Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
962 matching stories — announcement, in Security Information and Event Management (SIEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A practical guide to React error monitoring
Learn how to catch, enrich, and sanitize React errors using tools like error boundaries alongside Datadog Error Tracking.
Campus experience at CriblCon 26: Learn it, break it, fix it, brag about it
Get Ready for Swarm
Loading the Elevenlabs Text to Speech AudioNative Player... Swarm AI is becoming a prominent term in AI marketing, often presented as a meaningful advance…
The Next Evolution of MDR: Preemptive Defense and Agentic Investigation
For years, security operations followed a familiar sequence: detect suspicious activity, investigate what happened, and respond before it caused significant harm. That model developed in a threat landscape where defenders had considerably more time to establish the facts and decide what to do next. In 2019, the average data breach took 206 days to identify and another 73 days to contain, creating a total breach lifecycle of 279 days.As the time between initial access and attacker movement contin
What AI Agents Taught Me About the Autonomous SOC
When I talk about agentic AI and the path toward an autonomous SOC at Netenrich, I try to be specific rather than visionary - because the specificity is what is actually useful to the people building or considering these systems.
What is agentic telemetry?
Engineering the Datadog Agent for FedRAMP High® Certification
Datadog achieves GovRAMP High authorization, bringing unified observability and security to state and local government agencies for critical systems.
Investigate every security event with an AI agent, without the frontier bill
Learn how Datadog built Mambark, a small state-space model that scores every security event and enables heavier AI agents to investigate only the events that matter.
Why full-text search matters for modern log analytics
Elastic Cloud Serverless: Ongoing multicontinent expansion
Elastic announces the availability of Elastic Cloud Serverless in two additional Azure regions and two additional Google Cloud regions. Elastic meets customers where their data is — all around the globe.
5 High-Impact Use Cases for Falcon Onum
Elastic joins NVIDIA and industry leaders as inaugural member of the Open Secure AI Alliance for AI safety and security
NVIDIA, Elastic, and other industry leaders are founding members of an innovative movement building tools to advance open innovation, shared progress, and trust in AI.
From tool procurement to platform architecture: Rethinking the SOC for machine-speed threats
Fragmented SOCs can't keep pace with AI-driven attacks. See why security teams are moving from point tools to open, unified, agentic platforms in 2026.
Wazuh and Nivel4 Partner to Manage Cybersecurity Risks
San Jose, California, May 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) platform, announced a partnership with Nivel4 Cybersecurity, a specialized firm delivering MDR, virtual SOC, and offensive security to help different companies. Through this partnership, Nivel4 Cybersecurity uses Wazuh as a core component of […] The post Wazuh and Nivel4 Partner to Manage Cybersecurity Risks appeared first on Wazuh.
The Good, the Bad and the Ugly in Cybersecurity – Week 30 (2026)
Authorities arrest Kratos's developer, HollowGraph hides C2 in 2050 calendar events, and OpenAI's models breach Hugging Face to steal benchmark answers.
Your Best Analyst Shouldn't Be a Person. It Should Be a Capability Everyone Can Summon.
Transform expert SOC analysis into an on-demand AI capability to empower all analysts and accelerate threat resolution.
Exabeam vs. Splunk: Which Approach Improves Security Operations Outcomes?
Not every SIEM takes the same approach to modern security operations. Splunk is widely used for log management, but teams may face pricing complexity, ongoing SPL maintenance, and fragmented investigation steps as environments grow. New-Scale Fusion combines behavioral analytics, dynamic risk scoring, measurable detection coverage, and coordinated Exabeam Nova AI agents. The result is a … Continued The post Exabeam vs. Splunk: Which Approach Improves Security Operations Outcomes? appeared
CrowdStrike NG-SIEM Pricing Explained (+ How to Cut Costs)
CrowdStrike doesn't publish NG-SIEM pricing, but two public sources put it at $2,170+ per GB/day per year. Here's how it's priced and how to cut the bill. The post CrowdStrike NG-SIEM Pricing Explained (+ How to Cut Costs) appeared first on Realm Security.
Mount Here, Read There: Twin Path Traversal CVEs in Kubernetes Storage
Discover how a filepath.Join misconception caused cross-tenant path traversal vulnerabilities in Kubernetes CSI drivers.
Monitoring end-of-life software with Wazuh
Software reaches end-of-life (EOL) when vendors end standard support for a product or version, including regular security updates. Organizations that continue using EOL software face increased security risks because newly discovered vulnerabilities may no longer receive security patches from the vendor, leaving systems exposed to known and potentially exploitable vulnerabilities. Despite the security risks, EOL […] The post Monitoring end-of-life software with Wazuh appeared first on Wazuh
Why The Unified Security Data Lake Multiplies Everything
When we built the Resolution Intelligence Cloud, one of the early decisions that shaped everything else was committing to a Unified Data Model - a single, consistent schema to which all telemetry, from every source, is normalized at ingestion.
Why Insider Risk Detection Requires Long-Term Memory
Insider risk detection requires long-term memory because misuse depends on retaining behavioral history long enough to evaluate change. Detection models that rely on short correlation windows reset context too frequently to recognize progression or prioritize developing risk. Why Insider Risk Develops Gradually Many detection approaches rely on short correlation windows and frequently reset context. Insider … Continued The post Why Insider Risk Detection Requires Long-Term Memory appeared
Beyond telemetry: a system map for your AI teammates
Most AI agents wait to be asked. OnCall AI maps your environment the moment you connect a source - services, dependencies, ownership, blast radius - so your AI teammates already know your system before the first incident.
Shadow AI Is a Non-Human Identity Problem Wearing a Different Name Badge
Shadow AI hides in engineering pipelines and credentials, not just ChatGPT. Learn why it is a non-human identity problem and how to detect it with behavioral context.
What Does AI-Powered Alert Triage Look Like?
Alert triage in SecureVisio – effective classification as the foundation of security SOC operators analyse hundreds and often thousands of alerts every day in order to single out the ones that may genuinely indicate a security incident. In practice, the greatest challenge is not detecting an event, but classifying it correctly and taking the appropriate […] The post What Does AI-Powered Alert Triage Look Like? appeared first on Securevisio.
Context and AI in incident management. How SecureVisio supports operators in analysing security incidents and automating the response
Today’s SOCs have to process enormous volumes of security events, which is why the effectiveness of operators depends not only on their experience, but also on the quality of the information available during analysis and on the level of process automation. SecureVisio has been designed to support operators at every stage of incident handling, from […] The post Context and AI in incident management. How SecureVisio supports operators in analysing security incidents and automating the
Five Ways Exabeam Delivers Better Detection and Security Outcomes Than Microsoft Sentinel
SIEM platforms play a central role in detecting and investigating threats. But not all SIEMs deliver the same visibility, detection quality, or operational efficiency. Microsoft Sentinel is often deployed as part of a broader Microsoft stack. It integrates tightly with Microsoft products, but onboarding complete telemetry from external sources can require tuning, normalization, filtering, or … Continued The post Five Ways Exabeam Delivers Better Detection and Security Outcomes Than Microso
Agentic Client Workflows
If you use Claude CoWork, Codex, or another agentic coding environment, you’ve probably noticed that you spend less time inside the applications that…
Gartner’s Flaws Exposed by IBM’s Collapse, Again
Whether Gartner calls it an endorsement or not, executive teams use the Magic Quadrant to plan technology roadmaps, build procurement shortlists, and make…
The Best Sentry Alternatives in 2026
You resolve incidents fastest when you can see the broken request, the user it touched, and the deploy that introduced it in one place, before the support queue fills up. Sentry earned its place in that workflow by turning raw exceptions into grouped, traceable issues your developers can act on. As your event volume and […] The post The Best Sentry Alternatives in 2026 appeared first on Coralogix.
Enginsight Partner Umfrage: Steigende Nachfrage nach MDR
Cyberrisiken und Regulatorik treiben den Markt Die aktuelle Enginsight Partnerumfrage zeigt: Sicherheitsbewusstsein steigt deutlich, viele Unternehmen sind auf Cyberangriffe jedoch nur unzureichend vorbereitet Jena, 21. Juli 2026 – Managed Detection and Response (MDR) entwickelt sich aus Sicht der Enginsight-Partner zu einem der wichtigsten Wachstumsthemen im Cybersecurity-Markt. Das zeigt eine aktuelle Befragung innerhalb des Enginsight-Partnernetzwerks, das […] Der Beitrag Engins
The True Vision Behind Cyber Risk Quantification
The Moment I Understood What We Were Really Building About two years into the Netenrich 2.0 build, I had a conversation with one of our senior data scientists that I keep returning to.
How to Integrate Insider Risk Tools With SIEM in 2026
Your SOC monitors thousands of alerts daily, but malicious insiders already have the credentials to bypass your perimeter. When behavioral analytics, SIEM, and automation run as separate systems, connecting the dots between a suspicious login and data exfiltration can take hours—or days. This guide walks you through building an integrated insider risk management framework that […]
Detecting common Linux privilege escalation techniques with Wazuh
Privilege escalation is the process by which an attacker gains permissions beyond those assigned to their current account. On Linux systems, threat actors who gain initial access as a low-privileged user often exploit misconfigurations or weak security controls to obtain root or other privileged access. With elevated privileges, they can disable security controls, modify system […] The post Detecting common Linux privilege escalation techniques with Wazuh appeared first on Wazuh.
Coralogix | Magic Quadrant 2026
We are absolutely thrilled to share with you all that Coralogix has been recognized as a Leader in the Gartner® Magic Quadrant™ for Observability Platforms. When we architected Coralogix around in-stream processing, open-format storage, and index-free query, we weren’t optimizing for where observability stood at the time. We were building for the world it was […] The post Coralogix | Magic Quadrant 2026 appeared first on Coralogix.
Tax-Themed Phishing Campaign Delivers Overlord RAT via a Malicious VHDX Image
Executive Summary Threat actors continue to exploit tax-related themes to lure users into executing malicious payloads, particularly during tax filing periods when recipients are more likely to trust communications referencing financial obligations. In a recently observed campaign, attackers impersonate the Inland Revenue Authority of Singapore (IRAS) to distribute Overlord RAT through a multi-stage infection chain that […]
How SecureVisio Uses Threat Intelligence Incident and Vulnerabilities Management
Threat intelligence is only as valuable as an organization’s ability to act on it. Profiled, up-to-date IoC feeds provide effective protection against internet-borne cyber threats — but only when they are woven into detection logic, risk assessment, and automated response. This is where most organizations struggle: the intelligence exists, yet it sits disconnected from the […] The post How SecureVisio Uses Threat Intelligence Incident and Vulnerabilities Management appeared first on
From Paper Preannouncement to Crossing the Line—An Empirical and Ethical Analysis of the Anthropic Incident
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese Report Summary: This research was triggered by rumors from Reddit user LegitMichel777 that Claude Code contained Spyware. Antiy researchers analyzed the architecture of Anthropic’s client-model service interaction, conducted local behavior analysis and privacy protocol comparisons across various […]