Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

894 matching stories — in Identity Threat Detection and Response — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Measuring Identity Risk: The Metrics Every Security Leader Should Track

You Can’t Manage What You Don’t Measure Security leaders spend significant time measuring risk. They track: Vulnerabilities Threat activity Security incidents Mean time to detect Mean time to respond Yet one of the most important attack surfaces often lacks meaningful measurement: Identity. As identity-based attacks continue to rise, organizations are investing in identity security, access […]

Announcement

AI Agents Are Already Running in your Environment. You Just Don't Know About Them

Every major SaaS platform your employees use today most likely ships with AI agent capabilities built in. The friction to deploy one has dropped to near zero: click a button, authorize a connection, and an autonomous workflow is running inside your environment. No ticket, no security review, no IdP provisioning event. Your workforce is adopting with or without you. Additionally, the agents your organization deploys intentionally are getting more autonomous by the day. Modern agentic...

Announcement

ランタイム。ランタイム。ランタイム。Mythosの後にCISOやIAMリーダーたちが調整していること。

Anthropic社のMythosは市場に衝撃を与えた。その実態を間近で観察し、アクセス権を持つ顧客と共に実際の企業環境で実行し、戦略の再構築に奔走するCISOやIAMリーダーたちと数週間にわたり対話した結果、その理由が理解できた。The post ランタイム。ランタイム。ランタイム。Mythosの後にCISOやIAMリーダーたちが調整していること。 appeared first on Silverfort.

Announcement

We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us.

The short version: Event-based security looks at one action at a time and asks whether that single action is good or bad, which is the wrong question for AI agents that authenticate as real human employees and act at machine speed. The accurate way to catch a rogue agent is sequence-based anomaly detection, which learns […] The post We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us. appeared first on Reveal.

Announcement

We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us.

The short version: Event-based security looks at one action at a time and asks whether that single action is good or bad, which is the wrong question for AI agents that authenticate as real human employees and act at machine speed. The accurate way to catch a rogue agent is sequence-based anomaly detection, which learns […] The post We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us. appeared first on Reveal.

Announcement

Operationalizing Identity: SOC vs IAM

One thing that has stood out to me over the years working around identity and security operations is how disconnected the two functions still are. IAM teams and SOC teams are often solving pieces of the same problem, but from completely different angles. IAM focuses on access, governance, policy, and lifecycle management. The SOC focuses […] The post Operationalizing Identity: SOC vs IAM appeared first on Reveal.

Announcement

Mind the Gap: GCP serviceData in Logs Explorer vs. Exported Logs

Cloud audit logs are the backbone of detection engineering in cloud environments. They provide the raw telemetry that security teams depend on to identify suspicious behavior, build detection rules and reconstruct attacker activity after an incident. In cloud platforms like GCP, every meaningful administrative action leaves a trace in the form of an audit log entry and the quality of that trace directly affects the reliability of these investigative and detection efforts.

Announcement

You May Be Able To See Your AI Agents. Can You Stop Them?

I've spent the last several months in conversations with CISOs and CIOs at some of the largest enterprises in the world. The specific details vary. The underlying situation almost never does. The mandate to scale autonomous AI is coming from the top — from CEOs, from boards, from every business unit leader with a productivity target attached to their next review. CIOs and CISOs are now furiously working to determine how to establish an adequate control infrastructure to do so without the risk ou

Announcement

How OSINT Teams Use Identity Intelligence to Accelerate Investigations

Information Is Everywhere. Attribution Is Rare. Open-source intelligence (OSINT) has become one of the most valuable disciplines in modern investigations. OSINT teams of Investigators can access an unprecedented volume of information from: Social media platforms Public records Data breaches Forums and communities News sources Technical infrastructure Online marketplaces The challenge is no longer finding information. […]

Announcement

What the Gartner SRM Summit Confirmed About the Identity Attack Surface

At Gartner SRM, one theme kept surfacing: organizations may have authentication covered, but identity is a different problem. Here’s what security leaders and new Gartner research revealed about the growing identity attack surface. The post What the Gartner SRM Summit Confirmed About the Identity Attack Surface appeared first on imper.ai.

New capability

AuthMind Announces Enhanced Agentic AI Identity Protection Capabilities to Detect and Stop Unknown and Unusual AI Agent Access & Activity in Real Time

AuthMind’s platform is the first to discover, classify and automatically remediate all unknown AI agents via network traffic activity observability Bethesda, MD, June 11, 2026 — AuthMind, the leader in identity observability–driven Agentic AI threat protection, today announced general availability of its enhanced agentic AI identity protection capabilities within the award-winning AuthMind Agentic AI Identity Observability & Protection Platform. AuthMind now delivers the industry's first...

Announcement

The June 2026 Security Update Review

I’ve made it through Pwn2Own Berlin, had a little vacation, and now I’m back for Patch Tuesday. Microsoft and Adobe didn’t disappoint. In fact, they have heralded my return with the largest Patch Tuesday release ever. Thanks? Take a break from your regularly scheduled activities and let’s take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for June 2026For June, Adobe

Announcement

Shadow AI Agent Access: How to Detect It and Shut It Down Automatically

AI agents do not always authenticate the way they should. Sometimes they access systems through local accounts, bypassing your identity provider entirely. When that happens, most security tools have no way to see it, let alone stop it. With AuthMind, companies can do both. The Challenge Shadow AI agent access is one of the most common yet least visible risks in enterprise environments today. An agent that accesses a system without going through an IdP does not generate the authentication...

Announcement

Overview of Content Published in May

Here is an overview of content I published in May: Blog posts: Update: search-for-compression.py Version 0.0.7 SANS ISC Diary entries: Wireshark 4.6.5 Released YARA-X 1.16.0 Release Wireshark 4.6.6 Released Microsoft Access VBA YARA-X 1.17.0 Release

Announcement

Analysis of the 2026 Stryker Breach: Weaponizing Cloud Endpoint Management

On March 11, 2026, attackers turned Stryker Corporation's own Microsoft Intune device-management plane into a non-encrypting wiper, factory-resetting roughly 200,000 endpoints across 79 offices worldwide without dropping a single piece of custom malware. This analysis reconstructs the Living-off-the-Land attack chain — from infostealer logs and AiTM session theft through privilege escalation to the Intune control-plane pivot — and shows how SlashID's MITM/AiTM detection, phishing-resistant authe

Announcement

Analysis of the 2026 Stryker Breach: Weaponizing Cloud Endpoint Management

On March 11, 2026, attackers turned Stryker Corporation's own Microsoft Intune device-management plane into a non-encrypting wiper, factory-resetting roughly 200,000 endpoints across 79 offices worldwide without dropping a single piece of custom malware. This analysis reconstructs the Living-off-the-Land attack chain — from infostealer logs and AiTM session theft through privilege escalation to the Intune control-plane pivot — and shows how SlashID's MITM/AiTM detection, phishing-resistant authe