Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
894 matching stories — in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Storm-2570 is a ransomware affiliate that uses consistent post-compromise tools and techniques across deployments involving Qilin, DragonForce, Anubis, and BERT ransomware, and provides guidance to help defenders detect and disrupt this activity before ransomware deployment. The post Beyond the ransomware: Tracking Storm-2570’s consistent tradecraft across deployments appeared first on Microsoft Security Blog.
Microsoft 365 E5 and E7 customers can now run security information and event management (SIEM) inside Microsoft Defender at no extra license cost. Microsoft is delivering the capability through the Integrated Security Operations Center (ISOC) in Microsoft Defender, which combines SIEM with Defender’s existing XDR, threat intelligence, automation and AI tools in a single portal. “Security cannot operate at AI speed when protection and operations are built as separate systems,” Rob Lefferts, corpo
Lessons learned about how AI attacks abuse identity and how to protect against it.The post Replicating part of the OpenAI attack on Hugging Face appeared first on Silverfort.
Discover how Kiabi uses DataDome to automate credential stuffing protection, improve threat visibility, and stop DDoS attacks without impacting customers.
PlainID is mentioned as an Example Vendor among the Vendors that provide “IAM hygiene focus,… The post PlainID Mentioned in the 2026 Gartner® Innovation Insight Report on IVIP and IAM Augmentation Vendors Disrupting Light IGA appeared first on PlainID.
Compare the top 10 CNAPP vendors for enterprises, including Wiz, CrowdStrike, and Fidelis Halo®, with a full feature and fit comparison. The post Top CNAPP Vendors and Which One Should You Pick appeared first on Fidelis Security.
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.
DataDome recorded 7.9B AI agent requests in early 2026. A new report reveals widespread spoofing and visibility gaps that leave organizations exposed.
For years, privileged access was relatively easy to define.
A Windows malware called CLOSEDQUORUM is built to take orders from a vote of up to four AI models instead of an attacker's server, Cisco Talos said on September 22. The models can choose to steal Windows credentials, saved browser passwords, and crypto wallet data. Talos has not seen this setup work from start to finish, and the public version of the malware does not work as it is.
Learn how attackers combine environment variable staging and steganography in PNG files to deliver DCRat malware in memory.
Compare SaaS Security Posture Management (SSPM) vs SaaS Security Control Plane (SSCP). Understand key architectural differences and modern cloud security.
Discover the best AI security platforms for 2026. Compare top tools for shadow AI discovery, autonomous agent governance, and enterprise identity security.
The EU AI Act is here. It entered into force in August 2024 and became… The post How runtime authorization helps turn EU AI Act requirements into enforceable controls appeared first on PlainID.
Attackers using AI have greatly benefited when it comes to speed and scale, and now, says Cisco Talos, the technology has evolved to execute large portions of the attack chain entirely without human involvement. Researchers at the threat intelligence group have identified what they call the first “LLM-as-C2” architecture that can fully automate the command-and-control (C2) chain. Dubbed CLOSEDQUORUM, the malware binary relies on a panel of large language model (LLM) judges to map and execute the
Diving into our ClickFix data to give you the key trends and developments as we close out 2026.
CASB vs. SSPM vs. ITDR: Learn why legacy proxies fail at SaaS security and how Grip’s identity-first architecture stops non-human identity breaches.
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) "at every step of the attack chain." The action, carried out with authorization from the U.S. District Court for the Eastern District of Virginia, involved the efforts of Health-ISAC, alongside Cloudflare, Coinbase, OpenAI, Railway, SpyCloud, The Shadowserver
OWASP built a catalogue of what goes wrong with machine credentials. It did not build a way to find out which ones you are carrying. Six of the ten risks cannot be answered from configuration or provisioning at all. OWASP shipped the Non-Human Identity Top 10 for an unglamorous reason. Every other Top Ten assumes a person is behind the login. Injection, broken access control, security misconfiguration, all of it written with a human somewhere in the loop, subject to onboarding, MFA, a...
CLOSEDQUORUM, a malware binary discovered through Cisco Talos’ CAIRN project, exhibits fully autonomous command and control (C2). It represents a shift in effort displacement for attackers, in which expanding portions of the attack chain can be executed without operator involvement.
New category from Software Analyst Cyber Research emerges to evaluate runtime Identity Security capabilities for AI agents.The post Runtime is where AI Agent Security gets real. New research unpacks the ARISE Framework. appeared first on Silverfort.
Readiness tagging for AI, always-on observability, and coordinated kill switches at the application layer give enterprises a defensible route to scaling agents while keeping authority in human hands. New York, London – September 15, 2026 – Orchid Security, which unlocks safe AI adoption by solving identity at its core, today unveiled a set of AI readiness controls for AI agents, spanning ongoing identity drift detection and kill switches that operate at the application level. Within seconds, an
The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India-based "much smaller organization" in the information technology (IT) services industry, once again highlighting how the adversary continues to target developers to breach target networks. Cybersecurity company SentinelOne, which disclosed details of the activity, said it involved the use of Apple
The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes.
The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan) has been attributed to a fresh set of cyber attacks targeting government and defense entities in India and Afghanistan. The attacks, per Zscaler ThreatLabz, involve the use of previously undocumented tools called RUSTYSHADE, RUSTYMOVE, PSNATCH, and BASHNATCH. The activity has been codenamed Operation
U.S. law enforcement extradites Black Axe leaders, emerging AI safety risks concern Frontier AI leaders, and autonomous OpenAI agents deploy proxy relays.
I've spent over 20 years in cybersecurity across endpoint, gateway, malware analysis, PKI and encryption, data protection, PQC, identity, authentication, CIAM, decentralized identity, and more recently, machine identity, or what the market now calls NHI. I came to identity as a cybersecurity person first, and that shapes how I think about everything that follows.
Defense in Depth for AI Agents: Five Layers of Security AI agents are no longer experimental. They're operating inside enterprise environments, invoking APIs, accessing sensitive data, and making decisions that impact real business systems.Yet unlike traditional applications, AI agents exhibit non-deterministic behavior, making static security controls and conventional access models insufficient on their own.
Explore how Claude AI in Salesforce introduces hidden data risks and what it means for enterprise SaaS and AI security.
Report identifies AuthMind as one of a small number of vendors with broad alignment across all three layers of the newly defined ARISE model for governing AI agent actions in real time BETHESDA, MD, September 15, 2026 -- AuthMind, the leader in identity observability-driven Agentic AI threat protection, today announced it has been named a representative vendor in a new report from Software Analyst Cyber Research (SACR), an independent analyst firm covering cybersecurity markets. Of the 13...