Nightmare-Eclipse Strikes Again With 'ShieldCrash' Windows Exploit
The disgruntled researcher continued their vendetta against Microsoft by publishing yet another zero-day exploit for Windows Defender.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
894 matching stories — in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Introducing AI Assistant for Akamai Web Security Analytics
Discover how AI Assistant for Akamai Web Security Analytics helps SOC and AppSec teams investigate events faster and take guided action with natural language.
Web Bot Auth & Know Your Agent: Why Identity Isn’t Enough
Web Bot Auth and Know Your Agent verify identity. But they can't tell you what an agent is doing right now. Here's what complete protection looks like.
AI agent intent, explained: What Silverfort actually means when we say it
Learn how an AI agent's declared intent connects visibility, access, and control.The post AI agent intent, explained: What Silverfort actually means when we say it appeared first on Silverfort.
Proofpoint Expands AI-Powered Investigations to Microsoft 365 and Deepens Insider Risk Visibility into AI Activity
Threat matrix: Mapping threats across cloud web applications
Microsoft introduces the Cloud Web Applications Threat Matrix, a MITRE ATT&CK-aligned framework that helps defenders understand, prioritize, and mitigate threats to cloud-hosted web apps and serverless platforms. The post Threat matrix: Mapping threats across cloud web applications appeared first on Microsoft Security Blog.
Four groups caught using the same Chrome and Windows exploit kit
CISOs are feeling the security burden of accelerated AI use
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Cisco security advisory (AV26-197) – Update 3
Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
Cisco Talos is actively tracking the exploitation of two vulnerabilities in Cisco’s Secure Firewall Management Center (FMC) Software.
AI Agents Found the Identity Shortcuts. Now Enterprises Need to Close Them.
Orphaned accounts. Dormant users. Local admins. Overprivileged service identities. Hardcoded credentials left behind by an application team that disappeared three reorganizations ago.
Claudeforce: Why SaaS Is the New AI Agent Runtime
Discover how Claudeforce turns SaaS into an AI agent runtime, and why visibility into app-to-agent connections is critical for security.
EchoLeak Vulnerability: CVE-2025-32711 Explained
Understand the EchoLeak vulnerability, its zero-click attack chain, and the AI agent security gaps enterprises need to address.
News Alert: SpyCloud survey finds machine identity risks outpace defenses, exposing gaps in oversight
AUSTIN, Tex., Sept. 9, 2026, CyberNewswire – SpyCloud, the leader in identity threat protection, today released its annual SpyCloud Identity Threat Report, a survey-based study finding that non-human identities (NHIs) – the AI agents, service accounts, API keys, … (more…) The post News Alert: SpyCloud survey finds machine identity risks outpace defenses, exposing gaps in oversight first appeared on The Last Watchdog.
NIS2 Compliance in the AI Age: Why Traditional Cybersecurity Isn’t Enough
Discover why achieving NIS2 compliance is more challenging in the AI age, the four key challenges organizations face, and why segmentation is essential.
Developing Story: 153 Million Driver’s License Records Reportedly Surface on the Dark Web
An identity-verification vendor may be at the center of a breach affecting 153 million driver's licenses. Here's what we know, and why "is this ID real?" is no longer the only question that matters. The post Developing Story: 153 Million Driver’s License Records Reportedly Surface on the Dark Web appeared first on imper.ai.
AuthMind Extends Real-Time Agentic AI and Non-Human Identity Protection with IBM Vault, Deepening Value for Joint Customers
BETHESDA, Md. — September 8, 2026 — AuthMind, the leader in identity observability-driven Agentic AI, NHI and user threat protection, today announced new capabilities within its Identity Observability & Protection Platform that extend governance, risk detection and real-time remediation to agentic AI and non-human identities (NHIs) operating alongside IBM Vault. Agentic AI is multiplying the number of non-human identities, and the secrets they rely on, creating security challenges that no...
Agentic IAM Day 2026 | Virtual Summit
The post Agentic IAM Day 2026 | Virtual Summit appeared first on PlainID.
DataDome Recognized as a Sample Vendor in the Gartner® Hype Cycle™ for Application Security, 2026
DataDome is featured as a Sample Vendor of AI Agent Bot Management in the Gartner® Hype Cycle™ for Application Security, 2026.
Inside AI-Powered WAF Detections: Architecture and Safety Controls
ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2
Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control (C2), retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session.
Reco Wins CRN 2024 Stellar Startup Award
Discover how Reco earned a spot on CRN’s 2024 Stellar Startups list in Security, recognized for innovation and driving growth in the IT channel.
AI Identity Governance: A CISO’s Guide
AI adoption is no longer a future concern; it’s already happening. Organizations — and their users — are deploying AI through applications and developer tools, whether it’s sanctioned or not. Meanwhile, agents are accessing data, interacting with systems, and taking action with limited human oversight or intervention.
153 Million Reasons Document Verification Isn’t Identity Assurance
A government-issued ID has long been treated as one of the strongest forms of proof that someone is who they claim to be. But what happens when hundreds of millions of those identity documents fall into the wrong hands?
It’s the swan song of traditional PAM, and that’s good news for security
Protecting privileged identities remains one of the biggest security challenges organizations face today. Yet, it’s time we admit it: the approach taken to solve this problem for nearly three decades has utterly failed. IAM teams were driven to buy tools that were supposed to protect them. In practice, they only gained a false sense of security.   Customers we speak with tell us the same story: millions spent on PAM solutions, only to protect a few hundred accounts, at m
Microsoft 365 Outage, Exchange, Teams & SharePoint hit by Authentication failure
Summary On August 31, 2026, Microsoft 365 went down for a large swath of users worldwide. It started with Exchange Online and Outlook, then spread to Teams, SharePoint, OneDrive for Business, Microsoft Purview, Defender XDR, Copilot, and Universal Print. Full recovery took roughly 48 hours, with a handful of services still limping days later. Timeline [...] The post Microsoft 365 Outage, Exchange, Teams & SharePoint hit by Authentication failure appeared first on Messageware.
Governing AI Agents: The 5-Layer Blueprint for Agentic IAM
Every industrial revolution has forced organizations to master a new control discipline—and the scaling of… The post Governing AI Agents: The 5-Layer Blueprint for Agentic IAM appeared first on PlainID.
Gartner's Latest Take on Identity Visibility and Intelligence Platforms Validates AuthMind’s Approach
AI agents are showing up across the enterprise faster than security teams can track them. Many now hold credentials, touch systems, and make decisions, all without a human reviewing every (or any) step. That gap is a big part of why Gartner's continued coverage of the Identity Visibility and Intelligence Platforms (IVIP) category, a space Gartner has been tracking for about a year now, is worth paying attention to now, not down the road. Why This Category Continues to Gain Momentum Gartner's...
AI Governance & SaaS Security | Grip Security
Learn why AI governance and SaaS security must work together, and why identity is the foundation for securing AI access, permissions, and risk.
The S-Unit expands pentesting and red teaming with infostealer data via Passguard
The S-Unit and Passguard partner to bring infostealer intelligence into penetration testing and red teaming, using stolen credentials and session tokens.
Why Access Reviews Miss Application Risk | Saviynt
Periodic access reviews have long been the default for managing identity risk and maintaining regulatory compliance. These reviews were designed when most identity risks came from human users, who follow the “joiner, mover, leaver” pattern of access changes. Additionally, core business risks and functions were encapsulated within a single business application, allowing reviews to be scoped around individual applications.
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Delivers the Next Evolution of the Agentic SOC
The Privilege Spectrum & Zero Standing Privilege | Saviynt
Executive summary Traditional privileged access management (PAM) was built for a smaller, more predictable set of administrator and technical accounts. Modern enterprises now depend on workforce users, service accounts, cloud workloads and AI agents that can all hold consequential access, with widely different levels of authority, autonomy and potential impact.
Effectively Managing Secret Rotation: How AuthMind Keeps Every Secret Current
A rotation policy is only as secure as the process that detects and keeps every secret moving on schedule. All rotation & secret security policies should be built around a cadence, rotate this secret type every two weeks, every month, etc. Getting that right at scale means more than simply writing the policy. It means observing, continuously, whether every secret is actually adhering to it, not just whether a rotation happened at some point in the past. This can be an easily solvable problem
From a Stolen Login to a Ransomware Leak Site: What Our Telemetry Shows About the Path Threat Actors Take
A ransomware disclosure and a credential package we track from an entirely separate source, read side by side, illustrate a pattern our research team sees again and again: the quiet theft of a single login can be the first domino in a breach that ends, months later, on a dark web leak site. Reading time […]
AI Agent Security: A Guide to Autonomous Access
Learn how AI agents create new identity and access risks, what determines their blast radius, and how security teams can govern autonomous access.
How to Get Started with Authorization Strategy
Most enterprises already feel the pressure to upgrade their authorization systems to meet the requirements:… The post How to Get Started with Authorization Strategy appeared first on PlainID.