Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
840 matching stories — announcement, in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Every year, the Verizon Data Breach Investigations Report lands as the closest thing the security industry has to a ground truth. It's not a vendor survey. It's not a think piece. It's incident data from thousands of real breaches, analyzed by a team that has been doing this for nearly two decades. When the DBIR says something is happening, it's happening. The 2026 edition dropped last month, and I've spent time with it. What struck me most isn't any single finding. It's the pattern running...
What is a Man-in-the-Middle Attack? A man-in-the-middle (MitM) attack is a type of cyberattack where a perpetrator positions themself in a conversation between two parties — two users, or a user and an application or server — so that all communications are going to or through the attacker. The attacker can also play both sides, stealing the information a user sends to a server (such as login credentials, account details and credit card numbers) while also sending corrupted packets (such as malwa
AI agents aren't waiting for your Identity and governance programs to catch up. They're already being deployed in your environment, authenticating to identity providers, pulling secrets from vaults and accessing systems nobody designed for autonomous machine activity. The question stopped being "is this happening" a while ago. Now it's whether you can see unauthorized AI agent access fast enough to do something about it. The Problem Identity Teams Keep Inheriting Most organizations have no...
Detecting and deceiving attackers with AI honeypots, detect supply chain attacks with GitHub Action canaries, the latest from Microsoft's new "Autonomous Code Security" team
Passguard named runner-up for Tech & Cyber Startup of the Year at Cybersec Europe and the Computable Awards 2026, one of Europe’s top cybersecurity events.
I’ve been going to RSA for over a decade now. Long enough to spot the cycle.This year the theme was AI — and it was everywhere. Every booth, every pitch, every keynote, some of it meaningful. Most of it is noise. What stood out wasn’t the issues many are facing, but it was everything being labeled as AI...
Voice phishing is the #1 initial infection vector for cloud compromises in 2025. Here is why the existing security stack misses it, and what closes the gap. The post Vishing is the fastest-growing way attackers are breaking in. Most security stacks cannot see it appeared first on imper.ai.
SHub Reaper bypasses Apple's Terminal mitigation, steals credentials and documents, and plants a persistent backdoor for continued access after infection.
Learn how AuthMind is helping security teams close the gap between identity threat detection and response with real-time observability, automated remediation, and AI-driven identity security.
Today we shipped something we have been building toward for three years. We are calling it AI agent runtime security, and it is now live across the Permiso platform. I want to talk about why we built it, what it actually does, and where I think the rest of the market is headed in the wrong direction.
New capabilities deliver agent runtime identity attribution and behavioral anomaly detection across the full agent lifecycle Today we are announcing AI agent runtime security capabilities across the Permiso platform. These capabilities give security teams continuous visibility into agent runs, events, tool calls, and data access across agents, sub-agents, MCP servers, and the underlying infrastructure those agents operate on.
Dopo il polverone sollevato da Anthropic con la presentazione di Glasswing, OpenAI e Microsoft corrono ai ripari lanciando, rispettivamente, Daybreak e MDASH, le loro piattaforme AI pensate per mettere al...
I’m currently in Berlin helping set up for Pwn2Own Berlin, but that doesn’t stop Patch Tuesday from coming, and it’s another big one. At least nothing is listed as being in the wild – for now. Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. Due to technical difficulties, there will not be a video companion for this month.Adobe Patches for May 2026For May, Adobe released 10 bulletins addressing 52 unique CVEs in
DPRK operatives are now embedded inside Fortune 500 payroll systems, hired through standard recruiting pipelines using AI-assisted personas, fraudulent identities, and infrastructure designed to bypass every check HR was built to run. The post Hiring Fraud: How Attackers Walk Through the Front Door of Your Workforce appeared first on imper.ai.
TL;DR OpenTelemetry has made it easy to collect telemetry from AI agents, but most security teams have no idea what to actually do with that data once they have it. The default move is to send it to the SIEM, where it joins the rest of the log pile and gets evaluated against rules. This […] The post Why Your SIEM Can't Detect Agentic AI Threats (And What Actually Can) appeared first on Reveal.
TL;DR OpenTelemetry has made it easy to collect telemetry from AI agents, but most security teams have no idea what to actually do with that data once they have it. The default move is to send it to the SIEM, where it joins the rest of the log pile and gets evaluated against rules. This […] The post Why Your SIEM Can't Detect Agentic AI Threats (And What Actually Can) appeared first on Reveal.
The security industry has a habit of talking itself out of progress. We identify the right solution, validate the technology, get regulatory endorsement — and then spend the next three years relitigating it in conference rooms and procurement cycles because the myths outrun the facts. Passkeys are living that moment right now. The FIDO2 standard is battle-tested. The enterprise deployment playbook exists. Regulators aren't just permitting passkeys — they're pushing them. And yet the same ten obj
