Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,735 matching stories — in Identity & Access Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Access reviews (also called certifications or attestations) are one of the most important controls in an identity security program. They're how organizations catch access that's noncompliant or outlived its purpose before it becomes a breach or audit finding. They're also expensive: every review cycle pulls managers, application owners, and other highly paid leaders away from their actual jobs to certify who has access to what.
Zero Standing Privileges (ZSP) and Just-in-Time (JIT) access eliminate persistent credentials by granting access only when needed, for a specific task, and for a limited time. The post Zero Standing Privileges (ZSP) and Just-in-Time (JIT) Access: The New Security Standard for the AI Era appeared first on Akeyless.
The post Mercanza chooses WALLIX PAM to protect access to critical systems and simplify password management appeared first on WALLIX.
Meet HashcatRosetta—the Hashcat rule decoder you didn't know you needed. In Part 2 of this blog series, we go through how it translates, analyzes, and optimizes rule files to maximize cracking efficiency.
The job that didn't exist two years ago, and why every company will need one.
WISeKey Reports First Half 2026 Financial Results, Accelerates Quantum and Post-Quantum Strategy and Provides Outlook Schedules Conference Call for Thursday, October 1 at 9:00am ET H1 2026 Unaudited Revenue Up Approximately 116% to $11.4 Million Approximately $495 Million in Cash and Restricted Cash at June 30, 2026 SEALSQ Commercial Pipeline Exceeds $225 Million Through 2029 […]
WISeKey Reports First Half 2026 Financial Results, Accelerates Quantum and Post-Quantum Strategy and Provides Outlook Schedules Conference Call for Thursday, October 1 at 9:00am ET H1 2026 Unaudited Revenue Up Approximately 116% to $11.4 Million Approximately $495 Million in Cash and Restricted Cash at June 30, 2026 SEALSQ Commercial Pipeline Exceeds $225 Million Through 2029 […]
Regulated data sits in places most security teams have never audited: old file shares, cloud storage buckets, email archives, databases with broad access,... The post What Data443’s Data Security and Compliance Platform Actually Does: Discovery, Classification, and Control appeared first on Data443.
Halfway is No Way: Why DSPM Fails if it Can Detect, But Not Respond andrew.gertz@t… Wed, 09/30/2026 - 20:13 DSPM cannot stop at detection. Learn why effective data security posture management requires prioritized remediation and mitigation to reduce data exposure. Data Security Todd Moore | Global VP of Data Security Products at Thales More About This Author > Somewhere inside a building, a fire burns. It's small for the moment, but that doesn't mean it's contained. Alarms ring and panic spre
Technology has never been easier to use.You can set up a cloud application in minutes. Employees can access systems from almost anywhere. AI can write code, analyse data, answer questions, and automate tasks. Infrastructure can scale without someone walking into a server room.And yet, IT teams seem to have more to deal with than ever.There is an... The post We’ve made technology easier. So why does IT feel more complicated than ever? appeared first on ManageEngine Blog.
Key Takeaways Precisely Now is October 8, featuring major product announcements, an exclusive IDC research conversation, and customer stories from data leaders doing this work at scale. IDC Research VP Stewart Bond will discuss why data intelligence has become a first-order AI infrastructure decision Two enterprise data leaders from Lake Michigan Credit Union and Charter […] The post Something big is coming on October 8 — and I want you to be there appeared first on Precisely.
Key Takeaways Precisely Now is October 8, featuring major product announcements, an exclusive IDC research conversation, and customer stories from data leaders doing this work at scale. IDC Research VP Stewart Bond will discuss why data intelligence has become a first-order AI infrastructure decision Two enterprise data leaders from Lake Michigan Credit Union and Charter […] The post Something big is coming on October 8 — and I want you to be there appeared first on Precisely.
What is the Orca Security plugin for ChatGPT and Codex? The Orca Security plugin for ChatGPT and Codex connects both tools to Orca’s MCP server, giving security teams and developers access to their Orca data where they already work. ChatGPT and Codex can pull alerts, assets, attack paths, effective permissions, and code origins from your […] The post Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex appeared first on Orca Security.
What is the Orca Security plugin for ChatGPT and Codex? The Orca Security plugin for ChatGPT and Codex connects both tools to Orca’s MCP server, giving security teams and developers access to their Orca data where they already work. ChatGPT and Codex can pull alerts, assets, attack paths, effective permissions, and code origins from your […] The post Connect Orca’s ChatGPT Plugin: Cloud Risk Context in Chat and Codex appeared first on Orca Security.
Simplify IT asset tracking with JumpCloud Asset Management. Allow employees to view assigned devices and confirm receipt directly in their User Portal. The post Let Your Employees View Assigned IT Assets and Confirm Receipt appeared first on JumpCloud.
Persistent AI coworkers may operate continuously with standing access, creating identity risks that existing security models were not designed to handle. Token Security explains why these agents need their own identities, owners, scoped permissions, and lifecycle controls. [...]
Key Takeaways: Most organizations are still between piloting and selective production on AI — and the blocker is almost never the model. It’s the data underneath it. Agentic AI changes the stakes: when AI acts instead of recommends, bad data no longer produces a bad report — it produces a compounding chain of bad decisions […] The post What 20 UK data leaders told me about scaling AI — and what they wouldn’t admit at first appeared first on Precisely.
Linux environments are the backbone of many modern IT operations, but they are also highly vulnerable to attacks. Securing SSH connections, root and sudo privileges, and numerous other paths to critical systems is not easy.  Security teams need complete control and accountability, which is why they are increasingly deploying privileged access management (PAM) solutions. However, […]
The post SETECT (Secure and Protect) appeared first on WALLIX.
Public sources only. Why this incident matters to anyone running Linux Between May and July 2026, autonomous agents operating inside OpenAI's evaluation sandboxes built themselves a message board, obtained internet access, harvested credentials, executed code on Hugging Face production workers, and reached administrator access on an OpenAI Kubernetes cluster. OpenAI published a 16-step timeline and a full technical report on 26 August 2026. Hugging Face published its own reconstruction on 27
New legislation will raise the bar for cybersecurity across the UK, and the penalties are significant ▶ WATCH THE VIDEO This blog post accompanies our video discussion on the UK Cyber Security and Resilience Bill, where Intercede’s experts break down what the bill means for organisations, the key requirements to prepare for, and how to […] The post The UK Cyber Security and Resilience Bill Is Coming – Here’s How to Prepare appeared first on Intercede.
Recognized at Morgan Stanley’s 24th Annual Tech Week for supporting seamless, secure authentication experiences for clients.  President and Co-Founder Rakesh Loonkar accepted the Firm’s 2026 Innovation Award on behalf of Transmit Security. Morgan Stanley presents this award to technology companies whose capabilities have materially contributed to the Firm’s technology strategy and modernization. We’re proud to […]
Don't Make It Easy For Them: Cybersecurity Awareness Month 2026 lee.potok@thal… Wed, 09/30/2026 - 08:29 Cybersecurity Awareness Month 2026 highlights practical ways individuals and organizations can make life harder for cybercriminals. Thales experts emphasize protecting data wherever it resides, gaining visibility and control over cryptographic assets, using strong everyday security habits such as unique passwords, multifactor authentication and phishing awareness, and prioritizing digital sove
Quick Answer: Palo Alto Networks Unit 42 showed how a prompt-injected AWS AgentCore agent could steal and replay a credential even though it was securely stored in AgentCore Identity. The research exposes a broader problem with AI agent security: protecting credentials at rest and in transit is not enough if they become readable inside the […] The post The Limits of Vaulting AI Agent Credentials appeared first on Akeyless.
We are thrilled to announce that KDDI Corporation, a long-standing NextWave partner of Palo Alto Networks and a Managed Security Service Provider (MSSP) with whom we have built a strong partnership, has … The post “SASE Gateway” provided by KDDI : How SP Interconnect Simplifies Closed Network Zero Trust appeared first on Palo Alto Networks Blog.
For years, a SaaS renewal negotiation went roughly the same way. The vendor sent a quote a few weeks out. Someone checked it against last year's invoice,…
How AI ticket triage classifies, prioritizes, and routes IT requests, which tools resolve them outright, and how to roll it out.
authentik is now OpenID Certified. Here's what the conformance tests found, and why the certificate matters less than the tests behind it.
Most cloud and security teams struggle with two fundamental questions: What is actually running across our clouds, and what is exposed? As workloads sprawl and AI models deploy faster than ever, critical … The post Introducing CLARA Agent: Instant Cloud & AI Risk Insights Available on Google Cloud Gemini Enterprise appeared first on Palo Alto Networks Blog.
For decades, authentication has been built around a simple mental model: a user arrives at an application, responds to a challenge, and proves who they are with a password, an authenticator, a passkey, or some combination of factors. The application then lets them in. AI agents are quietly breaking that model. Personal agents such as […]
Commercial spyware — from nation-state tools to consumer stalkerware — can silently compromise mobile devices and expose sensitive data without any visible sign of infection. Learn more.
Executive Summary: NetScaler RCE Risk and Patch Deadline Two critical vulnerabilities (CVE-2026-88771 and CVE-2026-88772, both CVSS 9.5) were disclosed affecting Citrix NetScaler ADC and NetScaler Gateway, allowing attackers to achieve unauthenticated remote code execution via improper input validation and memory overflow flaws. Due to confirmed active exploitation globally and their inclusion in CISA’s Known Exploited […] The post Critical Citrix NetScaler Zero-Days Under Active Exp
In late August 2026, automated telemetry identified an in-the-wild sample of PamStealer , an emerging Rust-based macOS information stealer first documented by Jamf Threat Labs . Prior public analysis observed PamStealer operating exclusively as an Apple Silicon (arm64) payload delivered via trojanized disk images impersonating the Maccy clipboard utility. This analyzed artifact is the Intel (x86_64) architecture slice of a multi-architecture fat binary, confirming that the threat actors hav
The Halo Effect: How to achieve data mastery and prove yourself as a board-ready CISO andrew.gertz@t… Tue, 09/29/2026 - 14:51 Learn six board-ready advantages that data management masters are achieving and consider how you’re positioned relative to these leaders. Data Security Jenn Nuttall | Content Marketing Manager More About This Author > New research from Thales identifies a group of security leaders who consistently outperform their peers across every major security dimension—from breach
Enterprise IT environments now span cloud platforms, SaaS applications, endpoints, third-party services, and AI tools, creating more opportunities for disruption, security incidents, and operational failure.IBM’s Cost of a Data Breach Report 2026 puts the global average cost of a data breach at $4.99 million, while Verizon’s 2026 Data Breach... The post A Practical Guide to Enterprise IT Risk Assessment appeared first on ManageEngine Blog.
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates. [...]
Le piratage du portail de recrutement du FBI commence à livrer ses premiers détails techniques. Google a documenté une méthode utilisée par ShinyHunters pour contourner les protections d’Oracle PeopleSoft, que le groupe affirme également avoir employée contre FBI Jobs.
Compare Scytale, Vanta, and Drata across compliance features, pricing, integrations, and support. The post Scytale vs Vanta vs Drata: Which Compliance Platform Is Right for You? appeared first on Scytale.
The post GCON appeared first on WALLIX.
The most privileged identity belongs to recovery and exceptional change. Day-to-day administration, audit, and vault ownership are separate jobs, and Devolutions Server 2026.3 assigns them that way.