Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
894 matching stories — in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
L’idée qu’un Mac peut se passer d’antivirus a pris un coup cet été, quand Microsoft a décrit une attaque qui contourne une partie des contrôles de macOS. Premier de notre comparatif, Intego ONE Complete s’étend désormais à l’iPhone, et sa formule de deux ans baisse de 35 %.
Blast radius is not a property of a breach.,it is a function of time. The same compromised credential produces a contained incident or a company-defining one depending entirely on how many seconds it held before something interrupted it. We all know this. It is why we bought detection, built a SOC, wrote runbooks, and put numbers on mean time to detect and mean time to respond. The whole apparatus is an attempt to shorten one interval. Here is the problem. Every component of that apparatus...
The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution. The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.
Cisco released security advisories for five critical vulnerabilities in its NX-OS data center network operating system that could be exploited to run arbitrary code with root privileges on Nexus switches. [...]
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late September to early October 2026, and resulted in data exfiltration from various South Korea-based financial firms,
Non-human identities (NHIs)—service accounts, application identities, API keys—have become the most prevalent identity types across corporate environments. They also tend to behave differently from the humans they serve. A person might log in from home, a coffee shop, an airport, and three different countries in a single month. A service principal that authenticates your third-party […]The post Making native geofencing work for cloud non-human identities appeared first on Silverfort.
Open enrollment puts payer infrastructure, security, APIs, and member experiences under pressure. Learn six ways that health plans can prepare from edge to core.
Microsoft will soon introduce support for third-party deepfake detection solutions and impersonation protection in Teams meetings. [...]
The cybersecurity firm said the attacker was likely a Chinese speaker and financially motivated, but did not attribute the attacks to a named individual or group.
Passguard partners with S-RM, bringing infostealer intelligence into S-RM's incident response, managed security and offensive security services.
The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange Server attacks known as HAFNIUM. The reward is for information leading to his identification or location, the news outlet NTD reported this week, citing a notice
Discover how securing shadow and zombie APIs helps banks meet the ECB cyber action plan mandates, improve posture, and mitigate AI-enabled threats.
Agentic SOCs are changing how security teams work. Agents triage alerts, investigate detections, correlate signals, and draft response plans around the clock, and for teams covering more environments without more headcount, that's a big shift. AuthMind now seamlessly plugs into that workflow to solve two critical areas: SOC agents get deep identity context behind every alert, and they get identity threat detections for attacks that never show up as a failed login or a flagged email. Identity...
Passwordless Authentication Solutions: Must-Have Features in 2026 Get a breakdown of essential capabilities for passwordless authentication solutions and questions for prospective buyers to ask when evaluating vendors. Passwords and knowledge-based authentication factors can be a major headache for security and IT teams. Stolen and reused credentials are still behind the majority of enterprise breaches, IT help desks lose thousands of hours a year to password resets alone, off-the-shelf phishing
AI agents are reaching login, cart, and payment flows, and spoofing is rising. See what the 2026 State of Bot & Agent Security Report reveals about AI traffic.
Exchange Server Subscription Edition (SE) is now the only supported version of on-premises Exchange, and it’s among the most targeted systems in the enterprise. Exchange Server SE hardening should be the first project after migration, not an afterthought. Microsoft Exchange Server Remains a Prime Target In May 2026, attackers began actively exploiting CVE-2026-42897, a critical [...] The post Exchange Server SE Hardening: 10 Ways to Secure Your Server appeared first on Messageware.
DataDome's Agent Trust is named to Fast Company's Next Big Things in Tech, giving businesses real-time control over AI agents by assessing intent, not just identity.
AI adoption means more identities generating access requests to enterprise applications and critical information. This also puts more pressure on security teams to bring applications under governance quickly, rather than leaving access unmanaged across the organization.
CDN bot management can't keep up with AI agents. See why layering a specialist bot and agent trust solution is the new enterprise security default.
Microsoft re-released its September 2026 Security Updates (SUs) for on-premises Exchange Server. The new "V2" packages add a fix for CVE-2026-96940, an authorization flaw that can let a signed-in user reach mailboxes that are not their own. If you installed the original September update, your servers are not protected against this issue. The V2 package [...] The post Microsoft Reissues September 2026 Exchange Server Updates appeared first on Messageware.
In early June 2026, an AI-driven operator tracked as JadePuffer (Microsoft: Storm-3168) used two compromised Azure service principals to map a tenant, then made 100+ storage account deletion attempts in about seven minutes. Most succeeded. There was no malware and no exploit inside Azure. Every action was a normal Azure Resource Manager call, allowed by roles the identities already held. We walk the full chain — the 16-hour recon window, the inherited RBAC that gave it the blast radius, and the
Bill Gates was interviewed on Meet the Press talking about AI kill switches. He said "it's not enough to have a kill switch," and that companies should monitor powerful AI systems and keep records of "exactly what's being done." He also drew a clear line: "The thing that's urgent has to do with bad people using AI, not the AI going off on its own." I agree with Gates on one thing. You need visibility, and you need to be able to audit it. Every enterprise should know what agents it has, what they
Ex-service members jailed and KillSec dismantled, suspected DPRK hackers drain $387M from Bitget, and a Pentagon breach exposes 3 million people.
Ryuk access broker heads to prison, TraderTraitor backdoors surface on victim with no crypto ties, and one operator's AI agents skim 600K credit cards.
A Multi-Task, Asynchronous Network for Hybrid Designtime and Runtime Explainable LLM Agent Alignment Analysis
Compare CASB vs SSPM vs ITDR. Understand why network proxies miss cloud-to-cloud OAuth sprawl, and how identity-first posture management protects modern SaaS.
AI risk isn’t about models—it’s about access. Learn how embedded AI across SaaS creates silent security risk, and what teams can do to regain control.
Bitdefender, a European-based company, announced a partnership with Aruba S.p.A., one of Italy’s IT, cloud and data center... The post Bitdefender, Aruba bring sovereign cybersecurity to critical infrastructure, energy and other regulated sectors appeared first on Industrial Cyber.
Access reviews (also called certifications or attestations) are one of the most important controls in an identity security program. They're how organizations catch access that's noncompliant or outlived its purpose before it becomes a breach or audit finding. They're also expensive: every review cycle pulls managers, application owners, and other highly paid leaders away from their actual jobs to certify who has access to what.
An agent holds a valid token, it calls an approved tool. Every individual step in the chain passes authorization, because every individual step was designed to pass. The chain as a whole does something nobody sanctioned, and by the time the alert lands in a queue, the agent finished nineteen minutes ago. That gap is why Software Analyst Cyber Research named a new category this month. ARISE, Agentic Runtime Identity Security Enforcement, exists to answer one question: should this agent be...
See how Claude's Compliance API reflects the shift toward continuous AI governance, visibility, identity context, and security across the enterprise.
Reco has raised an additional $55 million including a strategic investment from AT&T Ventures and support from new investors Forestay and Quadrille Capital
Learn why building reliable AI security agents requires co-designing modular system architectures alongside rigorous, domain-expert evaluation suites.
Identity resolution across five real environments: a specialized decision model against gpt-oss, three Claude models and classic record linkage
Identity resolution across five real environments: a specialized decision model against gpt-oss, three Claude models and classic record linkage
Push Security is partnering with Proofpoint, bringing Push’s in-browser threat protection to Proofpoint customers.