0-Doubt

Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

840 matching stories — announcement, in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Smashing Security podcast #487: Clippy’s crypto comeback

Microsoft's Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft, just Clippy, a dodgy crypto coin, and a corporate apology that wasn't from Microsoft either. Meanwhile, UK losses from hacked email and social media accounts have rocketed by 417%, as scammers pose as your friends to flog you tickets to gigs that don't exist. Plus, Hack The Box's Christine Bartlett joins us for a featured interview to ask what happens when AI agents joi

MicrosoftIndustry coverage
Announcement

Microsoft, Adobe, Apple, and Foxit vulnerabilities

Cisco Talos’ Vulnerability Discovery & Research team recently disclosed vulnerabilities in Adobe, Apple, Foxit Reader, and Microsoft.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, in adherence to Cisco’s third-party vulnerability disclosure policy. For Snort coverage that can detect

CiscoMicrosoftIndustry coverage
Announcement

Your Agentic SOC Can Reason. Now, With AuthMind, It Has Identity Context.

Agentic SOCs are changing how security teams work. Agents triage alerts, investigate detections, correlate signals, and draft response plans around the clock, and for teams covering more environments without more headcount, that's a big shift. AuthMind now seamlessly plugs into that workflow to solve two critical areas: SOC agents get deep identity context behind every alert, and they get identity threat detections for attacks that never show up as a failed login or a flagged email. Identity...

AuthMindVendor blog
Announcement

3 lessons from frontier AI vulnerability research

Read how How Microsoft Security's FORGE Lab is scaling vulnerability research from Windows to the Linux kernel. The post 3 lessons from frontier AI vulnerability research appeared first on Microsoft Security Blog.

MicrosoftIndustry coverage
Announcement

How to Evaluate Enterprise Passwordless Platforms

Passwordless Authentication Solutions: Must-Have Features in 2026 Get a breakdown of essential capabilities for passwordless authentication solutions and questions for prospective buyers to ask when evaluating vendors. Passwords and knowledge-based authentication factors can be a major headache for security and IT teams. Stolen and reused credentials are still behind the majority of enterprise breaches, IT help desks lose thousands of hours a year to password resets alone, off-the-shelf phishing

HYPRVendor blog
Announcement

Exchange Server SE Hardening: 10 Ways to Secure Your Server

Exchange Server Subscription Edition (SE) is now the only supported version of on-premises Exchange, and it’s among the most targeted systems in the enterprise. Exchange Server SE hardening should be the first project after migration, not an afterthought. Microsoft Exchange Server Remains a Prime Target In May 2026, attackers began actively exploiting CVE-2026-42897, a critical [...] The post Exchange Server SE Hardening: 10 Ways to Secure Your Server appeared first on Messageware.

MessagewareVendor blog
Announcement

No App Left Ungoverned: Onboarding Apps with Claude

AI adoption means more identities generating access requests to enterprise applications and critical information. This also puts more pressure on security teams to bring applications under governance quickly, rather than leaving access unmanaged across the organization.

SaviyntVendor blog
Announcement

Microsoft Reissues September 2026 Exchange Server Updates

Microsoft re-released its September 2026 Security Updates (SUs) for on-premises Exchange Server. The new "V2" packages add a fix for CVE-2026-96940, an authorization flaw that can let a signed-in user reach mailboxes that are not their own. If you installed the original September update, your servers are not protected against this issue. The V2 package [...] The post Microsoft Reissues September 2026 Exchange Server Updates appeared first on Messageware.

MessagewareVendor blog
Announcement

JadePuffer (Storm-3168): An AI Agent Wiped 100+ Azure Storage Accounts in Seven Minutes

In early June 2026, an AI-driven operator tracked as JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals to map a tenant, then made 100+ storage account deletion attempts in about seven minutes. Most succeeded. There was no malware and no exploit inside Azure. Every action was a normal Azure Resource Manager call, allowed by roles the identities already held. We walk the full chain — the 16-hour recon window, the inherited RBAC that gave it the blast radius, and the

SlashIDVendor blog
Announcement

Bill Gates Says Monitor AI. Here's What Controls Must Come Next.

Bill Gates was interviewed on Meet the Press talking about AI kill switches. He said "it's not enough to have a kill switch," and that companies should monitor powerful AI systems and keep records of "exactly what's being done." He also drew a clear line: "The thing that's urgent has to do with bad people using AI, not the AI going off on its own." I agree with Gates on one thing. You need visibility, and you need to be able to audit it. Every enterprise should know what agents it has, what they

HYPRVendor blog
Announcement

Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign

Government and policy organizations across Asia have become the target of a new campaign orchestrated by a China-nexus threat actor. The activity, which has targeted government and policy organizations in Taiwan, India, the Philippines, Cambodia, Pakistan, Thailand, and Myanmar, involves the deployment of a previously undocumented backdoor codenamed Antino. Cisco Talos is tracking the cluster

CiscoIndustry coverage
Announcement

Cisco SD-WAN Manager hit by zero-day admin access attack

Cisco’s SD-WAN management software has been letting some attackers walk through an authentication check without having to prove who they are. The company says it has now fixed the flaw that was allowing it. The affected platform, Cisco Catalyst SD-WAN Manager, is used to configure and operate software-defined network deployments. Cisco said in an advisory that improper handling of URI encoding in HTTP requests enabled attackers to get around an authentication control meant to restrict access to

CiscoIndustry coverage
Announcement

10 Access Review Best Practices to Stop Rubber-Stamping | Saviynt

Access reviews (also called certifications or attestations) are one of the most important controls in an identity security program. They're how organizations catch access that's noncompliant or outlived its purpose before it becomes a breach or audit finding. They're also expensive: every review cycle pulls managers, application owners, and other highly paid leaders away from their actual jobs to certify who has access to what.

SaviyntVendor blog
Announcement

What Is ARISE? The New Category Defining Agentic Runtime Identity Security

An agent holds a valid token, it calls an approved tool. Every individual step in the chain passes authorization, because every individual step was designed to pass. The chain as a whole does something nobody sanctioned, and by the time the alert lands in a queue, the agent finished nineteen minutes ago. That gap is why Software Analyst Cyber Research named a new category this month. ARISE, Agentic Runtime Identity Security Enforcement, exists to answer one question: should this agent be...

AuthMindVendor blog
Announcement

AuthMind Data Reveals One in Five AI Agents Operating in Enterprise Environments as Shadow Agents

Expanded agentic AI discovery capabilities identify coding, user-assisted, autonomous and shadow AI agents by observing what they do on the network. BETHESDA, Md. – 29 Sep 2026 – AuthMind, the leader in identity observability-driven Agentic AI threat protection, today announced that approximately 20 percent of AI agents running inside enterprise environments are shadow agents that security teams don't know exist, according to the latest AuthMind deployment data. The findings come from...

AuthMindVendor blog