Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
401 matching stories — in Infrastructure Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
In June 2026, one of the world’s largest pharmaceutical companies, Novo Nordisk, became the target of a major cyberattack that highlights how modern threats have evolved far beyond traditional data breaches. The stolen records impact intellectual property, research pipelines, and long-term strategic risk. Below, we break down what happened, what was exposed, and what this ... Novo Nordisk Cyberattack: What Happened and Why it Matters The post Novo Nordisk Cyberattack: What Happened and Why it Ma
Today we are launching Plixer 19.8. If you spend your day in a NOC or a SOC, you have noticed the same thing we have: your team has standardized on an AI tool it trusts, and that tool has never been able to see the network. Now it can. Plixer 19.8 is available now to all Plixer Scrutinizer and Plixer One customers at no additional charge. ... Read more » The post Your Team Already Has the AI. Now It Can See the Network. appeared first on Plixer.
Beim Runden Tisch „Hightech und KI made in Bavaria“ der Süddeutschen Zeitung ging es um die Frage, wie Künstliche Intelligenz Wirtschaft, Verwaltung und Gesellschaft in den kommenden Jahren verändern wird. Im Fokus standen unter anderem der sichere Einsatz von KI, digitale Souveränität, der Umgang mit sensiblen Daten sowie die Rolle Bayerns als Hightech-Standort Europas. Für infodas nahm Sebastian Dännart, Director Cybersecurity Consulting, an der Gesprächsrunde teil und erläuterte, welche Rahme
SaaS integrations often stay connected long after the original rollout, supplier project or CRM upgrade has finished. Many senior leadership teams only revisit those permissions once suspicious activity forces an investigation and customer confidence has already started taking a hit. The Salesloft Drift breach exposed how attackers can abuse trusted cloud access without breaking into Salesforce itself. Instead, attackers used compromised OAuth tokens, which work like digital permission keys, to
ColorTokens is proud to join the newly announced Claroty Technology Alliances Program. The program integrates market-leading microsegmentation capabilities with the Claroty Platform to strengthen operational resilience across critical infrastructure, where continuous production and human safety are vital. As Grant Geyer, Chief Strategy Officer at Claroty, said, segmentation will become one of the critical controls for […] The post Operational Resilience Starts with Risk-Intelligent Microse
Confidence, Compliance, and Control Across the Software Lifecycle In the race to deliver smarter, safer, and more connected products, software has become the defining force behind innovation—and risk. Whether you’re building autonomous driving systems, connected fleets, or mission-critical control software, one challenge looms large across every industry: traceability. From the first line of a requirement to the moment software is deployed in a vehicle or test bench, every change, every test,...
Email security and endpoint protection often receive far more attention than customer-facing ecommerce platforms storing customer records, account credentials and order data. That creates a wider web security problem once attackers start targeting systems businesses still treat as commercially routine. A compromised customer portal can interrupt sales, trigger customer complaints and consume internal resources for weeks. The recent breach involving the Škoda online shop exposed how quickly this
There was a time when qualifying for cyber insurance was a simple formality. You filled out a two-page questionnaire, checked a box confirming you had a firewall and an antivirus, and paid your premium. Those days are officially over. As ransomware and data exfiltration tactics have evolved, cyber insurance underwriters have taken massive losses. In …
Nathan Anderson continues his Physical Social Engineering and Red Team series with the final step: looting. Learn what shows value to stakeholders in reports.
When Anthropic announced the Claude Mythos Preview in April 2026 and restricted its release under Project Glasswing due to its advanced cybersecurity capabilities, the security industry paid immediate attention. The framing that followed was understandable: a model this capable of finding and exploiting vulnerabilities represents a meaningful shift in the threat landscape. For general cybersecurity, […]
John Ruthven [email protected] Mon, 06/29/2026 - 09:27 John Ruthven is an experienced enterprise software leader who brings a thoughtful, people-first approach to driving business growth and transformation. Most recently CEO of IR, an ASX-listed technology company supporting over 1,000 organisations globally, John led the organisation through a renewed focus on innovation, customer value and employee experience.With senior leadership roles across TechnologyOne, SAP, Zuora and CA Technologies, Jo
Invalid commands can reveal what firmware does beyond its visible response. Learn how PowerFuzzer uses command-response-power evidence to detect hidden commands, firmware drift, undocumented functionality, and potential backdoors in black-box embedded systems.
Oracle PeopleSoft PeopleTools is a widely deployed Enterprise Resource Planning (ERP) platform used by universities, hospitals, and government agencies worldwide to manage HR, payroll, and student records. CVE-2026-35273 is a critical zero-day vulnerability in the PeopleTools Environment Management Hub (PSEMHUB) component, allowing an unauthenticated remote attacker to achieve full OS-level code execution by chaining a Read more about [2026.06 Vulnerability Report] Oracle PeopleSoft PeopleTools
This vulnerability is a 'PHP Object Injection' vulnerability discovered in Adobe Commerce (Magento). Attackers exploit the fact that the ServiceInputProcessor component attempts deserialization without validation or inspection to send serialized malicious PHP objects to vulnerable endpoints for execution. A security patch for this vulnerability was released in September 2025, and our AIWAF products plan to Read more about [2026.06 Vulnerability Report] SessionReaper: Adobe Commerce PHP Object In
The enterprise tech world has officially entered its AI operational maturity era. The rush to launch experimental AI pilots has cooled. In its place lies a much harder, more critical challenge: moving models out of isolated sandboxes and into resilient, production-grade systems.  This shift has exposed a massive industry bottleneck. Research reveals that more than […] The post Why 80% of Enterprise AI Projects Fail (And How to Fix It) appeared first on THETARAY.
When security teams finally get their cloud workloads secured, the … The post Cloud Workload Protection Platform (CWPP) Buyer’s Guide appeared first on Tufin.
1. The Structural Failure of Static Thresholds The gap between modern financial crime and traditional transaction monitoring is no longer incremental but structural. For decades, the industry has relied on a one-size-fits-all approach: rigid thresholds that fail to differentiate between inherently diverse customer profiles. That design carries a hidden assumption: that a single definition of […] The post Breaking the Monolith: Scaling ML Performance Through Segmentation in Modern AML appea
Growing SMEs do not need another security dashboard to manage. They need web protection that keeps pace with how staff actually work without adding more pressure onto internal IT. That is where many security setups start to fail. A tool that worked for a smaller office can become awkward once the business expands across remote staff, browser-based systems and Microsoft 365 access. Internal staff then spend more time untangling alerts than reviewing the actual risk. The strongest web security sol
Attackers are moving faster, infrastructures are becoming more fragmented, and security teams are under increasing pressure to detect threats before they impact operations. Against this backdrop, Network Detection and Response (NDR) has evolved from a specialist detection capability into a foundational layer of modern cyber resilience. As organisations expand across hybrid, multi-cloud, and edge environments, […]
Vulnerability scanning is one of the most effective ways to find security weaknesses before attackers do. But not all scans are the same. Two types of scans form the foundation of any strong vulnerability management program: external scans and internal scans. They examine your environment from different vantage points, uncover different categories of risk, and answer different questions. Relying on only one leaves dangerous blind spots. In 2026, with attack surfaces spread across cloud platforms
Tufin Global Field CTO Erez Tadmor sat down with Jeffrey … The post Mythos, Glasswing, and the Fable Reversal: A Hype Check with Tufin’s CISO appeared first on Tufin.
In today’s automotive landscape, a vehicle isn’t just a product—it’s a software platform. With dozens of models, regional configurations, evolving feature sets, and constantly emerging compliance requirements, managing software for a modern fleet has become a problem of scale, speed, and precision. For global OEMs, this challenge comes to a head in variant management: how to efficiently develop and maintain software across hundreds of configurations, without fragmenting teams, slowing down...
Last month, a cyberattack on Instructure’s Canvas Learning Management System (LMS) became one of the most significant breaches in the history of education technology. What initially seemed like a contained incident quickly escalated into a global disruption, affecting thousands of institutions and millions of users. The repercussions of this breach rippled across the global education ... The Canvas LMS Breach: How a Single Attack Disrupted Global Education The post The Canvas LMS Breach: How a S
By Adam Howarth, Data Scientist and Field Engineer at Plixer Cisco Live 2026 was not a conference about what’s coming. It was a conference about what’s already happening and whether your infrastructure is built to handle it. Autonomous AI agents are running in production environments right now, and the network architectures most enterprises have in place were not designed for what those agents generate. Cisco used... Read more » The post Cisco Live 2026: The Agentic Era Is Here and Your Net
By Adam Howarth, Data Scientist and Field Engineer at Plixer  Monitoring agentic network traffic requires different baselines, different thresholds, and a different investigation workflow than anything enterprise networks have needed before. AI agents don’t generate traffic the way humans do, and the tools calibrated against human patterns will either miss what matters or bury it in noise.  This guide walks through what agentic traffic actually looks... Read more » The post How to
For many organisations, Endpoint Detection and Response (EDR) has become the primary monitoring source used by their Security Operations Center (SOC) providers. Modern EDR platforms deliver valuable visibility into endpoint activity, detect malicious processes, and enable rapid response actions across workstations and servers. However, relying solely on EDR is becoming an increasingly risky security strategy. […]
By combining AI-powered fuzzing with power side-channel analysis, PowerFuzzer detects undocumented functionality, hidden behaviour, firmware changes, and potential backdoors without requiring source code access. It supports the assessment of embedded systems across aerospace, automotive, industrial, security, networking, and critical infrastructure applications.
Despite advances in bot management and behavioral analysis, rate limiting remains one of the most reliable DDoS mitigation controls. We say it in nearly every customer engagement, and we mean it literally. When we walk into an environment after a real attack, the difference between a clean mitigation and an outage is almost always in […]
An agnostic agentic layer is only the entry point. What makes it work is the domain depth beneath it. At Money20/20 Europe in Amsterdam, the dominant feeling on the floor was fatigue with AI claims. Nearly every stand promised agentic AI; far fewer could show it resolving a real case. So in our Glass Box […] The post Everyone Has Agents Now—Few Have the Foundation appeared first on THETARAY.
One Middleware, Many Languages From signal-level CAN messages to DDS topics and cloud service calls, Apex.Ida brings it all together. With the IDL Importer Framework, your team can work with familiar formats, simplify integration across domains, and accelerate development without compromise.
Defence organizations are turning to commercial innovation not simply because it is less expensive, but because it offers access to the speed, scale, and technological agility required to maintain operational advantage in an increasingly dynamic security environment. But the same supply chains that enable rapid innovation also create new vulnerabilities.
