Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,215 matching stories — in Secure Access Service Edge (SASE/SSE) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Right now, in one of your employee's personal vaults, there's a login for a vendor portal your team has been using for three years. Whoever set it up no longer works at the company. The password has never been rotated. And until today, you didn't know it existed.That credential was created outside your systems, became essential to a business workflow, and went invisible. Every organization has hundreds like it: break-glass accounts copied into multiple vaults as a precaution, contractor logins t
No developer wants to be responsible for causing a catastrophic breach. But security best practices are often incompatible with the expectation that developers constantly write and ship code, and that velocity is massively accelerating thanks to AI adoption. Developers trying to work fast need convenience, but the easiest place to put a developer secret can sometimes be the riskiest place to leave it. For many developers, that place is a local .env file: fast, familiar, and supported by the tool
Here's a moment that comes up in nearly every compliance review: a security engineer pulls a list of IAM roles in the AWS environment. The list is long. Some roles were created for a migration project that closed two quarters ago, a few belong to contractors who haven't worked there in over a year, and others are attached to agentic identities without any way to see which human they were acting on behalf of. There's no ticket to clean them up, no alert when the access outlived its purpose, and n
The Department of War has updated their requirements for CMMC Phase II Read this blog to see how you can prepare your defense contractor clients for the changes.
MSPs helping DoD contractors achieve CMMC 2.0 compliance need a clear scope, defined responsibilities, and the right security stack. Here is your practical guide.
Your employees aren't trying to create compliance incidents by using AI tools. They're trying to finish their work faster. According to a 2026 BCG survey, 74% of frontline employees now use generative AI every day or a few times a week. When an employee uses an enterprise AI assistant to summarize a customer contract before a meeting, another pastes application logs into a public generative AI tool to troubleshoot an issue, or a developer relies on an AI coding assistant connected to an internal
Every identity system in your enterprise carries a hidden design assumption: that a person is on the other end of the request. A person who authenticates in the morning, holds a session, clicks through a consent screen, and can be reached on Slack when something looks wrong. Agentic AI removes the person. What's left is a credential holder that acts continuously, at machine speed, on inferred intent — and there are now vastly more of them than there are of you. Non-human identities outnumber hum
In mid-July, Hugging Face disclosed a breach of part of its production infrastructure. The unusual part was not the intrusion itself, it was the attacker: an autonomous AI agent that ran thousands of actions at machine speed, and which Hugging Face could not initially attribute to any specific model. Five days later, OpenAI disclosed that […]
SIEM vs. XDR vs. MDR: understand the real differences and which security model gives your MSP the threat visibility and response speed you actually need.
In today’s hyperconnected world, organizations face cyber threats that extend far beyond their internal networks. Attackers target brands through phishing websites, leaked credentials, exposed assets, social media impersonation, and third-party vulnerabilities. These risks can damage an organization’s reputation, disrupt operations, and lead to financial losses long before traditional security tools detect them. This is where […] The post How Digital Risk Management Services St
Every enterprise network built in the last two decades was designed around the same assumption: traffic is predictable, applications live in a data center, and humans generate the load. AI just broke that assumption. Copilot, ChatGPT Enterprise, agentic workflows, and retrieval-augmented generation don’t behave like the traffic MPLS or first-generation SD-WAN were built for. They’re... The post Secure SD-WAN and Unified SASE: What AI-Driven Enterprises Need to Know Before Leaving MPL
High-profile events consistently attract opportunistic attackers, and the 2026 FIFA World Cup was a prime example of this trend. Because the tournament generated massive global interest and traffic, it created a perfect environment for hackers to exploit unsuspecting users. They used various techniques, from simple social engineering to complex malware delivery schemes, tailored to tap […]
Last week, Hugging Face published a security incident disclosure. Datasets tampered with, credentials harvested, an intruder moving laterally across internal clusters over a weekend, serious enough that they looped in law enforcement. Standard breach writeup, if a little more dramatic than most. Then, five days later, OpenAI published its own post about the exact same […] The post We Just Got Our First AI Insider Threat, and Nobody’s Ready for It appeared first on Portnox.
Portnox CFO Bryce Birdsong has been recognized by the Austin Business Journal as a winner in its 2026 Best CFOs Awards, taking the top spot in the small company category. The recognition caps off a standout 2025 for Birdsong, who joined Portnox three years ago. Since then, he’s built the financial model the company now […] The post Portnox CFO Bryce Birdsong Named One of Austin’s Best CFOs appeared first on Portnox.
Excessive privileged access is the norm in enterprise environments. Ninety-nine percent of users, roles, and services hold excessive standing permissions; meanwhile, privileged ports are used somewhere inside the average enterprise every 10 minutes, according to Zero Networks telemetry. And those same ports – RDP, SMB, WinRM, SSH, RPC – are the primary highways for lateral movement, with more than 70% of threat activity flowing through just four admin protocols. Zero standing…
Go to Device Platform Intelligence Added Platforms 45 Platforms are added Platform Name Node Type2 Node Type Alldocube iPlay 70 Max Pro Tablet Tablet & PMP Mobile Device Alldocube iPlay 80 mini Pro Tablet Tablet & PMP Mobile Device Allen-Bradley PowerFlex 525 Inverter ICS/OT IoT/OT Arista CCS-720DT-48S Switch Switch Switch BBK Vivo Y300t Phone Mobile […]
Go to Device Platform Intelligence Added Platforms 45 Platforms are added Platform Name Node Type2 Node Type Alldocube iPlay 70 Max Pro Tablet Tablet & PMP Mobile Device Alldocube iPlay 80 mini Pro Tablet Tablet & PMP Mobile Device Allen-Bradley PowerFlex 525 Inverter ICS/OT IoT/OT Arista CCS-720DT-48S Switch Switch Switch BBK Vivo Y300t Phone Mobile […]
Every enterprise identity program was designed around a simple assumption: the thing logging in is a person. A person with a password, an MFA device, a predictable workday, and a manager who approves their access. That assumption is now wrong most of the time. Machine identities outnumber human ones by anywhere from 80 to 1 to more than 100 to 1 in the modern enterprise, and AI agents are the fastest-growing slice of that population. The identity systems most organizations run today weren't just
Federal agencies have an AI control problem. One that matters more now than it did a month ago. Earlier this month the White House issued an Executive Order (check out our blog) directing federal agencies to begin deploying AI enabled cyber defenses within 30 days, and mandating that CISA issue new AI security guidance for […]
A remote code execution vulnerability in Fastjson affects every version up to and including 1.2.83. A remote attacker can run arbitrary code on a vulnerable server by sending it specially crafted JSON — no user privileges, no victim interaction, and no third-party libraries required. ThreatBook TDP® (Threat Detection Platform) has already captured this vulnerability being exploited in the wild, so if you run an affected version without SafeMode enabled, treat remediation as urgent.
NetFoundry makes mutual TLS (mTLS) automatic and effortless — no PKI to build, no certificates to manage, no code to rewrite. See how Zero Trust gets simpler. The post mTLS Without the Pain: How NetFoundry Simplifies Mutual TLS at Scale appeared first on NetFoundry.
Security teams are operating in an environment that grows more complex every quarter. AI adoption is accelerating, hybrid work remains... The post Product Updates Q2 2026: Simplified Security Across Web, Cloud, Data, and AI appeared first on Skyhigh Security.
Why the five isolation boundaries in agent security research all point to the same conclusion: enforcement has to live outside the model. Agent security research has been fragmented — organized around attack types, benchmarks, and application domains — which makes it hard to explain why prompt injection, tool misuse, and memory poisoning keep rhyming with one another. A new survey, "Isolation as a First-Class Principle for LLM-Agent System Safety", fixes that by asking one question of every atta
For more than a decade, European organisations have embraced hyperscale cloud platforms as the backbone of their digital operations. Azure, […] The post A Question for the CIO: What Is Your Cloud Exit Strategy? appeared first on Soliton Systems.
AI agents run 24/7 with the same infrastructure access as your engineers. See how Teleport secures AI with cryptographic identity, audit, and trusted runtimes.
ThreatBook Labs recorded 15,205 security incidents across Asia-Pacific between June 2025 and June 2026. Read one at a time, they look like an ordinary run of bad quarters. Read together, they show something an ordinary bad quarter never does: the region's risk did not spike, it shifted.
Microsoft has released the largest Patch Tuesday in its history: fixes for 570 vulnerabilities, including three zero-days—two already exploited in attacks—and 141 remote code execution flaws. Microsoft may be the most dramatic example, but it is not the only one. Since Anthropic introduced Mythos Preview on April 7, 2026, Microsoft’s monthly Patch Tuesday count rose from 120 vulnerabilities in May to 200 in June and a record 570 in July—a 375% increase in two…
Last week, the Department of Defense suspended CMMC Phase II. Not delayed. Not “under review with a new target date.” Suspended, effective immediately, with a 60-day task force to figure out what comes next. If you’ve spent any time in or around the Defense Industrial Base over the last few years, you know what that […] The post CMMC Phase II: The Deadline Is Gone. The Problem Isn’t. appeared first on Portnox.
27 seconds. That’s the fastest time on record for an attacker to break into an endpoint and start moving laterally through a network. The average across all attacks in 2025 was 29 minutes, a 65% jump in speed over the year before. Somewhere in that window, a purely preventive tool has already lost the race, […] The post EDR vs EPP: Why Endpoint Protection Alone Isn’t Enough in 2026 appeared first on Seqrite Labs.
