Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

238 matching stories — in Runtime Application Self-Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

8 .NET Obfuscators Compared for 2026

Point dnSpy or ILSpy at an unprotected .NET assembly and you can get back something close to the original C# in seconds. Hardcoded secrets, license logic, proprietary algorithms, and business rules can all become easier to inspect when they are left unprotected. That is the case for obfuscation. The harder question is which obfuscator fits […]

Announcement

Agentic SOC: Completing the Context Layer with the Browser

The security operations center is undergoing its biggest structural shift in two decades. The recent launch of the Agentic SOC Alliance signals a major milestone: enterprise defense is officially standardizing… The post Agentic SOC: Completing the Context Layer with the Browser appeared first on Jscrambler.

Announcement

Single Sign-On (SSO): How It Works for Banking Apps - Blog | Wultra

Customers expect a consistent authentication experience across mobile banking, online banking, and connected financial services. Single Sign-On (SSO) helps banks deliver that experience by providing centralized access across multiple applications while maintaining strong control over authentication.

New capability

Jscrambler Launches Unified Client-Side Security Platform to Secure Software and Data in the Age of AI

AI is fundamentally changing how software is attacked, and customer data is exposed inside the browser.  As organizations rapidly adopt AI-powered applications, agents, and third-party services, existing security architectures built… The post Jscrambler Launches Unified Client-Side Security Platform to Secure Software and Data in the Age of AI appeared first on Jscrambler.

New capability

Dotfuscator 7.8.0: Introducing Blazor and Avalonia support, improved runtime protection, and more

With rapid advancements in modern .NET development, application protection must evolve with it. For development teams working with interactive web UIs, building desktop apps, or just trying to keep up with AI security challenges, safeguarding everything can be daunting. But with our latest Dotfuscator release, developers get enhanced security coverage for the two frameworks increasingly […]

New capability

GrammaTech Introduces Tbdisasm and IterDisasm, New Tools for Recovering Hidden Code

Ithaca, NY — GrammaTech today announced the open‑source release of Tbdisasm, a new tool that helps experts uncover hidden code inside packed, encrypted, or otherwise obfuscated software. Tbdisasm works by monitoring a target binary’s execution and emitting runtime disassembly as GTIRB, an open intermediate representation for binary analysis and rewriting. The post GrammaTech Introduces Tbdisasm and IterDisasm, New Tools for Recovering Hidden Code appeared first on GrammaTech.

Announcement

THE PAYMENT SKIMMER THAT WENT SILENT AROUND STORE INSIDERS

The Payment Skimmer That Went Silent Around Store Insiders A highly targeted payment skimmer deliberately shut itself down for the people most likely to uncover it. Before displaying its counterfeit card form, the malware compared the shopper’s billing email against 32 addresses associated with the store owner, internal departments, a related business, and an external The post THE PAYMENT SKIMMER THAT WENT SILENT AROUND STORE INSIDERS appeared first on Source Defense.

Announcement

Identity Verification in Banking: What Banks Need to Know in 2026 - Blog | Wultra

Opening a bank account today rarely means walking into a branch. Customers expect to verify their identity remotely and on mobile, while banks are expected to catch fraud, meet regulatory requirements, and keep the process fast enough that applicants actually complete it. Identity verification is where those pressures meet.

Announcement

App Shielding: 9 Techniques to Protect Mobile Apps

Mobile apps give you on-the-go access to banking services, email, the internet, games, and more. They’re a must-have for any smartphone owner. However, they’re also attractive targets for hackers seeking to steal sensitive information and intellectual property (IP), and to spy on users.  To protect businesses and consumers from mobile app hacks, some developers incorporate […]

Announcement

FROM MAGECART TO CLICKFIX: GOOGLE CALLBACK ABUSE HITS 100+ WEBSITES

From Magecart to ClickFix: Google Callback Abuse Hits 100+ Websites More than 100 websites were turned into potential launch points for attacks against visitors’ Windows devices. Source Defense researchers previously documented attackers abusing Google callback weakness to deliver Magecart payment skimmers. In this latest campaign, the same delivery method has been adapted for ClickFix, a The post FROM MAGECART TO CLICKFIX: GOOGLE CALLBACK ABUSE HITS 100+ WEBSITES appeared first on Source Defens

Announcement

When AI Reviewers Cannot Agree

A controlled run shows what happens when multi-round AI code review never reaches a fixed point, and why "non-convergence" is a signal teams should treat as a stop condition.

Announcement

Beyond the Vault: What Banking Sites Quietly Share Before You Ever Log In

Banks present themselves as the most careful custodians of personal and financial data. Customers expect that trust to extend to every digital interaction including public websites and online application flows.… The post Beyond the Vault: What Banking Sites Quietly Share Before You Ever Log In appeared first on Jscrambler.

Announcement

Scaling Trust: How WeAre8 Secured Growth with Approov's API Protection

In the digital age, social media platforms often face a critical trade-off: move fast and risk security breaches, or slow down to lock down data. For WeAre8—a purpose-engineered platform that redistributes value to creators, users, and communities—compromising on either wasn't an option.

Announcement

How to Build a Mobile Application Risk Management (MARM) Framework

Overview Traditional mobile security has long relied on compliance-driven checklists: Is ProGuard enabled? Are API keys hidden in a .env file? Is root detection implemented? While a checklist provides a baseline, it creates a false sense of security. Mobile applications do not execute in a sandbox controlled by your enterprise; they run on untrusted client devices under hostile conditions.

Announcement

Electronic Signatures in Banking: What Financial Institutions Need to Know - Blog | Wultra

From loan agreements to onboarding documents, banks increasingly need ways to sign and verify sensitive transactions digitally without adding complexity to the customer experience. This article explores how electronic signatures are being used in banking today, what the different signature types mean in practice, and where institutions are focusing as digital signing becomes part of everyday banking operations.

Announcement

The Hidden Cost of Legacy C++

By Sarah Riggins and Dr. Denis Gopan The Memory Safety Reckoning: Part 2 of 4 The post The Hidden Cost of Legacy C++ appeared first on GrammaTech.

Announcement

Running PII detection locally with the Rampart NER model

How Arcjet added an optional on-device model backend for sensitive information detection: a pluggable rule interface, deterministic recognizers for structured data, offset reconstruction for token-classification output, and local ONNX inference in the request path.