Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,668 matching stories — announcement, in Identity & Access Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Picking an OpenZiti alternative depends on the layer you need to replace. Compare ZTNA and overlay networking, self-hosted identity providers, OAuth2 and OIDC token services, and reverse proxy login gateways, plus where Cerbos handles fine-grained authorization once identity and connectivity are already solved.
The post The Account Nobody Remembered: Residual Access, Offboarding Debt, and Why the Vault Isn’t the Fix appeared first on Unixi.
…
These days, we see no shortage of headlines: news of a «Q-Day» that keeps inching closer and big breakthroughs in quantum computing. If you follow any of it, you've probably felt a flicker of unease about what it all means for the security we rely on every day: the security behind our messages, our payments, and the digital infrastructure we all depend on.
Access provisioning controls who gets access to what and when. Learn what the process looks like and how to reduce risk without compromising speed.
On August 2, 2026, Productiv told customers its SaaS management platform was shutting down on August 6, with account data deleted once access ended. Four days is not much time to pull years of app inventory, spend, and usage data out of a system you've come to depend on, especially with AI tools now adding a fast-moving new layer of spend and access to track on top of everything else. If you're facing that deadline, or just taking stock of what you'd do if your own platform disappeared tomorrow,
See how Akeyless Agentic Runtime Authority enables secure AI agent access with just-in-time credentials, runtime policy enforcement, and full auditability. The post Securing AI Agents in Claude with Akeyless appeared first on Akeyless.
A friend who runs data engineering at a mid-sized logistics company once showed me something that made me laugh, and then made me a little sad. Her team spent four months building a chatbot that was supposed to answer simple questions like "how many shipments are delayed in the Chennai warehouse right now." The bot worked beautifully in the demo.... The post Enterprise AI isn't broken; your data is broken appeared first on ManageEngine Blog.
Identity and access management has grown up inside the Fortune 500. The function now reports… The post What 20 Fortune 500 IAM Leadership Titles Reveal About the Agent Authorization Gap appeared first on PlainID.
Jamf Threat Labs uncovers a macOS campaign using a fake Zoom installer to deploy Overlord RAT. Built with .NET, this cross-platform technique simultaneously targets Windows, joining Go- and Rust-based cross-platform malware.
A technical breakdown of the Stryker cyberattack: how attackers used Microsoft Intune and a compromised admin account to remotely wipe 200,000 devices.
A frontier lab just lost control of its models - the clearest signal yet that access control built for humans won't scale to autonomous software. Why I'm coming back to Lumos to lead Lumos Labs, and what we're setting out to build.
Key Takeaways Organizations with formal data governance programs are 21% more likely to report high trust in their data than those without one. This is a critical disconnect when AI is in the picture. The highest-performing organizations aren’t running data strategy and data governance as separate tracks; they’re running them together, and that alignment is what separates durable AI programs from expensive pilots. AI […] The post Data Governance For AI Readiness: The Foundation
Modern enterprise security is at a pivotal moment where CIOs and CISOs have a clear opportunity to build a cybersecurity architecture for both today’s environment, and for the future. Doing so requires … The post Redefining Network Security for the Frontier AI Era appeared first on Palo Alto Networks Blog.
Understand the Cyber Essentials Plus certification process, technical requirements, and best practices for achieving compliance. The post Cyber Essentials Plus Checklist for 2026 appeared first on Scytale.
mRemoteNG and Remote Desktop Manager both organize remote connections, but they serve different needs. This 2026 refresh covers protocols, credentials, team governance, VPN-less access, platforms, and what each free option actually includes.
Devolutions Academy now offers a PowerShell Universal learning path created with JackedProgrammer: 17 practical videos, available on Academy and on YouTube, so you can learn where you prefer.
For years, privileged access management (PAM) focused on protecting human administrators. The biggest concerns were compromised credentials, privileged insiders, and ensuring that administrators had only the access they needed to perform their jobs.
C1's Field CISO on the seven failure patterns that kill enterprise AI programs — shadow tool sprawl, SSO mistaken for authorization, shared service accounts, policy nobody reads, and the review board reborn as an AI Council — and how to convert a gating function into an enabling one.
Transport Layer Security: the compliance checkbox that's harder to get right than it looks. In this blog, we cover the most common TLS misconfigurations and what organizations need to know to meet the standard.
CI Fortify directs critical infrastructure operators to prepare for OT isolation. Learn why communications continuity is essential to coordinating response when normal systems are unavailable or no longer trusted.
Zero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI. In this episode, 1Password VP, GM of Developer and AI, Jeff Malnick sits in for Dev. When Maxim Fateev, CTO and co-founder of Temporal, joined Zero-Shot Learning, he brought a historical perspective to the challenges developers fac
Earlier this year, a bill arrived from one of 1Password’s AI vendors for 5x the value of the original contract. The initial agreement came in below a certain threshold, so it never reached the right approvers for review. By the time it did, we had a much clearer understanding of how quickly AI costs can add up.This unpleasant surprise revealed a structural gap between IT, Finance, and end users when it came to AI billing and consumption. Although Finance was accountable for the budget, it had no
GitHub's new 2FA rules close npm's biggest attack path. Learn what changed, why it happened, and what it means for every credential in your CI pipeline. The post npm Just Killed the Skeleton Key: What It Means for Every Other Credential You Own appeared first on Akeyless.
Every Patch Tuesday starts the same way: New patches become available, and administrators begin answering the question, Is this patch safe to deploy?That answer rarely comes from a single place. Most administrators read the vendor's knowledge base article, look for known issues, monitor community discussions, and wait for early deployment feedback... The post Patch Reliability Score: Make patch deployment decisions with confidence appeared first on ManageEngine Blog.
The Next Generation of HSMs: Building the Foundation for a Quantum-Safe, Crypto-Agile Future andrew.gertz@t… Mon, 08/03/2026 - 17:04 Discover how next-generation HSMs support post-quantum cryptography, crypto agility, secure multi-tenancy, scalable performance and lasting digital trust. Data Security Encryption Key Management Regulation and compliance John Ray | Director, HSM Product Management More About This Author > Why HSMs Are Entering a New Era of Digital TrustCryptography has become an
OpenAI's models escaped a sandbox and breached Hugging Face to cheat on a test. What the first rogue-agent incident means for enterprise AI agent security
Microsoft just set a hard deadline for the end of SMS authentication. Starting September 1, 2026, passkeys become the default sign-in experience in Entra ID. On February 1, 2027, Microsoft retires its SMS and voice delivery entirely, and users without another method will hit a blocking registration prompt. We broke down the full timeline, who is affected, and the three realistic paths forward in the blog. The post Microsoft Is Retiring SMS Authentication: What the Entra ID Passkey Mandate Means
Learn NIST SP 800-53, its control families, baselines, and compliance requirements to prepare for assessment. The post NIST SP 800-53: Everything You Need to Know appeared first on Scytale.
Executive Summary: Qilin (formerly Agenda) is a financially motivated Ransomware-as-a-Service (RaaS) group that has been active since 2022. The group operates a mature affiliate program that provides ransomware payloads, negotiation support, data leak infrastructure, and additional services such as legal assistance and spam campaigns. Qilin targets organizations across multiple sectors, including healthcare, manufacturing, finance, government, […]
Your IdP proves who an AI agent is. DORA also expects you to control what it can do at runtime, which is authorization, not authentication. This guide covers where agents fall into DORA scope, how runtime authorization maps to Article 9 and audit requirements, and the steps to take while agents are still early.
The European Commission began enforcing the AI Act's transparency rules on August 2, 2026. Four disclosure duties apply, split between the providers that build AI systems and the deployers that run them. Fines reach 15 million euros or 3% of worldwide turnover, whichever is higher.
A recap of C1 Launch Week: shadow AI discovery, Agentic Vault, agent runtime governance, and agentic security and intelligence. Four launches, one control plane for governing every AI agent, secret, and non-human identity.
Most public safety agencies report progress on CJIS compliance, but many still face gaps in MFA, access control, and audit readiness before October 2027.
Zug, 3 August 2026 Decision of the Takeover Board 947/01 dated 30 July 2026 concerning WISeKey International Holding AG / WISeKey International Corp. on the request of WISeKey International Holding AG and WISeKey International Corp. regarding the determination of validity of an opting-out clause On 30 July 2026, the Takeover Board rendered the following decision […]
The Okta Red Team discovered a Denial of Service (DoS) vulnerability in HTTP/2 Flow Control.
CISA and Five Eyes agencies release joint OT isolation blueprint amid active water utility attack
Productiv, Inc. shut down on August 6, 2026. Public records show a June 25 assignment for the benefit of creditors. What happened, and what to do now.
IAM was built to govern the login event. AI agents don't have one. A new wave of "AI-native" IGA platforms is selling faster connectors and cleaner dashboards as innovation — but it's the same declarative model with better onboarding. This piece walks through where IAM came from, where that model is already breaking under AI agents, and why the industry needs a control plane, not another rebrand. You can't govern what you can't see.
Orchid's new integration with Palo Alto Networks Idira® helps security teams discover hidden privileged identities, add critical context, and bring them into an established privileged access workflow.