Just In Time Access and Session Termination
The post Just In Time Access and Session Termination appeared first on Xage Security.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,216 matching stories — in Secure Access Service Edge (SASE/SSE) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
FortiGate Hardware End-of-Life: Every Model, Every Date (2026–2031)
Every FortiGate hardware end-of-life date in one sortable reference: EOO, LSED and EOS per model, plus what to do when your appliance's date nears.
Voice and Meeting Assistants as a New Data Exposure Channel: What Security Teams Must Monitor in 2026
Table Of Content What Makes Voice and Meeting Assistants a Distinct Data Exposure Channel? How Do Retention and Processing Policies […]
Zero Networks Expands APAC Reach with Exclusive Networks Hong Kong
Today, Zero Networks announces a partnership with Exclusive Networks Hong Kong, the leading cybersecurity distributor in the region bringing automated containment to one of APAC's most strategic markets. Together, we're helping enterprises stop AI-speed attacks before one compromised device becomes a business-wide crisis, protecting uptime, revenue, and operations even when attackers get inside. The collaboration gives Exclusive Networks' Hong Kong resellers a fast path to…
Voice, Video, and Screen-Share Leaks: The DLP Blind Spot in Modern Meeting Tools
Table Of Content What Makes Screen-Shares and Video Calls a DLP Blind Spot? What’s the Real Attack Surface Inside Meeting […]
What Enterprise Security Questionnaires Actually Ask Startups: A Response Guide for Lean Teams
Table Of Content What Categories Do Enterprise Security Questionnaires Actually Cover? What Does It Actually Cost a Lean Team to […]
Operation QUICSILVER: China-Nexus Actor Targets Myanmar Diplomats via VHD-Delivered Go Backdoor
Contents Introduction Key Targets Industries Affected Geographical focus Infection Chain Campaign Timeline Initial Findings Looking into the Decoy Document Technical Analysis Stage 1 – LNK-Based Initial Access Stage 2 – Split Payload Reconstruction via ftp Script Stage 3 – QUICAgent Implant – Go-Based Backdoor Infrastructure & Attribution Conclusion Seqrite Protection Indicators of Compromise (IOCs) MITRE […] The post Operation QUICSILVER: China-Nexus Actor Targ
MDR Assurance – Insurance-Backed Financial Protection for Athena MDR
MDR Assurance – Insurance-Backed Financial Protection for Athena MDR Sangfor Technologies Mon, 08/17/2026 - 17:08 File sangfor-mdr-assurance.pdf (663.5 KB) Type Brochure Service Sangfor Cyber Guardian MDR Sangfor Athena MDR - Managed Detection and Response Service Body Discover MDR Assurance, which extends Sangfor Athena MDR with insurance-backed financial support for eligible incidents, with coverage of up to USD 1 million. This flyer explains the key advantages, how MDR Assurance works, who it
The Four Numbers That Justify AI Security Spend
This blog was originally published in July with 2025 figures, and was updated on August 17 with 2026 data. Any CISO who has ever had to make a case for more security budget will know that CFOs have a tendency to ask one question when risk is discussed: What does this actually cost us if […]
Sangfor & Veeam: Accelerating VMware Modernization and Data Protection
Sangfor & Veeam: Accelerating VMware Modernization and Data Protection Sangfor Technologies Mon, 08/17/2026 - 14:10 Image Event Type Live Webinar Event Link Register Now Product Sangfor HCI - Hyper Converged Infrastructure Cloud Platform Sangfor HCI - Hyperconverged Infrastructure Body @media (max-width: 768px) { .card-container { flex-direction: column !important; } .card-container > div { text-align: center !important; } .card-container .text-align-right { text-align: center !important; }
How to Search in a Document: A Complete Step-by-Step Guide
Whether you’re combing through a 200-page contract, a research paper, or a company policy manual, manually scanning every line for a specific word or phrase is a waste of time. Fortunately, nearly every document format and platform — Word, PDF, Google Docs, web browsers, and even code editors — comes with a built-in search feature […]
What Does Malicious Mean? Understanding Threats in a Cyber World
Have you ever opened an email attachment and immediately felt a knot in your stomach, wondering if you’d just let something dangerous into your system? If so, you’ve already brushed up against the core question this article answers: what does malicious mean, and why should every internet user care? In simple terms, “malicious” describes any […]
The Complete Guide to End User Computing and Modern Virtualization Services
The Complete Guide to End User Computing and Modern Virtualization Services Sangfor Technologies Mon, 08/17/2026 - 11:30 Summarize this news article with AI: Ask ChatGPT Ask Grok Ask Perplexity Ask Claude Ask Google AI Today’s workplace has no fixed address. A manager might start the day reviewing quarterly results on their office desktop, suggest revisions on a tablet from an airport lounge, then approve the final report from a laptop at home. Work has been liberated from physical space,
Advisory Solutions reaches 1Password Certified Partner status
The launch of 1Password Enterprise Password Manager – MSP Edition marked a critical step in 1Password’s mission to support our Managed Service Provider (MSP) partnerships. Now, we are pleased to announce that Advisory Solutions, a New York City-based MSP that works with companies worldwide, has reached the Certified Tier in the 1Password Partner program. 1Password's new Certified tier is a milestone we’ve implemented to recognize the investment and success of MSP partners who have reached 1,000
Developer secrets management that keeps delivery moving
In March 2025, attackers compromised a GitHub Action used in the development pipelines of more than 23,000 repositories. The malicious code exposed API keys, cloud credentials, SSH keys, and other tokens in workflow logs. Affected teams were advised to review their workflow runs and rotate any credentials the logs exposed.Affected organizations had to determine which credentials had been exposed, what those credentials could reach, and how to replace every one of them without halting development
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of the summer with the new http malleable profiles, MCP functionality and linux multi fetch payloads (mor
Black Hat USA 2026: Cybersecurity Leaders Worth Following
CYBR.SEC.Media | Bill Brenner | August 14, 2026 The post Black Hat USA 2026: Cybersecurity Leaders Worth Following appeared first on Xage Security.
Breaking the Water Cyberattack Cycle
The post Breaking the Water Cyberattack Cycle appeared first on Xage Security.
The Kubernetes Rubik’s Cube: Solving Visibility, Governance, and Segmentation at Scale
The K(C)ube Almost everyone has picked up a Rubik's Cube at some point. The first few moves feel productive. You line up a row of colours, complete part of a side, and convince yourself you're making progress. Then one more twist undoes everything you just achieved. The challenge isn't that the cube is impossible to solve. The challenge is that every move affects something else. Kubernetes environments often evolve in exactly the same way. A cluster…
Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every two weeks — see what identity-first reachability would have stopped. The post Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks appeared first on NetFoundry.
Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every two weeks — see what identity-first reachability would have stopped. The post Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks appeared first on NetFoundry.
How Fast Is 5G Internet? A Complete Guide for Businesses and Tech Leaders
If you’ve asked yourself “how fast is 5G internet, really?” you’re not alone. Carrier ads throw around numbers like “up to 10 Gbps,” but the speed your business actually experiences on a Tuesday afternoon in a downtown office is a very different story. For IT leaders evaluating network upgrades, remote-work infrastructure, or IoT deployments, understanding […]
Windows 10 ESU Endpoints: How to Isolate the Machines You Can’t Patch
Windows 10 ESU doubles to ±€112 per device on 14 October 2026. The cost maths for a 200-device fleet, 5 device classes, and the agentless alternative.
Over-Tooled, Under-Coordinated: The Real Cost of Tool Sprawl
Ask a security operations analyst how many consoles they open during a routine data investigation, and the number is rarely small. Ask how confident they feel that they’ve successfully assembled a comprehensive picture, and the number drops further. For a majority of security teams it isn’t a lack of data that erodes both efficiency and […]
No robots in the gym, with Keith Hoodlet
Listen to the episode on Apple PodcastsnullListen nowListen to this episode on SpotifynullListen nowThis week on the Chasing Entropy Podcast, host Dave Lewis sits down with Keith Hoodlet, Director of Security Research at 1Password and leader of the newly formed Off-by-1 Labs. Keith’s mission? “To throw stones at glass houses, not to hear the crash necessarily, but to help people build better and more secure houses.”A villain-turned-hero origin storyAs Keith puts it, “I’ve always been really focu
Why Customers Love Mowgli: The IKEA Effect in Cybersecurity
I have often wondered why some of our longest-standing customers feel such a strong attachment to Mowgli, Skyhigh Security’s policy... The post Why Customers Love Mowgli: The IKEA Effect in Cybersecurity appeared first on Skyhigh Security.
Vulnerability Management in the Frontier AI Era: How to Proactively Stop Exploitation
Vulnerability exploitation now ranks as the #1 way attackers gain access to networks, according to leading industry reports – Mandiant’s 2026 M-Trends report attributes 32% of initial infections to exploits, while exploitation of vulnerabilities similarly accounts for initial access in 31% of breaches investigated for Verizon’s 2026 DBIR, a 55% increase year-over-year. The timing of this trend directly coincides with the rise of frontier AI models like Mythos and…
Non-Human Identity Is Becoming a Top AI Security Priority
At A Glance For the past few years, non-human identity has been the kind of problem security teams acknowledged in a slide but rarely funded. That’s changing. New survey data from 200 CISOs and CTOs shows this has quietly become the top named security concern in AI deployments, and more importantly, organizations are no longer […] The post Non-Human Identity Is Becoming a Top AI Security Priority appeared first on NetFoundry.
Enterprise Browser vs Browser Isolation: Two Answers to the Same Problem
Island-style enterprise browsers or RBI/WAI isolation? The four patterns, honest limits (patch lag, latency), 300-user costs and verdicts per scenario.
Quantum is an asset problem. Not a math problem.
Executive Order 14412 sets PQC deadlines for U.S. agencies and contractors. Harvest-now-decrypt-later makes this a risk today, not in 2030.
How to Prevent RBAC Role Explosion with Nested Access Lists
Learn how to use access lists to prevent RBAC role explosion.
Putting OpenAI Cyber Models to Work for Defenders
Unit 42 is putting the latest frontier cyber models to work across customer environments to find, validate and help remediate the attack paths that matter most. In May, we introduced Frontier AI … The post Putting OpenAI Cyber Models to Work for Defenders appeared first on Palo Alto Networks Blog.
Why Netskope Let AI Hack Its Own Software
On the latest episode of Security Visionaries, host Emily Wearmouth sits down with Mohit Kulamkolly, senior engineer on Netskope’s security red team, for a candid look at what happens when you point frontier AI models at your own product’s code. Mohit draws on his team’s research (using Claude Mythos and ChatGPT 5.5), explains what a memory corruption bug actually is, and why it remains one of the hardest and most dangerous flaws to find. From building isolated sandbox labs that let AI agents hu
Navigating SAMA, ADGM & DFSA Requirements with Teleport
Learn how Teleport helps CSPs meet SAMA, ADGM, and DFSA compliance.
How OpenAI's AI Models breached Hugging Face and what behavioral baselining is built to catch | Todyl
OpenAI models acted autonomously to breach Hugging Face servers undetected. Here's what happened and how behavioral analysis can help detect similar attacks.
VPN Is Dead: Why MSPs Are Moving to SASE | Todyl
In the face of modern threats, VPN falls short of the level of network security organizations need to implement hybrid work effectively. Learn how SASE and a ZTNA approach are raising the bar in this post.
GRC for MSPs: Managing Compliance at Scale Across All Clients | Todyl
Manage compliance across every client with a GRC for MSPs platform that automates frameworks, tracks risk, and centralizes policy management in one place.
Are Google Workspace and Microsoft 365 HIPAA Compliant? (2026)
Healthcare data contains some of the most sensitive information about a person, which is why it's protected by HIPAA (Health Insurance Portability and Accountability Act) in the U.S. HIPAA is a set of regulations that aim to protect the privacy and security of patients' protected health information (PHI).
How Black Hat Proved DNSFilter is on the Right Expansion Path
By Ken Carnesi, CEO & Co-Founder, DNSFilter I've been going to Black Hat for years, and I can tell you plainly: This year was different. Shadow AI and AI governance are top of mind now, an evolution from what we were hearing at RSA earlier this year. In an AI era, taking a DNS First approach to cybersecurity isn't optional, and we're built to solve exactly that problem.
August 2026 Security Update
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discove