. Modern Windows-Native Installer Experiences As Windows applications continue to adopt mode
You bought EDR to catch attacks. So why do attackers keep walking past it? The answer is uncomfortable. The modern intrusion does not look like an attack. It looks like a logged-in user running normal tools. No malware file to flag. No signature to match. Just valid credentials and trusted binaries doing exactly what they […]
The recent Avada Builder vulnerabilities showed how a widely used WordPress plugin could expose sensitive data and lead to further security problems. Organisations that rely on their websites for enquiries, online sales or customer support need to know which plugins, scripts and connected tools still run on the live site after launch. Avada is one of the most widely used WordPress page-builder plugins, with an estimated 1,000,000 active installations. This was not a flaw in obscure software. It
On 14 July 2026 SonicWall confirmed two actively exploited zero-days in its Secure Mobile Access (SMA) 1000 Series remote-access appliances and released fixed firmware. The pattern is concentration risk at the network edge: a widely used SSL VPN gateway sits in front of internal systems, so its compromise reaches everyone behind it, including the clients of managed providers that run one.
An attacker hijacked Jscrambler's npm package with a stolen publishing credential and shipped an infostealer to developers between 11 and 13 July 2026. The malware harvested cloud tokens, wallets and AI-assistant credentials from any machine that installed it. For third-party risk teams, the lesson is that a trusted dependency is a supplier, and its release channel can become the attack path.
Lidl has told online shop customers in Germany, Belgium and the Netherlands that their data was stolen in a breach at an IT service provider, not in its own systems. Names, phone numbers, email addresses, dates of birth and customer numbers were taken; payment data is not yet ruled out. Under GDPR the controller stays accountable for a processor's breach.
For years, AIX has lived in a strange place in cybersecurity: too critical to ignore, too specialized for most vendors to support, and all too often protected by a single dangerous assumption: “It sits behind the firewall. It’s fine.”
On July 13, 2026, the Department of War suspended CMMC Phase 2 requirements, which were scheduled to go into effect November 10, 2026. The C3PAO third-party audit deadline is gone. Your DFARS 252.204-7012 obligation, your NIST 800-171 self-assessment requirement, and your SPRS score are not.
The post CMMC Is Changing. Protecting CUI Is Still the Mission appeared first on Exostar.
The post What’s New in PreVeil: Product Updates appeared first on PreVeil.
  If you have been hearing more about vSphere APIs for I/O Filtering (VAIO) in Zerto conversations, there is a simple explanation: VAIO is VMware’s I/O filtering framework that has… The post VMware VCF 9, VAIO with Zerto, and 11:11 DRaaS: What Our Customers Should Know Now appeared first on 11:11 Systems.
Canada’s defense supply chain now faces a new mandatory cybersecurity bar. The Canadian Program for Cyber Security Certification (CPCSC) sets baseline requirements for organizations handling sensitive government information, and Level 1 is being introduced into select contracts and becomes a requirement for those contracts as it appears in them.   This CPCSC Level 1 checklist […] The post CPCSC Level 1 Requirements: The 13-Control Checklist for Canadian Defense Suppliers appeared firs
Update, July 13, 2026: The Department of War has suspended CMMC Phase II, the mandate that would have required third-party (C3PAO) Level 2 certification starting November 10, 2026. A 60-day Reform Task Force is now reviewing the program’s future. Self-assessment requirements, SPRS scoring, annual affirmations, and DFARS 252.204-7012 remain fully in force and are still […] The post CMMC Level 2 Requirements: A Practical Assessment Checklist for Defense Contractors appeared first on Ca
"AI firewall" means different things to different vendors. Here's what it really covers, what the neutral standards say, and which type your business needs. The post AI Firewall: what it really means, and which one your business needs appeared first on TrustLayer.
Effective cybersecurity awareness training and realistic phishing simulations are essential for helping organizations defend against increasingly sophisticated AI-powered phishing attacks. While artificial intelligence has improved cybersecurity capabilities in many areas, it has also dramatically increased the speed, scale, and effectiveness of social engineering attacks. Organizations that fail to evolve their training strategies risk leaving employees vulnerable to a new generation of... The
For many manufacturing and construction leaders, the hardest part of the job is not making decisions, it is making them confidently and with limited space to speak openly about the […] The post More Than Networking: Peer Groups Are Leadership Think Tanks appeared first on Pinion Global.
Last updated: July 31, 2026 / Originally published: July 14, 2026 Key takeaway: CMMC Phase II is suspended, not canceled or rescinded. Phase I self-assessments, DFARS 252.204-7012, and NIST SP 800-171 Revision 2 remain in force. A CMMC Reform Task Force has been created to review the program and will report back in mid-September. On […] The post What the CMMC Phase II Suspension Means for Defense Contractors appeared first on A-LIGN.
Deep Breaths, Everyone Well, that was a Monday. Yesterday, July 13, 2026, the DoD CIO announced the immediate suspension of CMMC Phase 2 requirements, which were originally scheduled to begin on November 10, 2026. Within about 20 minutes of the CMMC Phase 2 suspension news hitting my screen, my LinkedIn feed turned into what seemed […] The post CMMC Phase 2 Suspension: What Changed, What’s Still Required, and What’s Next appeared first on IntelliGRC.
Every organization faces operational risk, but not every organization knows how to measure operational risk effectively. Without a clear way to quantify threats from failed processes, human error, or system outages, you’re left guessing where your biggest vulnerabilities are. Knowing how to measure operational risk turns that guesswork into actionable insight. This blog walks you […] The post How to Measure Operational Risk in Your Organization appeared first on LogicGate Risk Cloud.
Every organization faces operational risk, but not every organization knows how to measure operational risk effectively. Without a clear way to quantify threats from failed processes, human error, or system outages, you’re left guessing where your biggest vulnerabilities are. Knowing how to measure operational risk turns that guesswork into actionable insight. This blog walks you […] The post How to Measure Operational Risk in Your Organization appeared first on LogicGate Risk Cloud.
Find out if TSA PreCheck is right for you. Review membership costs, travel benefits, time savings, and enrollment details. The post Is TSA PreCheck Worth It? Costs, Benefits, and Time Savings Explained appeared first on Telos.
Most privileged access programs secure the server and leave the laptop wide open. The account in the vault is governed. The standing local admin right on the endpoint is not. That gap is where modern intrusions begin. It is the gap endpoint privilege management (EPM) is built to close. Already run Privileged Access Management (PAM)? […]
Accelerating time-to-value through AWS Marketplace to protect organizations from sophisticated social engineering, deepfakes, and shadow AI
What really happens after a cybersecurity incident? Follow the first 72 hours of incident response – from confirming the breach and containing the threat to forensic investigation, recovery, and lessons learned. The post Incident Response in Practice: What Really Happens During the First 72 Hours of a Cybersecurity Incident appeared first on Omega Systems.
Security questionnaires touch engineering, legal, HR, product, and compliance, but nobody owns the process end to end. That's why they take weeks instead of hours.
La UE ha aplicado nuevos cambios para reordenar los tiempos de aplicación de la IA en las empresas para reforzar la seguridad, la trazabilidad y el control sobre los sistemas de las organizaciones. La adopción de la IA en el entorno empresarial avanza con rapidez. Según los últimos datos del INE, el 21,1% de las empresas españolas […] La entrada Cinco tareas que las empresas deben abordar ante las normativas europeas de IA aparece primero en Secure&IT.
Four auditors, four frameworks, one recurring finding: users hold admin rights they do not need, and privileged actions go unlogged. NIS2, India’s DPDP Act, ISO 27001, and CIS Controls v8 come from different regulators in different language. They converge on the same control — least privilege on the endpoint, with an audit trail to prove […]
Every risk and compliance leader eventually runs into the same wall: a problem specific enough that no vendor pitch deck covers it, and no amount of googling turns up someone who’s already solved it. That’s the gap Archer Summit is built to close. Join more than 1,000 risk and compliance leaders working through exactly those […] The post 7 Reasons to Attend Archer Summit 2026 appeared first on Archer.
If you sell more than one product, you are probably sending the wrong security questionnaire answers to buyers without realizing it. Here is how to structure your knowledge base so the right answers surface for the right product, every time.
The most common vendor security questions SaaS teams face in 2026, with model answers and the reasoning behind each. Stop scrambling, start answering with confidence.
Last month, attackers used a stolen credential to hack competitive intelligence SaaS provider Klue. But the seeds of the attack apparently started four years earlier. Klue executives said that in 2022, the Vancouver-based company issued a credential to an unnamed third party for a limited pilot. An investigation by Crowdstrike later revealed the credential to … Continued
In our recent Marketplace Conversations webinar with GhostDraft and MEMIC, industry leaders explored a significant shift shaping organizations today
The wait is over: CMMC requirements are now appearing in DoD contracts, RFPs, & RFIs. CMMC Background Defense contractors handling controlled unclassified information (CUI) have been required to meet the 110 controls of NIST 800-171 since 2017. CMMC validates this compliance through independent assessments conducted by a C3PAO (CMMC Third-Party Assessor Organization). As Matt Travis, […] The post Countdown to Compliance: The CMMC Timeline appeared first on PreVeil.