Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
962 matching stories — announcement, in Security Information and Event Management (SIEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Edge Delta's Knowledge Graph, an automatically maintained map of your services, teams, and incidents, is now queryable directly from the edx CLI, giving your coding agent blast radius and ownership context in the same investigation where it finds the bug.
Trace AWS Lambda durable executions across invocations to investigate operations, retries, failures, waits, and function status in Datadog.
Learn how Datadog Work Management helps you coordinate human and AI agent–driven work while preserving context, ownership, and activity across tools.
Summing individual wins overstates true impact. See two accurate methods, holdouts and Datadog’s Cumulative Impact, and how to choose between them.
Agentic treasury requires more than AI. It needs searchable context, observable systems, and trusted data to reduce decision latency and support confident, governed action.
As enterprises transition from search-driven experiences to agentic AI, requirements are shifting. Learn how context engineering and retrieval layers are now more critical for building trustworthy, production-ready AI agents.
Machine learning models are only as good as the signals they receive. A fraud detection...
You know the feeling. Your team has a great idea for an AI-powered pipeline - maybe...
The ECB gave its supervised banks until Oct 31 to submit an AI cyber action plan. Why patch-and-respond can't deliver it, and what a defensible plan proves instead.
Operation ASTERIX overviewRapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the campaign's development; recovered p
Why antivirus and firewall controls alone fall short, and how to layer them with SIEM correlation, automated response playbooks and compliance evidence.
Gopan Sivasankaran is Rapid7's Regional Director, Middle East & Africa.Across Egypt, Nigeria, and Kenya, organizations are expanding their use of cloud infrastructure, artificial intelligence, digital services, and connected operations. But more technology does not automatically create stronger security operations; many security teams are not short on data, but rather on time, context, and specialist capacity.As environments expand, the challenge is no longer finding another security product. It
A 2026 guide to tactics, techniques and procedures (TTP): how TTPs differ from IOCs, mapping them to MITRE ATT&CK, threat hunting and SIEM correlation.
How an application layer firewall inspects web requests, how it differs from stateful firewalls, which attacks it stops, and how to feed events to a SIEM.
Download SenseOn's Agentic SOC decision-trace deck covering evidence-led investigation, analyst control points, and live methodology walkthrough options.
Download the technical brief on reducing SIEM-centred work by building governed cases across identity, email, cloud, endpoint, app, and AI activity.
Download the playbook for diagnosing SIEM waste while proving what happened across identity, email, cloud, endpoint, app, and AI activity.
In most organizations, data warehouses hold structured data, while unstructured data...
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow, OpenCATS, Pterodactyl Panel, SonicWall SMA1000, Ray Dashboard, a Pix-for-WooCommerce, and for those who like their exploits closer to the bare-metal, the Fragnesia Linux kernel LPE (CVE-2026-46300). Metasploit also got the glow-up of the summer with the new http malleable profiles, MCP functionality and linux multi fetch payloads (mor
Courts sentence Com member for sextorting 117 minors, joint advisory warns of Gunra ransomware, and ShieldBreak bypasses MS Defender for SYSTEM access.
An autonomous agent proved something last month that was previously theoretical: credential-valid, signature-free attacks now move faster than the SOC stacks built to catch them. This is not a story about one lab, one benchmark, or one unlucky target. It is a preview of what every enterprise now has running inside its own walls in […]
Modern organizations depend on networks to connect employees, applications, cloud services, customers, devices, data centers, and business-critical systems. As these environments become increasingly distributed, securing the network perimeter alone is no longer enough. Cybercriminals can exploit stolen credentials, vulnerable devices, malicious applications, misconfigured cloud resources, phishing attacks, malware, and compromised endpoints to gain access to The post Network Security Monitoring
Modern cyberattacks rarely remain confined to a single endpoint or application. Attackers increasingly move through networks, abuse legitimate credentials, communicate with command-and-control infrastructure, exploit vulnerabilities, and attempt lateral movement toward high-value systems. As organizations adopt cloud services, remote work, IoT, operational technology (OT), SaaS applications, and hybrid infrastructures, the network has become more distributed—and harder The post Network Detection
TL;DR: Realm is a security data pipeline and a Cribl alternative for SOCs that want an easy-to-use and maintain solution for SIEM cost reduction and optimization. Realm focuses on security telemetry, which lets it better understand your log sources and the detections running on them. Cribl spans IT, observability, and security from one platform. Realm […] The post Cribl vs Realm: Cribl Alternatives for Security Teams appeared first on Realm Security.
SUID (Set User ID) and SGID (Set Group ID) are special Linux file permission bits. They allow a program to run with the privileges of the file owner or group rather than the user who launches it. Legitimate binaries such as passwd, sudo, and chage rely on these bits to perform privileged operations safely. Attackers […] The post Detecting unauthorized SUID and SGID binaries with Wazuh appeared first on Wazuh.
Networks are the foundation of modern digital business. Employees connect to applications, customers access online services, cloud workloads communicate with APIs, endpoints exchange information, and operational technology systems interact with critical infrastructure. While this connectivity enables efficiency and innovation, it also creates opportunities for cybercriminals. Modern attackers do not always rely on obvious malware or The post Network Threat Analytics appeared first on Seceon Inc.
Meet the OT Engineer Teammate: autonomous triage, PCAP decoding, and IT/OT correlation built into GreyMatter. Get the walkthrough.
A practical framework for closing the machine-speed gap with automation and bringing internal AI usage under security's control.
Sophisticated adversaries design their individual actions to be unremarkable. A single failed authentication followed by success - routine. A process creating a network connection - normal system activity. A user accessing a system outside their usual hours - might be working late.
Four AI agents reasoning over one Security Data Fabric connect exposure management and response into a single motion. Exposure feeds response; response feeds exposure.
Tuskira has been named in the 2026 Gartner Emerging Tech Impact Radar: Generative AI report. Our view on what an AI agent has to earn before it acts on its own.
Elastic has achieved Defence Cyber Certification (DCC) Level 0 — the UK Ministry of Defence's baseline cyber assurance standard for the defence supply chain. Here's what it means and why it matters.
Autonomy breaks traditional security operations workflows because AI agents can act continuously and independently inside approved environments. When activity is initiated and executed without a human in the loop, event-by-event review and short correlation windows fail to capture progression, intent, and accumulated risk. What Makes Agent Activity Resemble Insider Activity AI agents operate with legitimate … Continued The post Why Autonomy Breaks Traditional Security Operations Workflows
FinOps spent a decade making cloud spend predictable, and teams now point the same discipline at a workload that behaves nothing like a virtual machine. In the FinOps Foundation’s State of FinOps 2026 survey, drawn from 1,192 practitioners representing more than $83 billion in annual cloud spend, 98% now manage AI spend, up from 31% […] The post Set a monthly budget on every Olly API Key appeared first on Coralogix.
San Jose, California, July 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with Clober, SATEC Group’s Cloud and Cybersecurity brand, specialized in delivering robust, secure solutions for complex technology environments. Through this collaboration, Clober relies on Wazuh as its core platform […] The post Wazuh and Clober Partner to Deliver Cybersecurity Solutions appeared firs
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese 1. Overview On August 10, 2026, the National Computer Virus Emergency Response Center, in collaboration with the National Engineering Laboratory for Computer Virus Prevention and Control Technology, released Early Warning Report on “Sorry” Ransomware, disclosing multiple attacks […]