Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
840 matching stories — announcement, in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Silverfort Research. We reported this to Anthropic under coordinated disclosure. This post is the defensive companion: how the weakness works, and how defenders catch it. The post Skipping the lock: A Claude Code CLI weakness lets any macOS process read stored credentials appeared first on Silverfort.
On July 23, 2026, a bug in Microsoft's automated network maintenance system triggered a nearly five-hour outage across Microsoft 365 and Azure, cutting off a West US datacenter from Microsoft's global network. What happened The outage started at 10:44 AM ET during routine maintenance meant to isolate specific network paths in Microsoft's West US Azure [...] The post Microsoft 365 Outage: Bug Takes Down Microsoft 365 for Hours appeared first on Messageware.
Across nearly every enterprise, two conversations are happening at the same time.
This is a webinar recap featuring Ken Huang, Co-chair, AI Safety Working Group, Cloud Security… The post Runtime Authorization for Agentic AI: Fixing the Three Breakpoints in Legacy IAM appeared first on PlainID.
Why Fuzed Identity Intelligence is Becoming Essential to Enterprise Security For years, enterprises have treated a digital identity as an internal construct. An employee had a corporate email address, a directory account, assigned devices, application entitlements, and a set of credentials. Security teams protected those assets through Identity and Access Management (IAM) solutions, Multi-Factor Authentication […]
Browser security means a lot of different things depending on who's talking. Here's your guide to the browser security market from a vendor perspective in 2026.
The Gartner® 2026 Hype Cycle™ for Digital Identity explains how “The digital identity landscape is being transformed by AI agents, identity visibility and identity threats. Cybersecurity leaders should use this Hype Cycle to foster innovation and investment to securely enable an adaptable digital business.” In our opinion, this year’s report spans the full range—from emerging […]The post Our 3 takeaways from the 2026 Gartner® Hype Cycle™ for Digital Identity appeared first on Silverf
Most security leaders I talk to assume that agentic AI means they need to go build something new, whether that is a new team, a new function, or a new box in the org chart that owns “AI risk.” They don’t, at least not yet. Here is the thing almost nobody says out loud: the […] The post You Already Have the Team to Handle Agentic Insider Threat. You Just Haven't Aligned It appeared first on Reveal.
Most security leaders I talk to assume that agentic AI means they need to go build something new, whether that is a new team, a new function, or a new box in the org chart that owns “AI risk.” They don’t, at least not yet. Here is the thing almost nobody says out loud: the […] The post You Already Have the Team to Handle Agentic Insider Threat. You Just Haven't Aligned It appeared first on Reveal.
Authorities arrest Kratos's developer, HollowGraph hides C2 in 2050 calendar events, and OpenAI's models breach Hugging Face to steal benchmark answers.
Transform expert SOC analysis into an on-demand AI capability to empower all analysts and accelerate threat resolution.
The Five Eyes AI cyber guidance frames AI-accelerated cyber risk as a reason to strengthen foundational controls. Privileged access deserves close review because standing privileges leave powerful access available before it is needed and after the work is done. Modern PAM helps reduce that risk by removing persistent access, enforcing just-in-time privilege, and governing privileged access across human, non-human, cloud, and AI-connected identities. That requires treating privilege as a spectrum
This week’s news on the OpenAI/Hugging Face security incident marks a pivotal moment in cybersecurity: it’s the first time that a fully autonomous attack chain—without a human in the loop for command-and-control decision-making—has been observed. We’ve been observing this trend for at least the last year: LLMs are increasingly capable of running advanced attack chains […]The post Hugging Face security incident explained: The rise of autonomous AI-powered attacks appeared first
The ratio of human to non-human identities in modern enterprises has reached a staggering 1:82.1 For every employee, contractor, or partner, there are now dozens (if not hundreds) of machine identities, service accounts, API keys, and autonomous AI agents operating across production environments.
Our recent two-part deepfake series explored both sides of the AI identity challenge: first, how surprisingly easy it has become to create a convincing deepfake identity, and then how layered identity verification can defend against it. If you missed them, you can watch Part 1: How to Set Up a Deepfake and Part 2: How to Defend Against a Deepfake.
Nobody knowingly provisions a shadow AI agent. It doesn't go through change management, it doesn't get a ticket, and it doesn't show up on an asset inventory. It can spin up immediately the moment an employee installs a GenAI coding assistant, connects a personal account to a SaaS tool or lets one autonomous workflow kick off another. No announcement, no human approval, no visibility. And then, these unknown AI agents become another active identity in our environment, an identity we did not...
DataDome blocked 18.8M ticket scalping attempts from a purpose-built CAPTCHA farm spanning 3.2M IPs and 22,000+ autonomous systems. Here's how.
Discover how a filepath.Join misconception caused cross-tenant path traversal vulnerabilities in Kubernetes CSI drivers.
The post When Software Acts on Behalf of Users, Who’s Really in Control? appeared first on PlainID.
Security outcomes you can achieve when AI agents hunt in the browser, identify new threats, and ship detections that benefit everyone.
Published: Jul 21, 2026. Vectra AI Research Highlights a New Reality for Attack Exposure Management in AI-Powered Enterprises . Visit our news releases page to read more!
Audit prep often starts with a scramble. Teams pull evidence from disconnected systems, chase overdue access reviews, and try to answer ownership questions that should have been settled months earlier. By then, the access certification process may already be stale because access has changed after the review began.
I have had dozens of conversations with security leaders over the last couple of months. Prospects, CISOs, practitioners, people I met walking the floor at Gartner. Different industries, different company sizes, different stacks. And almost every one of them, in their own way, said the same thing to me. They are anxious about AI. Not […] The post Notes From the Front Lines: The AI Problem Security Leaders Keep Telling Me Is New appeared first on Reveal.
A real-money gaming platform had 3 layers of bot protection and was still missing fraud. DataDome detected 27–37x more than their existing bot vendor.
Looking for account takeover prevention methods? Discover the steps to preventing all levels of ATO fraud, how to detect attacks, & how to mitigate risks.
Learn what AI Sprawl is, why AI agents and non-human identities are expanding enterprise risk, and how identity-first governance helps secure modern SaaS enviro
What is the Passkey Provisioning API? The Passkey Provisioning API enables organizations to issue passkeys to employees directly, instead of relying on each user to set one up through self-service enrollment.
Enterprise security teams are starting to build instead of buy. Generative AI has lowered the barrier (and cost) to creating internal security tooling, custom detection workflows, automated investigation pipelines and risk-scoring engines tailored to their specific environment. The productivity case is compelling enough that the build-vs-buy math is changing for the first time in years. It’s early, and while this is not yet the norm, it will be soon. But, the organizations moving in this...
Three vishing case files from one month at a retail help desk: every call sounded fine, and every flag came from the signals underneath it, not the voice on it. The post Vishing Hit a Retail Help Desk for a Month. The Tell Was Never in the Voice. appeared first on imper.ai.
What does help desk vishing look like in the wild? Across 450 password reset attempts in one month, imper.ai surfaced coordinated impersonation patterns that individual calls alone would have missed. The post Case Files from the Help Desk: A Month of Vishing (Q2 2026) appeared first on imper.ai.
Part 1 showed the illicit consent grant done by hand. Part 2 shows its close cousin — device-code phishing — now sold as a ready-made kit, with AI writing the lures and reading the stolen mailbox. We analyze two Phishing-as-a-Service platforms, EvilTokens and the FBI-flagged Kali365, walk the device-code attack through the same three phases from Part 1, and share what a sandboxed reconstruction taught us — then map detection and mitigation to the SlashID identity layer.
Part 1 showed the illicit consent grant done by hand. Part 2 shows its close cousin — device-code phishing — now sold as a ready-made kit, with AI writing the lures and reading the stolen mailbox. We analyze two Phishing-as-a-Service platforms, EvilTokens and the FBI-flagged Kali365, walk the device-code attack through the same three phases from Part 1, and share what a sandboxed reconstruction taught us — then map detection and mitigation to the SlashID identity layer.
Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant fixed in its record-smashing Patch Tuesday release last month. Microsoft attributed the burgeoning patch counts to vulnerability discoveries aided by artificial intelligence.