Build better SLOs with RUM and synthetic SLIs
Learn when to use RUM and synthetic monitoring for SLIs, what each source misses, and how to interpret their results together.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
260 matching stories — in Secrets Detection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Beyond container image signing: How we enforce software supply chain policies at Datadog
Datadog built Turnstile to evaluate signed attestations and enforce software supply chain policies before container images are deployed.
Meet the new Cycode: built to protect where AI risk is born
Today we’re introducing the new Cycode brand. Here is why we did it, what the new logo and colors mean, and what it means for you. The post Meet the new Cycode: built to protect where AI risk is born appeared first on Cycode.
Infinity Core: six Linux kernel bugs raise the value of any local foothold
The 17 October 2026 Infinity Core disclosure bundles six Linux kernel flaws across exec, signal, page walking, futexes, scheduler cache accounting, and SLUB. Several stable fixes are already out, but any unpatched server, container host, CI runner, or Android build turns a routine low-privilege foothold into a much more valuable position.
util-linux mount TOCTOU flaws let user mounts reach root
Fresh util-linux disclosures published on 14 October 2026 show three ways a low-privilege Linux user can turn a user-authorized mount into root. The common mistake is simple: `/usr/bin/mount` validated one path, then later re-used a pathname or legacy mount flow that an attacker could swap underneath it.
GhostAction Compromises About 1,900 GitHub Accounts, Targets Over 30,000 Repositories
The credential-theft campaign known as GhostAction has ramped up, targeting more than 30,000 repositories across 3,000 users and organizations. The spike, according to GitGuardian, was observed on October 8 and 9, 2026. "This resulted from compromising the GitHub accounts of about 1,900 users. It attempted to extract 3,174 secrets from public repositories' CI," security researchers Gaetan
`yyay` turned a checksum-clean AUR helper into root-level malware execution
On 13 October 2026, the `marchos1as` AUR account uploaded typosquatted helper packages led by `yyay`, a fake `yay` build that reused the real source tarball but added a malicious `.install` script fetching `hellscripter/install-scripts` through `web.archive.org`, which put root-level code execution on the package-install path.
How Kubernetes DRA can improve GPU utilization and cut costs
Learn how Kubernetes Dynamic Resource Allocation raises GPU utilization, and what to watch to confirm it’s actually reducing your GPU costs.
What 10,000 AI Actions Reveal About Agentic Security
This is the third installment of our Cycode AI data series... The post What 10,000 AI Actions Reveal About Agentic Security appeared first on Cycode.
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a lone threat actor who appears to have published 12 packages since August 2023, eight of which have
When Copy Means Compromise: How kubectl cp Enables RCE on Windows
A single missing backslash turns a routine “copy a file from a pod” into remote code execution on Windows admin machines — here’s how it works, and how to shut it down... The post When Copy Means Compromise: How kubectl cp Enables RCE on Windows appeared first on Cycode.
The Credential Layer Is Expanding Faster Than Security Teams Can See It
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through three connected capabilities: Detect, Remediate, and Prevent. The journey starts with detection, because organizations first need to understand what credentials exist, where they live, and what they
AI Software Factory: Specifications, Work Orders, And Governance
TL;DR AI Software Factory: Specifications, Work Orders, And Governance An agent working from a short Jira ticket for a tenant-scoped...
Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore
AI coding agents are changing how quickly developers can build and ship software as well as how quickly credentials can become exposed. According to GitGuardian’s 2026 State of Secrets Sprawl Report, commits identified as AI-assisted are leaking secrets at approximately twice the rate of human-written ones. Most of the fastest-growing categories of leaked credentials are now connected to AI
Software Factory Compliance Tools: From Scanning To Audit Evidence
TL;DR Why Software Factory Compliance Tools Need More Than Scanners Software factory compliance tools sit between engineering policy and the...
Claude Mythos Vulnerability: How AI Finds Software Flaws
TL;DR What The Claude Mythos Vulnerability Query Really Refers To “Claude Mythos vulnerability” turns up in search bars for two...
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle scripts, indicating that threat actors are likely shifting tactics in response to recent security controls. "Indexed-btree is a malicious npm package mimicking the legit sorted-btree package, an ordinary B-tree/indexing utility," Checkmarx said. "
New npm malware finds a way around install script defenses
Blocking suspicious install scripts may no longer be enough to mitigate threats from malicious JavaScript dependencies used in software supply-chain attacks. Security researchers at Checkmarx are warning of attackers using a malicious package called “indexed-btree” to impersonate the legitimate sorted-btree library, to spread malware hidden in the package’s normal runtime code. The campaign abandons the preinstall and postinstall scripts common in recent attacks, instead using a core package fun
Reachability-Aware SBOMs: VEX That Knows What's Actually Exploitable
ZeroPath builds CycloneDX, SPDX, VEX, and AI-BOM exports from your scan inventory, and marks every CVE reachable or not_affected so you fix what's exploitable first.