Fixing Vulnerabilities vs Protecting Against Exploits in Cybersecurity
Discover the strategic balance between fixing vulnerabilities and protecting against exploits. Learn how to prioritize resources effectively in cybersecurity.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,038 matching stories — in Security Information and Event Management (SIEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Reported Iran-Linked Stryker Cyberattack Highlights a Growing SecOps Detection Gap
Public reports of an Iran-linked cyberattack disrupting Stryker’s Microsoft environment highlight a growing SecOps challenge: attacks that move through identity and management layers where siloed detections often miss the full attack path.
Zero Day on Netflix Is Fiction, But Large-Scale Cyberattacks Are Inevitable
Netflix’s Zero Day paints a terrifying picture of cyber warfare, but the real threat isn’t fiction, as zero-day attacks on critical infrastructure are inevitable. Learn how security teams can validate their defenses before the next big attack happens.
Will Your SIEM Vendor Still Love You; After You Sign? Put Their Support to the Test.
Mike Wade, VP of Customer Success During the sales cycle for your new SIEM, you were important. A sales engineer joined every call. Someone built a custom demo around your actual log sources because the "out of the box" claim is never quite 100%. There was a shared Slack channel, and questions posted at 9 PM got answers by 9:15. The account executive said "call me anytime" and meant it, because your signature wasn’t yet on the dotted line.
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
OverviewOn August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0 base score of 9.3 and can be exploited remotely by an unauthenticated attacker over the network without user interaction or elevated privileges.NetScaler ADC and NetScaler Gateway are widely deployed enterprise networking products commonly positioned at or near the network perim
What CRN’s 2026 Annual Report Card Says About the Next Phase of AI Security
AI security is entering a more demanding phase. The market is moving beyond who can add AI to a product and toward who can make it useful in the real world — across existing security environments, partner ecosystems, and day-to-day operations. CRN’s 2026 Annual Report Card offers a useful snapshot of that shift. In the … Continued The post What CRN’s 2026 Annual Report Card Says About the Next Phase of AI Security appeared first on Exabeam.
Designing effective Genie Agents from a single prompt
Ask a generic agent about revenue, and it’ll likely grab the first revenue table...
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
Cássio De Alcântara is Director, LATAM Sales at Rapid7.Across Latin America, organizations are embracing cloud, AI, and digital transformation to drive innovation and business growth. These technologies create new opportunities, but also introduce greater complexity and expanding attack surfaces.In this environment, security leaders are being asked to understand where risk exists across increasingly distributed environments and quickly eliminate blind spots like Shadow IT and Shadow AI – all wit
The New Hire Was Never Real. The Access Was.
The Hire That Was Never Vetted Most breaches announce themselves. Ransomware locks screens. Phishing kicks off a chain of alerts. But some of the most damaging intrusions never trip a single traditional control, because they don’t start with a stolen credential or an exploited vulnerability. They start with a job offer. A fabricated identity clears […]
What Is SIEM and How Does It Work? A Complete 2026 Guide
What SIEM is and how it works: log collection, normalization and correlation, detection rules, automated response, deployment models and compliance uses.
Think your cybersecurity is Sovereign? Look again.
Think your cybersecurity is Sovereign? Look again. Your cybersecurity provider may be protecting your data while exposing your organisation to risks you have never considered. For years, cybersecurity buyers have been told to ask where their data is hosted. It is an important question, but it is no longer enough. A platform can host information […] The post Think your cybersecurity is Sovereign? Look again. first appeared on BlockAPT | Autonomous AI Cybersecurity.
Benchmaxxing: When the Benchmark Becomes the Target
Introducing Cribl Marketplace: A central place to discover and deploy apps
20× the CI traffic without getting slower: How we rebuilt Git serving at Datadog
Learn how Datadog built gitretriever to handle 20× more CI Git traffic while maintaining low latency and reducing backend CPU usage.
How CISA’s BOD 26-04 changes vulnerability prioritization
Learn how CISA’s BOD 26-04 mandates risk-based vulnerability prioritization and how Datadog helps teams prioritize and remediate critical findings.
How state and local agencies can get ahead of fraud starting with the data they already have
Fraud and waste continues to be a challenge for state and local government agencies in the US. Though the data exists, the challenge is pulling it all together for an accurate anomaly detection and remediation.
7 lessons for IT leaders on using observability to monitor AI applications
Discover the seven lessons we learned as we evolve our LLM observability practice to monitor and improve our AI applications.
Databricks Document Intelligence: pushing the frontier for complex document extraction
Every enterprise has valuable data trapped in messy, unstructured documents. Today,...
When it comes to Governance, Retailers need a control plane for context
Retailers are entering a new phase of AI adoption.The early conversations around...
Beyond Cutting Cost: Why Data Quality Makes Security Pipelines Strategic – Axoflow
Anton Chuvakin and Tim Peacock interview Balázs Scheidler on why data quality, not just cost cutting, makes security data pipelines strategic.
Axoflow Zero to Hero: Stream Security Data Anywhere – Axoflow
See how you can be a hero by connecting machines and logging data to your analytics tool of choice in 12 minutes or less using the Axoflow Platform.
Long-Term Log Storage Without SIEM Costs: The Axoflow Storage Layer – Axoflow
Store security logs long-term without SIEM costs or vendor lock-in. See how the Axoflow Storage Layer uses open Parquet files on object storage you control.
The LLM Proxy, and How to Put Your Agents Behind One
The exhibit floor at Black Hat this August had one theme, and it was not subtle. Roughly 235 of the 450 or so vendors on the floor marketed AI or agentic…
AI Cybersecurity Platform
Organizations are generating unprecedented amounts of digital data from endpoints, networks, cloud workloads, applications, identities, IoT devices, SaaS platforms, and operational technology. At the same time, cybercriminals are becoming more sophisticated, using automation, credential theft, social engineering, malware, ransomware, living-off-the-land techniques, and increasingly AI-assisted attack methods. Traditional cybersecurity tools remain important, but security teams can The post AI Cy
McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records
Cloud identity has become one of the most valuable targets for attackers. A single compromised credential can provide access to enterprise directories, cloud resources, employee information, and privileged accounts without requiring attackers to exploit a vulnerability in the underlying cloud platform. According to Cybersecurity News, a sprawling Azure credential theft campaign is exposing millions of The post McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enter
TP-Link Archer NX Routers Exposed to Authentication Bypass and Command Injection Attacks
Routers sit at the edge of enterprise networks, controlling traffic between internal systems and the outside world. When attackers gain control of one, they can potentially manipulate network configurations, intercept traffic, and create a path toward other connected systems. A newly reported set of vulnerabilities affecting TP-Link Archer NX200, NX210, NX500, and NX600 routers creates The post TP-Link Archer NX Routers Exposed to Authentication Bypass and Command Injection Attacks appeared firs
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers.The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time between disclosure and exploitation. The gap that patch cycles were built to fill is closing. Speed and volume are overwhelming security teams that have relied on traditional patch cycles and reactive programs
Features Don’t Win Budget Conversations. Operational Evidence Does.
CISOs can strengthen security budget conversations by replacing feature comparisons with measurable operational evidence. Establish the current burden, show how an investment changes security operations, and connect those improvements to financial impact. Metrics such as alert volume, analyst investigation time, manual effort, and capacity gained help CFOs evaluate security investments in terms of cost, benefit, … Continued The post Features Don’t Win Budget Conversations. Operationa
Olly says Hi: Scheduled tasks now report to Teams, Slack, and email
An agent that only speaks when spoken to is a tool you have to remember to use. Olly has run on a schedule for a while now, working a saved prompt hourly, daily, weekly, or monthly and writing its findings into a chat with its own run history. Those scheduled tasks are now wired into […] The post Olly says Hi: Scheduled tasks now report to Teams, Slack, and email appeared first on Coralogix.
Analyzing PureLogs Stealer: Fake Adobe Sign Phishing Uses PNG Steganography and Fileless Execution
Executive Summary Threat actors are actively impersonating Adobe Sign (hxxps://chickplaybox[.]com) to deliver PureLogs Stealer in memory. The campaign relies on complex obfuscation, process environment variable storage, and image steganography to minimize on-disk forensic artifacts. Fingerprinting & Exfiltration:The landing page uses Cloudflare Turnstile and ipapi.co to collect victim IP, hostname, geolocation, and browser metadata, sending real-time alerts to […]
Clop Returns with Custom Implant in Mass-Extortion Campaign
Clop's exploitation of CVE-2026-12569 in PTC Windchill returns the group to mass exploitation with a custom web shell built for full data theft.
Cyber Resilience Act : les fabricants face à l’échéance de septembre 2026 et aux nouvelles normes ETSI
Le Cyber Resilience Act (CRA) ne se contente plus d'être un texte législatif à l'horizon lointain. Il entre résolument dans sa phase opérationnelle. Le 17 août 2026, l'ETSI (European Telecommunications Standards Institute) a officiellement lancé le processus d'approbation de 17 normes européennes clés destinées à soutenir la mise en œuvre du règlement. Ces standards [...]
DORA : ce qui change concrètement pour la cybersécurité et la conformité du secteur financier en 2026
Le règlement européen sur la résilience opérationnelle numérique (DORA), entré en application le 17 janvier 2025, est désormais pleinement intégré au dispositif de supervision du secteur financier. Après une année 2025 largement consacrée à l’accompagnement des entités financières dans la mise en œuvre de leurs nouvelles obligations, 2026 marque une phase de supervision renforcée. [...]
NIS2 en 2026 : comment anticiper la conformité malgré le retard de transposition en France
Alors que nous entrons dans le second semestre 2026, la transposition française de la directive NIS2 (Network and Information Security) reste en suspens. Ce décalage par rapport au calendrier initial a déclenché des procédures d’infraction de la part de la Commission européenne. Pourtant, pour les milliers d’entités essentielles et importantes concernées, attendre la publication [...]
GLBA Security Requirements: A 2026 Compliance Guide
GLBA security requirements under the amended Safeguards Rule: required program elements, mapping controls to audit evidence, common gaps and a checklist.
Why Divergent Teams Drive True Security Collaboration
When people ask me what makes the Resolution Intelligence Cloud different from other security intelligence platforms, I usually start with the data architecture. The unified data model, the ontology engine, the knowledge graph, the behavioral analytics. These are real differentiators and they are worth explaining.
Give Your Coding Tools a Map of Production with Edge Delta's Knowledge Graph
Edge Delta's Knowledge Graph, an automatically maintained map of your services, teams, and incidents, is now queryable directly from the edx CLI, giving your coding agent blast radius and ownership context in the same investigation where it finds the bug.
Trace AWS Lambda durable functions with Datadog
Trace AWS Lambda durable executions across invocations to investigate operations, retries, failures, waits, and function status in Datadog.
Introducing AWS Cloud Connections: Automated AWS log discovery for Cribl Stream
Agentic treasury runs on searchable, observable context
Agentic treasury requires more than AI. It needs searchable context, observable systems, and trusted data to reduce decision latency and support confident, governed action.