What is a fraud detection API? How it works and what to look for
A fraud detection API returns a device fingerprint, AI agent flag, VPN status, and risk score in real time before a login or checkout completes.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
222 matching stories — announcement, in Runtime Application Self-Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Single Sign-On (SSO): How It Works for Banking Apps - Blog | Wultra
Customers expect a consistent authentication experience across mobile banking, online banking, and connected financial services. Single Sign-On (SSO) helps banks deliver that experience by providing centralized access across multiple applications while maintaining strong control over authentication.
The two speeds of AI agent runtime security
AI agent security is moving at two speeds: most teams need action-level runtime enforcement now, while Google’s Beyond Zero points to what comes next.
THE PAYMENT SKIMMER THAT WENT SILENT AROUND STORE INSIDERS
The Payment Skimmer That Went Silent Around Store Insiders A highly targeted payment skimmer deliberately shut itself down for the people most likely to uncover it. Before displaying its counterfeit card form, the malware compared the shopper’s billing email against 32 addresses associated with the store owner, internal departments, a related business, and an external The post THE PAYMENT SKIMMER THAT WENT SILENT AROUND STORE INSIDERS appeared first on Source Defense.
Identity Verification in Banking: What Banks Need to Know in 2026 - Blog | Wultra
Opening a bank account today rarely means walking into a branch. Customers expect to verify their identity remotely and on mobile, while banks are expected to catch fraud, meet regulatory requirements, and keep the process fast enough that applicants actually complete it. Identity verification is where those pressures meet.
AI Security Remediation Graph: How AI-Powered Vulnerability Fixes Transform Defense
TL;DR An AI security remediation graph combines runtime application intelligence with AI to automatically generate security fixes that work in your production environment. Unlike generic AI tools that provide one-size-fits-all patches, this approach understands your application's specific behavior and creates fixes that reduce remediation time by up to 87%.
App Shielding: 9 Techniques to Protect Mobile Apps
Mobile apps give you on-the-go access to banking services, email, the internet, games, and more. They’re a must-have for any smartphone owner. However, they’re also attractive targets for hackers seeking to steal sensitive information and intellectual property (IP), and to spy on users.  To protect businesses and consumers from mobile app hacks, some developers incorporate […]
FROM MAGECART TO CLICKFIX: GOOGLE CALLBACK ABUSE HITS 100+ WEBSITES
From Magecart to ClickFix: Google Callback Abuse Hits 100+ Websites More than 100 websites were turned into potential launch points for attacks against visitors’ Windows devices. Source Defense researchers previously documented attackers abusing Google callback weakness to deliver Magecart payment skimmers. In this latest campaign, the same delivery method has been adapted for ClickFix, a The post FROM MAGECART TO CLICKFIX: GOOGLE CALLBACK ABUSE HITS 100+ WEBSITES appeared first on Source Defens
When AI Reviewers Cannot Agree
A controlled run shows what happens when multi-round AI code review never reaches a fixed point, and why "non-convergence" is a signal teams should treat as a stop condition.
Beyond the Vault: What Banking Sites Quietly Share Before You Ever Log In
Banks present themselves as the most careful custodians of personal and financial data. Customers expect that trust to extend to every digital interaction including public websites and online application flows.… The post Beyond the Vault: What Banking Sites Quietly Share Before You Ever Log In appeared first on Jscrambler.
Live Webinar: How Hackers are Breaking Your Mobile Apps | Approov
How much can an attacker learn about your backend by reverse-engineering your mobile app? More than you might think.
How to Build an AI Security Framework for DevSecOps Teams
Software developers have a new, unexpected headache. As AI becomes more deeply embedded in software applications, it creates new attack surfaces that traditional AppSec programs do not fully address on their own. Developers need a security framework that helps manage risk across the broader AI stack, from models and prompts to APIs, dependencies, runtime behavior, […]
The Hidden Costs of Application Security: A Total Cost of Ownership Analysis
TL;DR The true Total Cost of Ownership (TCO) for application security is 2-3x what organizations track, impacting both budget and developer velocity. While visible costs like tool licensing and security salaries appear on budgets, the larger expenses hide in developer time adapting generic fixes, SOC analysts investigating low-priority alerts, exponential risk accumulation and opportunity costs from delayed features. Runtime intelligence eliminates these hidden costs by providing application con
Scaling Trust: How WeAre8 Secured Growth with Approov's API Protection
In the digital age, social media platforms often face a critical trade-off: move fast and risk security breaches, or slow down to lock down data. For WeAre8—a purpose-engineered platform that redistributes value to creators, users, and communities—compromising on either wasn't an option.
SOURCE DEFENSE RESEARCH FLAGS RISKY LOADER ON 12K+ WORDPRESS SITES
Source Defense Research Flags Risky Loader on 12K+ WordPress Sites A suspicious JavaScript loader found on more than 12,000 WordPress sites shows why client-side security cannot depend only on known bad domains or confirmed final payloads. The impact is broad: thousands of ordinary websites may be unknowingly giving an attacker a browser-side foothold that can The post SOURCE DEFENSE RESEARCH FLAGS RISKY LOADER ON 12K+ WORDPRESS SITES appeared first on Source Defense.
Hashing Algorithms
Hashing is the process of taking any piece of data- a password, a file, a message- and converting it into a short, fixed-length string of characters called a hash, digest,… The post Hashing Algorithms appeared first on Jscrambler.
Security Advisory: Unauthorized Publication of a Malicious npm Package Affecting CI
At a Glance Affected package: jscrambler Affected products: Code Integrity Affected versions: 8.14/8.16/8.17/8.18/8.20 Safe version: 8.22 Other affected packages and versions: jscrambler-webpack-plugin 8.6.2 gulp-jscrambler 8.6.2 grunt-jscrambler 8.5.2 jscrambler-metro-plugin 9.0.2 Safe… The post Security Advisory: Unauthorized Publication of a Malicious npm Package Affecting CI appeared first on Jscrambler.
How to Build a Mobile Application Risk Management (MARM) Framework
Overview Traditional mobile security has long relied on compliance-driven checklists: Is ProGuard enabled? Are API keys hidden in a .env file? Is root detection implemented? While a checklist provides a baseline, it creates a false sense of security. Mobile applications do not execute in a sandbox controlled by your enterprise; they run on untrusted client devices under hostile conditions.
Web Application and API Protection (WAAP) Guide
Most security teams already have web application and API protection, or WAAP, on the roadmap. The category makes sense. Modern applications expose APIs everywhere, and WAAP was built to defend that surface with a bundled set of capabilities that typically includes WAF, bot management, DDoS protection, and API security. What gets less attention is where […]
Electronic Signatures in Banking: What Financial Institutions Need to Know - Blog | Wultra
From loan agreements to onboarding documents, banks increasingly need ways to sign and verify sensitive transactions digitally without adding complexity to the customer experience. This article explores how electronic signatures are being used in banking today, what the different signature types mean in practice, and where institutions are focusing as digital signing becomes part of everyday banking operations.
The Hidden Cost of Legacy C++
By Sarah Riggins and Dr. Denis Gopan The Memory Safety Reckoning: Part 2 of 4 The post The Hidden Cost of Legacy C++ appeared first on GrammaTech.
Running PII detection locally with the Rampart NER model
How Arcjet added an optional on-device model backend for sensitive information detection: a pluggable rule interface, deterministic recognizers for structured data, offset reconstruction for token-classification output, and local ONNX inference in the request path.
Making Arcjet's Wasm bot detector smaller and faster
Reducing WebAssembly bundle size: how Arcjet shrank its Rust bot detector 27% with Aho-Corasick, keeping per-request memory isolation and using Wizer snapshots.
Why Memory Safety Became a National Security Priority
By Sarah Riggins and Dr. Denis Gopan The Memory Safety Reckoning: Part 1 of 4 The post Why Memory Safety Became a National Security Priority appeared first on GrammaTech.
GrammaTech Research Featured Across Talks and Demos at HCSS
Ithaca, NY — GrammaTech will present four research efforts at the High Confidence Software and Systems Conference. The post GrammaTech Research Featured Across Talks and Demos at HCSS appeared first on GrammaTech.