Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
210 matching stories — announcement, in Secrets Detection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Traditional SCA flags every CVE whose version range matches your lockfile, even when the vulnerable code never runs. ZeroPath's AI agent checks whether each dependency CVE is reachable and exploitable in your app, adds KEV and EPSS signal, and opens fix PRs.
See how Datadog Session Replay unites session discovery, AI analysis, and team collaboration in a single workspace.
Now available in Early Access for SAST within Checkmarx One, Checkmarx Fusion adds a new detection layer that advances vulnerability-finding accuracy beyond what rules-based scanning or an AI model can achieve alone.
Watch July’s This Month in Datadog for in-depth conversations with Datadog product leaders about Bits Release, Bits Testing, Bits Chat, and more.
Every organization surveyed for Cycode's State of Product Security in the AI Era 2026 report confirmed it has AI-generated code in its codebase, and 81% said they lack full visibility into how and where AI is used across the SDLC... The post What Is API Security? Risks, Best Practices, and the Code-First Approach appeared first on Cycode.
Enterprise software no longer sits still long enough to audit... The post Top 10 Continuous Security Monitoring Tools in 2026 appeared first on Cycode.
Corgea's weekly briefing for 29 July-4 August 2026 covers the keyv/cacheable npm worm, Anthropic's likely `anthropickit` PyPI incident, Joyfill's import-time RAT chain, and the week's other important Alibaba-targeted, Linux kernel, GitPython, and Axios research.
Fresh 6-7 August reporting on the August 4 `keyv` / `cacheable` compromise tracks the worm as `ChainDrop`, ties it to GitHub Actions runner-memory theft, 453 public victim-like repositories across five accounts, a live C2 rotation to `awqhnjewqjkl[.]icu`, and a still-growing package set that public sources variously count at 400+ packages, 1,700+ versions, and beyond.
Attackers no longer need to trick anyone to get in... The post Top Continuous Application Security Monitoring Tools as of 2026 appeared first on Cycode.
TL;DR: A security engineer opens four terminals before breakfast: one for Gitleaks, one for npm audit, one for Semgrep, one...
SCA forces a bad trade: run a fragile build for full coverage, or scan manifests and miss the transitive majority. ZeroPath resolves the full graph build-lessly for npm, Maven, and pinned Python, and reports exactly how much of your supply chain each scan resolved.
Corgea's weekly briefing for 30 July-2 August 2026 covers the Arch AUR malware wave that forced an adoption freeze, Anthropic's likely `anthropickit` PyPI credential stealer, Joyfill's blockchain-resolved npm RAT chain, and Linux `CVE-2026-53264`.
NIS2, the Cyber Resilience Act, DORA, RED and the AI Act: which EU cybersecurity rules reach you, what each one actually requires, and the deadlines that have already passed.
Learn how the Datadog Runtime Prioritization Engine infers ownership and identifies business-critical resources to help you prioritize security findings.
A benchmark test at OpenAI went looking for a way out of its sandbox in mid-July, found one, and ended...
AI is generating code faster than teams can review it. Learn how hybrid SAST and Checkmarx Fusion help detect AI-era software security risks.
Every technology shift creates the same tension: the tools that make individuals faster make it harder for organizations to govern....
Learn why a hybrid application security strategy combining deterministic tools and AI delivers better protection, lower costs, and faster remediation for AI-generated code.