Secure Sensitive Data with Cyera and Akamai Guardicore Segmentation
Protect sensitive data by pairing Cyera's data discovery with Akamai Guardicore Segmentation to enforce dynamic, data-aware microsegmentation rules.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
221 matching stories — announcement, in Runtime Application Self-Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The HulkApps checkout hijack: how trusted Shopify apps became a phishing funnel
A Shopify app's config API served a script that swapped real checkouts for fake ones on biliing[.]top. How it worked, who was hit, and what to check.
Mythos 5: The Determinism Problem
In May we published what AI security scanning actually costs. Three scanners on one codebase agreed on 5% of findings. One scanner run three times reproduced 17% of its own results. A $315 scan generated $128,000 in triage labor. The most common response we got was patience. The models were early. The next generation would fix it. To see those early results, here’spart one of the series.
Securing Connected Vehicles: Beyond Traditional Cybersecurity Measures
Connected vehicle security is an architectural problem. As vehicles become software-defined platforms, their attack surfaces extend beyond electronic control units, in-vehicle networks, and manufacturing infrastructure to include mobile applications, cloud services, third-party integrations, and the APIs connecting them.
AI-Powered eSkimming Is Changing the Economics of Retail Attacks
Cybercriminals have found a way to make eSkimming attacks faster, cheaper, and easier to scale. Autonomous artificial intelligence (AI) agents can now... Read More... The post AI-Powered eSkimming Is Changing the Economics of Retail Attacks appeared first on Source Defense.
What a Sentence Forgets: Preserving Context in Document Ingestion
Android App Obfuscation: A Layered Approach to Security
A 2025 empirical study analyzing more than 500,000 Android APKs found that 92.5% of the top 1,000 Google Play apps in its 2023 dataset used some form of code obfuscation. Among apps ranked outside the top 30,000, that figure was 61.9%. The findings suggest that widely used applications are more likely to include obfuscation and […]
Why Native Hardware Attestation Isn’t Enough and How to Fix It
Mobile app security has fundamentally shifted. We can no longer rely on the assumption that an application is running in a safe environment just because it was downloaded from an official app store. To protect APIs, backend infrastructure, and sensitive user data, developers have increasingly turned to device attestation— Developers increasingly use app and device attestation to obtain cryptographically verifiable evidence about app authenticity and selected device-integrity properties.
How we built AI agent behavior drift analysis with Cloudflare Clef
How Arcjet monitors AI coding agent sessions in real time, detecting risky actions and behavior drift with Cloudflare's Clef decision model.
Website Tracking and GDPR: Why Browser Behavior Matters
Website tracking can collect and share personal data during a live browser session. Privacy teams need to understand that behavior alongside their... Read More... The post Website Tracking and GDPR: Why Browser Behavior Matters appeared first on Source Defense.
Vibe Coding VS Code Extension Monitors All Developer Activity
Dedicated Client-Side Security Tools to Comply with PCI 6.4.3 and PCI 11.6.1
As the payment landscape evolves, compliance with PCI DSS v4 (v4.0.1 is the latest) is now a reality, with the deadline to adopt the future-dated requirements behind us. It is… The post Dedicated Client-Side Security Tools to Comply with PCI 6.4.3 and PCI 11.6.1 appeared first on Jscrambler.
Why Security Tool Consolidation Fails: Your SIEM Can't See Application Attacks
Security tool consolidation fails because traditional security tools operate outside application runtime where attacks actually execute. While consolidation can reduce complexity and centralize alerts, it cannot fix the fundamental blind spot: WAFs, EDR and SIEM platforms lack visibility into actual code execution, data flows and application logic. The solution isn't more consolidation or new tools, but enriching existing security investments with Application Detection and Response (ADR) to prov
Cybersecurity Awareness Month: Protecting Software When AI Is All Around
October is Cybersecurity Awareness Month, an annual initiative to remind us all to keep online security top of mind. The Cybersecurity and Infrastructure Security Agency (CISA), the federal agency responsible for helping protect U.S. critical infrastructure from cyber and physical threats, leads the campaign. Its 2026 theme, “Securing the Next 250,” connects the push to […]
Saudi Central Bank Sets Quantum Readiness Deadlines for Financial Institutions - Blog | Wultra
Financial institutions in Saudi Arabia now face concrete deadlines to prepare for quantum computing risks. With the Saudi Central Bank (SAMA) issuing new requirements in August 2026, financial institutions now have specific milestones to work toward, and the first one arrives before the end of this year.
Closing the Browser Privacy Gaps Your CMP Misses
Most privacy programs have a consent banner, a preference center, and a CMP dashboard showing everything is green. But regulators and plaintiffs no longer stop at “do you have a… The post Closing the Browser Privacy Gaps Your CMP Misses appeared first on Jscrambler.
cside Wins the SourceForge Fall 2026 Leader Award
SourceForge named cside a Fall 2026 Leader, an award for products whose user reviews rank in the top 5% of the 100,000 products listed on SourceForge.
How to Compare eSkimming Protection Platforms
The most useful eSkimming platform comparison begins with the point of enforcement. What happens in the browser when an approved script, tag... Read More... The post How to Compare eSkimming Protection Platforms appeared first on Source Defense.
10 best browser fingerprinting tools in 2026
Compare the 10 best browser fingerprinting tools in 2026, from open-source libraries to fraud platforms, ranked with cside first for fraud signals.
Next-Gen Mobile Security: Approov and ENU's Groundbreaking Partnership
In my role, I spend a lot of time looking at how the threat landscape is shifting. With GenAI accelerating automated attacks and weaponizing vulnerabilities at scale, traditional static security controls just don't cut it anymore. Automated tools now probe API endpoints and architectures faster than human teams can patch them, rendering basic obfuscation and perimeter defenses obsolete.
PreEmptive’s complete guide to app shielding
PreEmptive has provided application shielding and hardening solutions for over 20 years, protecting .NET, MAUI, Java, Android, and JavaScript applications from reverse engineering, tampering, malware insertion, debugging, and runtime attacks. Dotfuscator for .NET and MAUI, DashO for Java and Android, and JSDefender for JavaScript integrate into development workflows to apply layered protection such as code […]
Authentication Flexibility Is Becoming a Strategic Capability for Banks - Blog | Wultra
For most of the past decade, the authentication question banks asked was: Which method should we standardize on? Mobile apps provided a compelling answer, and most institutions converged on them. That question is now changing.
Beyond Vendor Assessments: Managing Third-Party Risk Where Customer Data Is Actually Exposed
Software supply chain security has a well-defined starting line. It has no finish line, even though most programs are built as if it does. In recent years, organizations have made… The post Beyond Vendor Assessments: Managing Third-Party Risk Where Customer Data Is Actually Exposed appeared first on Jscrambler.
How Runtime Intelligence Transforms AI Vulnerability Remediation
TL;DR AI-powered vulnerability remediation often fails because it lacks context about how your applications actually work. Runtime intelligence solves this by giving AI real-world application behavior data, architecture insights and dependency information. This context-aware approach reduces remediation time by up to 87% while eliminating the false positives that plague traditional scanning.
What Makes an Electronic Signing Process Trustworthy? - Blog | Wultra
Choosing the right type of electronic signature is only part of building a reliable signing process. Banks also need to consider how the signer is identified and authenticated, how consent and document integrity are protected, and how evidence can be verified over time.
DARPA Funds GrammaTech to Strengthen Firmware Protections
Ithaca, NY – September 15, 2026 — GrammaTech, Inc., a leading provider of software assurance and cyber resilience research and industry-leading products, has been awarded $1,491,802.00 in additional funding from DARPA to enhance its REAFFIRM firmware‑analysis and protection technology. The post DARPA Funds GrammaTech to Strengthen Firmware Protections appeared first on GrammaTech.
GrammaTech Names Dr. Lucja Kot as Chief Executive Officer
GrammaTech has appointed Dr. Lucja Kot as Chief Executive Officer, bringing two decades of experience in cybersecurity, software assurance, and advanced research to lead the company’s next chapter. The post GrammaTech Names Dr. Lucja Kot as Chief Executive Officer appeared first on GrammaTech.
The Future Belongs to Automated Modernization
The Memory Safety Reckoning: Part 4 of 4 The post The Future Belongs to Automated Modernization appeared first on GrammaTech.