Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
386 matching stories — in Non-Human Identity & Secrets — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
2 min readIf you’re already running CrowdStrike Falcon AI Detection and Response (AIDR), you already have a strong layer for inspecting the content passing between AI agents and the MCP servers they connect with. You’re catching manipulated tool listings, flagging risky inputs, blocking or transforming what needs it. But a finding is only as useful as what […] The post CrowdStrike AIDR Tells You What’s Risky. Aembit Tells You Who Gets Access. appeared first on Aembit.
What to do when the MCP server your workforce depends on has no concept of users. I’ve run into this more than once. A hundred developers need their agents to reach an MCP server that doesn’t support OAuth. The server authenticates with one service-account key, so the key is handed to all hundred. Then someone […] The post When Your MCP Server Has No Concept of Users appeared first on Hush Security.
Vietjet and Thales strengthen partnership in MRO and kickstart digital aviation, AI & cybersecurity cooperation prezly Tue, 09/15/2026 - 09:07 Civil Aviation General aviation Asia-Pacific Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 15 Sept 2026 On September 10, Vietjet and Thales signed a “Repair-By-The-Hour” contract covering Thales products for A320 and A330 fleets, demonstrating trust in Thales as a premium provider of repair and maintenance solutions.Further
Earth observation satellites Copernicus Sentinel-3C and Earth Explorer FLEX successfully launched tas Mon, 09/14/2026 - 08:16 Space Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 15 Sept 2026 Two satellites, one mission: protecting our planet Kourou, French Guiana, September 15, 2026 – The Copernicus Sentinel-3C and Earth Explorer FLEX satellites, for which Thales Alenia Space – the joint company between Thales (67%) and Leonardo (33%) – is prime contractor, were succes
Thales Alenia Space wins NIGCOMSAT contract to build NigComSat-2A geostationary telecommunications satellite tas Mon, 09/14/2026 - 08:16 Space Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 14 Sept 2026 Cannes, September 14th, 2026 – Thales Alenia Space, a joint venture between Thales (67%) and Leonardo (33%), has signed a contract with Nigeria’s government-owned NIGCOMSAT Ltd to develop a new telecommunications satellite operating from geostationary orbit. The communic
See how modern privileged access management addresses traditional PAM gaps with zero standing privileges, JIT access, DevOps integrations, and simpler deployment. The post Unmasking the Gaps: Why Akeyless Outperforms Traditional PAM appeared first on Akeyless.
A technical breakdown of the attack where hundreds of AI agents exploited two NG/MF flaws, reinforcing an AI attacker’s appetite for identity and credential abuse.The post PaperCut breach: What AI agent attacks teach us about Identity Security resilience appeared first on Silverfort.
Learn why IdP-centric IAM falls short for ephemeral AI agents and how workload identity, gateway enforcement, and runtime authorization provide stronger control. The post AI Agent Identity Security: Why IdP-Centric IAM Falls Short appeared first on Akeyless.
Most organizations unknowingly leave gaps in their defenses, making them vulnerable to credential theft, privilege escalation, and lateral movement. The post Breaking the Chain: Secrets Management in the MITRE ATT&CK Framework appeared first on Akeyless.
6 min readOpenID Connect (OIDC) is a protocol built on top of OAuth 2.0 to delegate authentication in a REST-like manner. If OAuth is about authorization (what an entity can access), OIDC is about who they are. In practice, OIDC provides a standardized way to implement single sign-on (SSO), which allows users to verify their identity across […] The post What is OIDC and How Does It Work? appeared first on Aembit.
Learn how an AI agent's declared intent connects visibility, access, and control.The post AI agent intent, explained: What Silverfort actually means when we say it appeared first on Silverfort.
4 min readWhat’s Changing With MCP 2026-07-28? If you’ve worked in distributed systems, cloud infrastructure, or API design over the past two decades, the MCP 2026-07-28 changes probably look familiar. Stateless requests, metadata headers for routing, cacheability baked into responses, load-balancer friendliness, HTTP as a first-class substrate and deprecation windows aren’t new ideas. They’re the hard-won lessons […] The post MCP’s Second Act: The Web-Native Protoc
Most enterprises did not decide to adopt the Model Context Protocol. Engineers did, one mcp.json file at a time. The result is a class of asset that reads internal wikis, opens pull requests, queries production databases, and posts to Slack — at machine speed, often without a human seeing the intermediate steps. MCP governance is the discipline of answering one question before that happens: should this MCP server be allowed in our environment, and under what controls? In 2026, that question fina
Protecting privileged identities remains one of the biggest security challenges organizations face today. Yet, it’s time we admit it: the approach taken to solve this problem for nearly three decades has utterly failed. IAM teams were driven to buy tools that were supposed to protect them. In practice, they only gained a false sense of security.   Customers we speak with tell us the same story: millions spent on PAM solutions, only to protect a few hundred accounts, at m
IBM’s latest Cost of a Data Breach report puts the average breach cost at a record $4.99 million. According to the report, AI-driven attacks increased 56% year over year, while breaches involving AI systems and models rose 61%.
Unsecured API keys are a growing risk in AI-driven and agentic systems. Learn how exposure happens, why it matters, and how to secure your applications.
Few things feel better than logging off, leaving the office behind, and taking a well-deserved... La entrada Password Fatigue: Risks After Vacation se publicó primero en Secrets Vault.
Why we built this framework Ask ten CISOs where their identity program stands today, and the answers will differ wildly: different vocabularies, different priorities, different definitions of “done.” There’s no shared standard for how to plan and implement an identity program, and that’s the gap Veza teams have spent years helping organizations close. Identity has […] The post The Identity Security Maturity Model: A Roadmap to Least Privilege appeared first on Veza.
You know the thought experiment. Build a superintelligent AI. Give it one goal: make paperclips. It converts the factory into paperclips. Then the town. Then the planet. Not out of malice. Out of relentlessness. Nick Bostrom used it to make a point about alignment. Most people file it under science fiction and move on. They […] The post Every Agent Is a Paperclip Maximizer appeared first on Hush Security.
Part 1 attacked the MCP server itself. This part assumes all of that is patched and breaks in through the identity layer instead — where nothing is a bug you can close, and the server does exactly what it was told by the wrong person. We walk the 2026-07-28 authorization spec and the RFCs behind it, the confused-deputy attack that comes from getting consent wrong, how EMA and ID-JAG move consent to the IdP — and the four gaps that remain open afterwards, where every token is valid and nothing in
Part 1 attacked the MCP server itself. This part assumes all of that is patched and breaks in through the identity layer instead — where nothing is a bug you can close, and the server does exactly what it was told by the wrong person. We walk the 2026-07-28 authorization spec and the RFCs behind it, the confused-deputy attack that comes from getting consent wrong, how EMA and ID-JAG move consent to the IdP — and the four gaps that remain open afterwards, where every token is valid and nothing in
MCP replaced manual API wiring with one open protocol — and in doing so created a new attack surface where the server itself is the payload. Nothing in the protocol separates a description that documents a tool from one that commands the model. Part 1 of a two-part series. We walk the four adversary classes against MCP — tool poisoning, typosquatting, rug pulls, command injection, API key exfiltration, and sandbox escapes — reconstructing known CVEs against their pre-patch versions to show the m
Every identity system in your enterprise carries a hidden design assumption: that a person is on the other end of the request. A person who authenticates in the morning, holds a session, clicks through a consent screen, and can be reached on Slack when something looks wrong. Agentic AI removes the person. What's left is a credential holder that acts continuously, at machine speed, on inferred intent — and there are now vastly more of them than there are of you. Non-human identities outnumber hum
Every enterprise identity program was designed around a simple assumption: the thing logging in is a person. A person with a password, an MFA device, a predictable workday, and a manager who approves their access. That assumption is now wrong most of the time. Machine identities outnumber human ones by anywhere from 80 to 1 to more than 100 to 1 in the modern enterprise, and AI agents are the fastest-growing slice of that population. The identity systems most organizations run today weren't just
