Exela Pharma Sciences Reduces Attack Surface with Reco
Discover how Exela Pharma Sciences used Reco to identify 218 shadow applications, remediate misconfigurations, and enhance their SaaS security posture.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
840 matching stories — announcement, in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
5 Misconfigurations Mythos-Class AI Could Find in Your Stack
Mythos-class AI doesn't need sophisticated targets. It needs defaults. Here are 5 common misconfigurations Reco surfaces across enterprise environments.
How to secure edge AI in customer-owned environments
As AI moves into customer-owned environments, organizations need new ways to verify the systems, software, and AI assets they trust before releasing sensitive data, credentials, and models. The post How to secure edge AI in customer-owned environments appeared first on Microsoft Security Blog.
AI Identity Governance: A CISO’s Guide
AI adoption is no longer a future concern; it’s already happening. Organizations — and their users — are deploying AI through applications and developer tools, whether it’s sanctioned or not. Meanwhile, agents are accessing data, interacting with systems, and taking action with limited human oversight or intervention.
153 Million Reasons Document Verification Isn’t Identity Assurance
A government-issued ID has long been treated as one of the strongest forms of proof that someone is who they claim to be. But what happens when hundreds of millions of those identity documents fall into the wrong hands?
ASCII smuggling crosses over from AI prompt injection to phishing evasion
Invisible Unicode characters popularized for hiding instructions from AI models are now being used to obfuscate words before email filters parse them. The post ASCII smuggling crosses over from AI prompt injection to phishing evasion appeared first on Microsoft Security Blog.
It’s the swan song of traditional PAM, and that’s good news for security
Protecting privileged identities remains one of the biggest security challenges organizations face today. Yet, it’s time we admit it: the approach taken to solve this problem for nearly three decades has utterly failed. IAM teams were driven to buy tools that were supposed to protect them. In practice, they only gained a false sense of security.   Customers we speak with tell us the same story: millions spent on PAM solutions, only to protect a few hundred accounts, at m
Proofpoint Brings OpenAI GPT Cyber Models into Security Operations to Help Defenders Investigate Threats Faster
Microsoft 365 Outage, Exchange, Teams & SharePoint hit by Authentication failure
Summary On August 31, 2026, Microsoft 365 went down for a large swath of users worldwide. It started with Exchange Online and Outlook, then spread to Teams, SharePoint, OneDrive for Business, Microsoft Purview, Defender XDR, Copilot, and Universal Print. Full recovery took roughly 48 hours, with a handful of services still limping days later. Timeline [...] The post Microsoft 365 Outage, Exchange, Teams & SharePoint hit by Authentication failure appeared first on Messageware.
Analyzing a Go-Based IoT Self-Propagating DDoS Botnet
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based implant. Learn how attackers move from social engineering to lateral movement using legitimate tools, and how Microsoft Defender helps detect and disrupt the activity. The post Impersonating IT support: how threat actors turn a remote session into enterprise-wide access appeared first on Microsoft S
Governing AI Agents: The 5-Layer Blueprint for Agentic IAM
Every industrial revolution has forced organizations to master a new control discipline—and the scaling of… The post Governing AI Agents: The 5-Layer Blueprint for Agentic IAM appeared first on PlainID.
Gartner's Latest Take on Identity Visibility and Intelligence Platforms Validates AuthMind’s Approach
AI agents are showing up across the enterprise faster than security teams can track them. Many now hold credentials, touch systems, and make decisions, all without a human reviewing every (or any) step. That gap is a big part of why Gartner's continued coverage of the Identity Visibility and Intelligence Platforms (IVIP) category, a space Gartner has been tracking for about a year now, is worth paying attention to now, not down the road. Why This Category Continues to Gain Momentum Gartner's...
AI Governance & SaaS Security | Grip Security
Learn why AI governance and SaaS security must work together, and why identity is the foundation for securing AI access, permissions, and risk.
Your DNS Is Hiding in HTTPS — This Is Why It Matters
Discover why unmanaged DNS over HTTPS (DoH) creates security visibility gaps and how a controlled DoH strategy restores visibility without compromising privacy.
Why Access Reviews Miss Application Risk | Saviynt
Periodic access reviews have long been the default for managing identity risk and maintaining regulatory compliance. These reviews were designed when most identity risks came from human users, who follow the “joiner, mover, leaver” pattern of access changes. Additionally, core business risks and functions were encapsulated within a single business application, allowing reviews to be scoped around individual applications.
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Delivers the Next Evolution of the Agentic SOC
The Privilege Spectrum & Zero Standing Privilege | Saviynt
Executive summary Traditional privileged access management (PAM) was built for a smaller, more predictable set of administrator and technical accounts. Modern enterprises now depend on workforce users, service accounts, cloud workloads and AI agents that can all hold consequential access, with widely different levels of authority, autonomy and potential impact.
Effectively Managing Secret Rotation: How AuthMind Keeps Every Secret Current
A rotation policy is only as secure as the process that detects and keeps every secret moving on schedule. All rotation & secret security policies should be built around a cadence, rotate this secret type every two weeks, every month, etc. Getting that right at scale means more than simply writing the policy. It means observing, continuously, whether every secret is actually adhering to it, not just whether a rotation happened at some point in the past. This can be an easily solvable problem
Netskope Joins CrowdStrike QuiltWorks + 3 Major New Integrations
Most attacks today move faster than a human analyst can read a dashboard. AI agents, non-human identities, and automated SaaS workflows now touch as much sensitive data as the people who deployed them, and each one adds another blind spot a security team has to awkwardly bend their neck to try to watch. Understanding risk […]
AI Prompt Risk Depends on Context, Not the Prompt
Discover why prompt risk depends on context. Learn how AI runtime security uses identity, permissions, and activity signals to protect browser-based AI use.
From a Stolen Login to a Ransomware Leak Site: What Our Telemetry Shows About the Path Threat Actors Take
A ransomware disclosure and a credential package we track from an entirely separate source, read side by side, illustrate a pattern our research team sees again and again: the quiet theft of a single login can be the first domino in a breach that ends, months later, on a dark web leak site. Reading time […]
AI Agent Security: A Guide to Autonomous Access
Learn how AI agents create new identity and access risks, what determines their blast radius, and how security teams can govern autonomous access.
How to Get Started with Authorization Strategy
Most enterprises already feel the pressure to upgrade their authorization systems to meet the requirements:… The post How to Get Started with Authorization Strategy appeared first on PlainID.
The Authorized Table | IAM Leaders Dinner – Chicago
PlainID is hosting The Authorized Table | Austin on August 10 – an intimate, invite-only… The post The Authorized Table | IAM Leaders Dinner – Chicago appeared first on PlainID.
Shifting the Standard: Akamai’s Transition to the IFRS S2 Climate Disclosure
The Good, the Bad and the Ugly in Cybersecurity – Week 35 (2026)
Authorities disrupt global cybercrime rings, attackers abuse DocuSign in NovaCookies phishing, and Spark RAT targets Cambodia with vulnerable drivers.
Rethink Hybrid Identity: It Is Not the Destination
How We Got Here Hybrid identity emerged as a byproduct of enterprise cloud and SaaS adoption.As organizations adopted cloud productivity platforms, collaboration services, SaaS applications, and cloud-hosted business systems, hybrid identity became a practical transition model. It enabled enterprises to bridge existing on-premises identity infrastructure with newly adopted cloud services.The mechanism was straightforward: synchronization. Workforce user identities that already existed in on-prem
Introducing DataDome’s Hosted MCP Server for Direct AI Agent Access to Trend Reports
DataDome's hosted MCP server lets AI agents query Trend Reports data directly, in natural language—bringing data insights into the tools your team already uses.
Never Rotated, Still Trusted: How AuthMind Detects and Remediates Unrotated Secrets
A secret that was supposed to rotate within days. It never did, and nothing stopped it from working anyway. Rotation policies usually come with a window: rotate this secret within seven days, thirty days, whatever the policy defines. The assumption is that the window gets enforced. In practice, enforcing it and verifying it happened are two different things, and the second one is a lot easier to miss. A secret can sit past its rotation window indefinitely, still authenticating, still pulling...
Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter
A joint Tenable-SentinelOne analysis of 93 CVE-actor attribution pairs reveals that both state-sponsored actors and cybercriminals independently converge on the same edge infrastructure. Special thanks to SentinelOne® Incident Readiness & Response for their contributions to this publication.It is the shared attack surface where state-sponsored threat actors and financially motivated criminal groups independently converge — not the province of a single adversary category, and not exclusively
Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who's Exploiting Your Perimeter
A new joint study by Tenable and SentinelOne reveals how state and criminal groups converge on the same vulnerable edge infrastructure.
The NHI Ghosts You Inherit From Every Forced Migration
Every forced platform migration leaves behind non-human identities that still hold full permissions but no longer do anything. Here is why that keeps happening, and what has to be true before you can safely turn any of them off. The short version There has not been a 12-month window since 2022 where a migration wasn’t […] The post The NHI Ghosts You Inherit From Every Forced Migration appeared first on Reveal.
New Passkey Attacks Explained: What Security Researchers Found This August
Every August, Black Hat and DEF CON turn Las Vegas into what security people only half jokingly call hacker summer camp. This year the nickname earned itself twice over. This week a Delta flight out of Las Vegas landed under investigation for an unauthorized Wi-Fi network onboard, reportedly the work of DEF CON attendees testing gear at 30,000 feet. Delta says no actual aircraft system was compromised, but the timing made it a fitting mascot for the week's real headline. Black Hat USA 2026 ran t
9 Proofpoint alternatives. Pros & cons of the leading options
Proofpoint catches malicious traffic and blocks data exfiltration well, with solid coverage for business email compromise, phishing, and malware. But it’s built for the enterprise, and it shows. G2 reviewers flagged a steep learning curve and steep pricing, and suggested Proofpoint’s support would need improving. The platform’s also in flux. Proofpoint closed a $1.8 billion […] The post 9 Proofpoint alternatives. Pros & cons of the leading options appeared first on Heimdal
The Rise of Service-Centric Credential Compilations
How Cybercriminals Are Repackaging Infostealer Data Over the last year, the underground economy has undergone a significant transformation. Cybercriminals are no longer focused on distributing massive collections of raw infostealer logs, they are increasingly investing time in organizing and enriching stolen information into service-specific compilations. These datasets are no longer random collections of credentials extracted […]
Authorization phishing: why attackers stopped targeting the login
Why attackers are pivoting to authorization attacks to get around authentication controls, how they work, and what security teams can do about them.
IGA Is Only as Complete as the Identities It Can See
Orchid and SailPoint are expanding IGA coverage by helping organizations discover hidden identities, understand access, and bring more of the identity estate under governance.
DDR5 scalper bots now outnumber shoppers 10 to 1
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.