Folding RUM Into Incident Response
We built real user monitoring into our existing product, so a slow page load and the backend request behind it land together as a single thing to investigate.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,038 matching stories — in Security Information and Event Management (SIEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
How we built data-driven AI Golden Paths at Datadog
See how a Datadog guild achieved 13% faster agent runs by building Golden Paths for AI-assisted development using controls, experiments, and dashboards.
CVE-2026-86206, CVE-2026-86207: N-able N-central Authentication Bypass (FIXED)
OverviewWhile conducting research into a recent N-able N-central authentication bypass vulnerability (CVE-2026-18577), Rapid7 Labs discovered two new vulnerabilities affecting the latest version of N-central. When chained together, these two vulnerabilities allow a remote unauthenticated attacker to bypass authentication and create a new attacker-controlled System administrator account on an affected server.CVE IDDescriptionCWECVSSv4CVE-2026-86206Semicolon/Forwarded access-control bypassCWE-7916
When the tap becomes a target: Cyberattacks can disrupt everyday life.
When the tap becomes a target: Cyberattacks can disrupt everyday life. A cyberattack on a water system can lead to low pressure, safety warnings and a community asking whether it can still trust an essential service. Most people never think about the software behind a glass of water. That is exactly how essential services should […] The post When the tap becomes a target: Cyberattacks can disrupt everyday life. first appeared on BlockAPT | Autonomous AI Cybersecurity.
Third-Party Supply Chain Attacks: Securing Identity & MSPs
Data Science and Future CISO Roles and Responsibilities
I have worked with CISOs across many industries and organization sizes over the six years of building the Resolution Intelligence Cloud. The ones whose organizations are genuinely ahead in security capability share a common characteristic that is not captured in any CISO job description I have read.
Coordinate product launches with Datadog
Learn how to turn a product brief and feature flag into a connected launch workflow for instrumentation, experimentation, QA, and reporting.
See you at Elastic{ON} 2026
Elastic{ON} kicks off this September with seven stops in cities around the world. Elastic’s CEO Ash Kulkarni will be appearing at stops across the tour, opening keynotes with a candid conversation about why your data has never been more valuable.
Wazuh and E Defence Announce Partnership to Improve SOC Services
San Jose, California, June 2026 – Wazuh, the leading open-source Security Information and Event Management (SIEM) and Extended Detection and Response (XDR) solution, announced a partnership with E Defence, a cybersecurity and software engineering provider serving organizations across West Africa and the UEMOA region. Through this partnership, E Defence will utilize Wazuh as the central […] The post Wazuh and E Defence Announce Partnership to Improve SOC Services appeared first on Wazuh.
DPRK APTs: Ted backdoor and curlRAT target South Korean media and automotive sectors
OverviewA new Linux toolkit, identified by Rapid7 Labs, has been targeting organizations across South Korea’s automotive and media industries with minimal detection. The campaign made use of a HAProxy instance named “ted backdoor”, alongside trojanized versions of crond, agetty, atd, sshd, and polkitd. This previously undocumented framework enabled threat actors to execute remote commands on compromised servers, inject malicious scripts into web traffic, perform credential harvesting, and engage
Enginsight im Expertengespräch mit Gisbert Engel, HR Director bei Mitsui Chemicals Europe: Führung und Sicherheit als Schlüssel zur Transformation
Wie Führungskräfte in Zeiten von KI, Cyberrisiken und Wandel Vertrauen schaffen können Die digitale Transformation, der Einsatz von Künstlicher Intelligenz und die zunehmende Bedrohung durch Cyberangriffe verändern Unternehmen in einem bislang ungekannten Tempo. Viele Mitarbeiter sehen die Chancen dieser Entwicklung, doch nicht wenige verspüren auch Unsicherheit: Wird KI meinen Arbeitsplatz verändern? Mache ich einen Fehler, […] Der Beitrag Enginsight im
What Is an AI SOC? Definition, Tools and Limits
An AI SOC runs investigation with AI agents while people keep the decisions. Definition, SOAR comparison, 2026 tools and honest limits.
SIEM Replacement Guide 2026: Cost and Steps
SIEM replacement in 2026: what is replacing SIEM, a cost formula with public vendor pricing, and a six-step plan that keeps detection coverage intact.
Agentic AI Security: Risks, Controls, Monitoring
Agentic AI security governs AI that acts: agent identity, tool scopes, approvals, and evidence to reconstruct, contain and reverse what an agent did.
Stop runtime threats with Workload Protection response actions
When a runtime threat appears, every step costs time. Datadog Workload Protection can now kill processes and isolate workloads with automated and manual response actions.
Open by design: How Elastic supports MOSA, the DoD's Modular Open Systems Approach
Major US defense acquisition programs are required to be designed around a Modular Open Systems Approach (MOSA). Here's what program offices need to know about how Elastic can support MOSA at the data and analytics layer.
Why your AI bill tripled while token prices fell 75%
Token prices dropped 75%, so why did your agentic AI bill triple? Here's the real math behind agentic AI cost and how IT leaders can measure it.
What We Missed: Did ShinyHunters 'Breach' ReliaQuest?
In this video conversation, Dark Reading editors discuss some of the news they didn't get a chance to cover, from the latest antics of ShinyHunters to new research about the prevalence (or lack thereof) of AI-generated malware.
Detecting AWS access key compromise with Wazuh
AWS access keys are credentials that applications, users, and automation tools use to authenticate to AWS services through APIs. Each key consists of an access key ID and a secret access key. The associated IAM identity determines which AWS resources and operations the credentials can access. When access keys are exposed through public repositories, build […] The post Detecting AWS access key compromise with Wazuh appeared first on Wazuh.
Automate Product Analytics reports with your agent and the CX CLI
Every page view, click, and session your RUM SDK captures lands in Coralogix as a log event under the cx_rum subsystem — the raw data behind how people actually use your product. You can turn it into a shareable report without writing a single query. Just ask your coding agent. Your agent queries that data […] The post Automate Product Analytics reports with your agent and the CX CLI appeared first on Coralogix.
One Blank Field Bypasses Direct Send Control
ReliaQuest observed that an empty Simple Mail Transfer Protocol (SMTP) envelope sender can bypass RejectDirectSend, a Microsoft 365 control in Exchange Online intended to block unauthenticated Direct Send emails from an organization’s domain.
Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20260905)
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: August 29, 2026 ~ September 4, 2026 Antiy AVL SDK anti-virus engine released a total of […]
How I think about detection in the pipeline
Agentic SOC vs SOAR: Multi-Agent Workflows in SecOps
Individual AI agents handling specific tasks are one level of AI capability in security operations. Agentic workflows — multiple agents orchestrated in defined sequences, each building on the previous agent's output — represent a meaningfully different capability level.
Critical SonicWall SMA1000 Vulnerabilities CVE-2026-83548, CVE-2026-83549 Exploited in the Wild
OverviewOn September 1, 2026, SonicWall disclosed two vulnerabilities affecting SonicWall SMA1000 appliances that the vendor says are being actively exploited in the wild. The vulnerabilities, CVE-2026-83548 and CVE-2026-83549, can be chained to achieve unauthenticated remote code execution (RCE) on affected appliances.CVE-2026-83548 is a critical pre-authentication server-side request forgery (SSRF) vulnerability in the SMA1000 Appliance Work Place interface. The flaw has a CVSS v3.1 base score
Rétro-ingénierie d’une récente campagne PureLogs Stealer
Parmi les attaques quotidiennes qui sont observées par les analystes SOC durant leur supervision, les malwares de type stealer ont une place de choix. Ces logiciels qui volent les mots de passe stockés de manière non sécurisée sur les machines sont en effet massivement utilisés par les attaquants dans des campagnes pour récupérer des informations [...]
CrowdStrike Announces Agentic Identity Provider
CrowdStrike Extends Endpoint Security to Stop Software Supply Chain Attacks
CrowdStrike Delivers the Next Evolution of the Agentic SOC
Mastering Capacity Analytics: How to Grow Infrastructure Without Guesswork
Your infrastructure is having a growth spurt. More customers. More services. More cloud accounts. More telemetry. And, inevitably, more people asking whether the current environment can handle what is coming next. That is where capacity analytics comes in. Capacity analytics uses telemetry—logs, metrics, traces, network flows, events, cost data, and more—to understand current demand, forecast future requirements, and identify performance, cost, or security risks before they become production sur
What the Model Never Sees
Every prompt our agents send passes through a redaction layer that strips secrets but keeps their fingerprints, so investigations still work and model providers never see credentials.
Ransomware that thinks for itself.
Ransomware that thinks for itself. Ransomware used to rely on a criminal at a keyboard. A reported 2026 case shows how AI may now plan, test and adjust an attack on its own. Imagine a burglar who never tires, never takes a coffee break and can try a new key 31 seconds after the last […] The post Ransomware that thinks for itself. first appeared on BlockAPT | Autonomous AI Cybersecurity.
How We Built Browser Monitoring Into Our Own Pipeline
A 10 kB script collects page loads, route changes, page speed scores, request timings, and JavaScript errors from real browsers, then sends them into the pipeline we already run. It replaced Sentry in our own web app.
Enginsight und Infinigate schließen strategische DACH-Partnerschaft
Souveräne Cybersecurity für den Mittelstand Der führende Value-Added-Distributor Infinigate nimmt die Security-Operations-Plattform von Enginsight ins Portfolio auf und stärkt damit den Channel für integrierte Cybersecurity-Lösungen. Jena, 01. September 2026 – Enginsight, Anbieter einer vollständig in Deutschland entwickelten Security-Operations-Plattform, und die Infinigate Group, führende Technologieplattform und Trusted Advisor für Cybersich
How Cribl's security team solved their threat intelligence problem
Autoscaling Lakebase Postgres
Choosing a database instance size before you know the workload is an old building pattern...
Crawl, Walk, Run: The Only Safe Path to Autonomous AI in Cyber Defense
Autonomous AI in cybersecurity isn’t all or nothing. Learn why security leaders are adopting a crawl–walk–run maturity model to safely scale AI autonomy with guardrails, reversibility, and continuous validation.
Accountability for Autonomous AI Actions in Cyber Defense
If autonomous AI takes action, the business owns the outcome. Learn why auditability, risk acceptance, tiered approvals, and change control are critical to governing AI in cybersecurity.
The Real AI Guardrail Is Reversibility in Cyber Defense
Most AI autonomy failures happen because actions can’t be undone fast enough. Learn why reversibility and human-in-the-loop controls are critical guardrails for autonomous AI in cybersecurity.
Migrating to Palo Alto Cortex XSIAM: Solving the "Getting Data In" Problem – Axoflow
XSIAM's AI-driven detection depends on clean, schema-mapped data. Here's why ingestion breaks down during migration, and how an open data layer fixes it.