Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
10 matching stories — new capability, in Secrets Detection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Scout 1.0 is Datadog’s first AI model specialized for investigating production issues while achieving a better price-performance curve on our target scenarios when compared with general-purpose frontier models.
On 23 September 2026, compromised releases of MemTensor's OpenClaw npm plugin and MemoryOS PyPI package launched a bundled Go implant at plugin load or Python import, then searched developer and CI environments for registry, source control, cloud, and SSH credentials.
Workstation Protection builds on the AI visibility, governance, and guardrails of the Cycode platform, blocking malicious packages ... The post Introducing Cycode Workstation Protection: ADLC Security Now Stops Software Supply Chain Attacks appeared first on Cycode.
Learn how to turn a product brief and feature flag into a connected launch workflow for instrumentation, experimentation, QA, and reporting.
TL;DR: Agentic Code Scanning is the fourth dimension of Cycode's code scanning spectrum, not a separate product bolted on... The post Introducing Agentic Code Scanning: The Holistic Cycode System Around Any Model appeared first on Cycode.
TrendAI's 21 August disclosure showed 14 trojanized npm date utilities that re-export harmless helpers from `dist/internal/daymath.mjs` but execute a loader in `dist/index.mjs` which chmods, verifies, and spawns a bundled Linux ELF. A single import, including a transitive one, starts the RedShell implant without any npm lifecycle script.
AI coding agents are shipping code to your repositories right now... The post Introducing Agentic Workflows: Put Agents to Work for Security appeared first on Cycode.
CatastropheBench evaluates frontier agents with tasks to find and develop a zero-day RCE exploit against the most important software on the internet. Today's models score zero.
CatastropheBench gives AI agents current source code, with no CVE hints or internet access, and checks whether they get remote code execution. Zero is the only acceptable score.
AI changed who writes code. ZeroPath keeps your application secure and true to your design, evaluating every change at the agent, the PR, and the repo.