Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
840 matching stories — announcement, in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome (CVE-2026-85046, CVE-2026-87491) and one impacting Windows Advanced Local Procedure Call (CVE-2026-85880) to break
La police londonienne a arrêté deux hommes de 32 et 38 ans, soupçonnés d'administrer EvilTokens, pendant que Microsoft saisissait 50 sites web liés à ce service d'hameçonnage par abonnement. Depuis février, ses clients ont compromis plus de 12 000 boîtes mail Microsoft 365 sans jamais voler de mot de passe.
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first “LLM-as-C2” architecture that can fully automate the command-and-control (C2) chain. Dubbed CLOSEDQUORUM, the malware binary relies on a panel of large language model (LLM) judges to map and execute the
Diving into our ClickFix data to give you the key trends and developments as we close out 2026.
Microsoft has hailed its success in disrupting EvilTokens, an AI-powered a phishing-as-a-service (PhaaS) platform linked to more than 12,000 compromised Microsoft 365 inboxes across more than 10,000 organizations worldwide. Since February 2026, EvilTokens has offered a subscription platform combining account compromise, mailbox analysis, target selection, and fraud preparation. Its dashboard and chatbot centralized access to those capabilities, with a $1,500 initial sign-up fee and $500 monthly
CASB vs. SSPM vs. ITDR: Learn why legacy proxies fail at SaaS security and how Grip’s identity-first architecture stops non-human identity breaches.
Learn what SSPM is, how it works, and key evaluation criteria. See how Grip’s identity-first control plane outperforms legacy SaaS security tools.
Learn how to secure autonomous AI agents in SaaS. Discover how Grip governs agentic OAuth tokens, shadow AI sprawl, and machine identities.
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
OWASP built a catalogue of what goes wrong with machine credentials. It did not build a way to find out which ones you are carrying. Six of the ten risks cannot be answered from configuration or provisioning at all. OWASP shipped the Non-Human Identity Top 10 for an unglamorous reason. Every other Top Ten assumes a person is behind the login. Injection, broken access control, security misconfiguration, all of it written with a human somewhere in the loop, subject to onboarding, MFA, a...
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered something unusual.
Malicious automated traffic grew 9x in 12 months, and it's moving deeper into customer journeys. Learn more in DataDome's State of Bot & Agent Security Report.
Malicious automated traffic is growing 9x faster than human traffic. See what else the data reveals in the 2026 State of Bot & Agent Security Report.
New category from Software Analyst Cyber Research emerges to evaluate runtime Identity Security capabilities for AI agents.The post Runtime is where AI Agent Security gets real. New research unpacks the ARISE Framework. appeared first on Silverfort.
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the use of Apple
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
U.S. law enforcement extradites Black Axe leaders, emerging AI safety risks concern Frontier AI leaders, and autonomous OpenAI agents deploy proxy relays.
I've spent over 20 years in cybersecurity across endpoint, gateway, malware analysis, PKI and encryption, data protection, PQC, identity, authentication, CIAM, decentralized identity, and more recently, machine identity, or what the market now calls NHI. I came to identity as a cybersecurity person first, and that shapes how I think about everything that follows.
Defense in Depth for AI Agents: Five Layers of Security AI agents are no longer experimental. They're operating inside enterprise environments, invoking APIs, accessing sensitive data, and making decisions that impact real business systems.Yet unlike traditional applications, AI agents exhibit non-deterministic behavior, making static security controls and conventional access models insufficient on their own.
OpenAI and more than 100 organizations recently called for an urgent global effort to strengthen cyber defenses before AI-enabled attacks become more widespread and sophisticated. Their collective cyber defense letter identifies excessive permissions as a systemic weakness and recommends least privilege and stronger access controls as part of the response.
Explore how Claude AI in Salesforce introduces hidden data risks and what it means for enterprise SaaS and AI security.
Ralentir les modèles les plus puissants ne changera plus grand-chose, estime George Kurtz. Le patron de CrowdStrike veut désormais concentrer les efforts sur les agents autonomes, capables d’agir seuls et de contourner les protections prévues par leurs concepteurs.
Speed and clarity are the ultimate advantages for modern SOC teams. The integration of ANY.RUN into SentinelOne delivers exactly that. Instant threat intelligence and interactive sandbox capabilities embedded right where your analysts already work. Let’s look at how this unified workflow eliminates context switching, accelerates incident response, and drives higher ROI by transforming alerts into […] The post ANY.RUN & SentinelOne: One Workspace, Instant Context for Rapid Response appeared
Report identifies AuthMind as one of a small number of vendors with broad alignment across all three layers of the newly defined ARISE model for governing AI agent actions in real time BETHESDA, MD, September 15, 2026 -- AuthMind, the leader in identity observability-driven Agentic AI threat protection, today announced it has been named a representative vendor in a new report from Software Analyst Cyber Research (SACR), an independent analyst firm covering cybersecurity markets. Of the 13...
Use Orchid's AI Readiness Checklist to assess the identity foundation, guardrails, and auditability you should have in place before autonomous agents are deployed.
New AI-readiness tagging, continuous observability and orchestrated kill switches help enterprises scale AI agent adoption - without losing control
What security teams need to know about the browser-based attack techniques that are the leading cause of breaches.
The post Live Webinar: The 5-Layer Blueprint for Agentic AI Governance appeared first on PlainID.
A technical breakdown of the attack where hundreds of AI agents exploited two NG/MF flaws, reinforcing an AI attacker’s appetite for identity and credential abuse.The post PaperCut breach: What AI agent attacks teach us about Identity Security resilience appeared first on Silverfort.
BETHESDA, MD, UNITED STATES, September 10, 2026 - AuthMind, the leader in identity observability-driven agentic AI, NHI and user threat protection, today announced it has been included as a Representative Provider in the Gartner report, "Innovation Insight: Identity Visibility and Intelligence Platforms," published August 24, 2026. The report states, “Cybersecurity leaders must prioritize identity visibility and intelligence platform adoption. As AI usage continues to grow, IVIP provides...
Web Bot Auth and Know Your Agent verify identity. But they can't tell you what an agent is doing right now. Here's what complete protection looks like.