This Month in Datadog - July 2026
Watch July’s This Month in Datadog for in-depth conversations with Datadog product leaders about Bits Release, Bits Testing, Bits Chat, and more.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,038 matching stories — in Security Information and Event Management (SIEM) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Raw Logs Get AI Triage Wrong. Every Time. – Axoflow
We gave a security agent raw, unnormalized vendor logs and asked it to triage a real attack scenario. Nine runs, zero correct. Here's why raw logs break AI triage — and what changes once the data is normalized and enriched.
Realm + Databricks Zerobus Ingest: Clean, Structured Security Data, Delivered Direct
Realm now writes parsed, OCSF-normalized, enriched security data straight into Databricks Delta Lake via Zerobus Ingest — no staging bucket, no cleanup jobs. The post Realm + Databricks Zerobus Ingest: Clean, Structured Security Data, Delivered Direct appeared first on Realm Security.
AI Did Not Change the Attack
Loading the Elevenlabs Text to Speech AudioNative Player... “AI is compressing the cyber kill chain” is a warning that now appears throughout the security…
From Input to Impact: Secure AI Where It Runs
Defend the entire AI agentic stack across endpoints, identities, cloud, and apps with SentinelOne's unified platform.
CVE-2026-18577: N-able N-central Authentication Bypass Exploited in the Wild
OverviewOn August 2, 2026, N-able published a security advisory for CVE-2026-18577, an authentication bypass vulnerability affecting N-central that was discovered being exploited in-the-wild after an incomplete fix for an earlier authentication bypass issue, CVE-2026-18556 was disclosed. CVE-2026-18577 allows a remote unauthenticated attacker to bypass authentication and obtain administrative control of vulnerable N-central servers in affected deployments.N-able N-central is a widely deployed Re
MongoDB schließt 27 Sicherheitslücken im Juli – Jetzt updaten!
MongoDB hat im Juli 2026 insgesamt 27 Sicherheitslücken behoben. Betroffen sind die Versionen MongoDB Server 7.0 vor Version 7.0.39, 8.0 vor 8.0.28, 8.2 vor 8.2.12 sowie 8.3 vor 8.3.7. Darüber hinaus ist auch MongoDB Compass in Versionen vor 1.49.7 betroffen. Die Schwachstellen können unter anderem zu Denial-of-Service-Szenarien, Abstürzen der Datenbank oder einer Umgehung bestehender Zugriffsbeschränkungen […] Der Beitrag MongoDB schließt 27 Sicherheitslücken im
Website Cloning, Decryption Injection, and Chinese System Verification | Technical and Tactical Tracking of the SwimmingSnake (Silver Fox)
The original report is in Chinese, and this version is an AI-translated edition. Download PDF View in Chinese 1.Summary Antiy CERT has recently been continuously monitoring the latest attack activities of the “SwimmingSnake (Silver Fox)” black market gang and analyzing its technical methodologies: this gang targets the Bing search engine by conducting SEO poisoning, establishing […]
Cybersecurity Partners: Building Trust & Shared Value
I want to use this post to say something I do not say publicly often enough.
Secure Agent Harness Execution: Preventing Escape
Gurucul Previews Security for AI with Runtime Detection and Response, and Launches Advanced AI-Assisted Data Pipelines to Support a Cost-Optimized, Vendor-Neutral Data Fabric
New AI-assisted data onboarding and pipeline health monitoring in Data Optimizer, plus preview of our next-generation of Security for AI - all running on the same Unified Entity Intelligence behind Gurucul’s Next-gen SIEM and Insider Risk Management.
How SenseOn Has Improved So Far in 2026
The changes shipped to the SenseOn Platform in 2026 so far: a new AI intelligence layer, richer visibility and reporting, and a bigger Data Fabric.
From prompt to action: Why agent workflows need observability
Elastic 9.5: Columnar, VectorDB index mode & auto-calibration, and AI-driven alert triage
Today, we are pleased to announce the GA of Elastic 9.5 as the latest version of the Elasticsearch Platform. This release includes a range of new features, including Columnar Mode, VectorDB index mode, and Agent Builder enhancements. Learn more.
AI consolidation: Why platforms will win and portfolios will break
Our partners are proof that getting this architecture right drives real success. By building on Elastic’s unified platform rather than a fragmented portfolio, they bypass the friction of integrating disparate tools.
Rapid7 Analysis: KindaRails2Shell (CVE-2026-66066)
OverviewOn July 29, 2026, the Ruby on Rails project published a security advisory for CVE-2026-66066, an arbitrary file read in Active Storage applications that use the Vips image processor with untrusted uploads. The affected Active Storage ranges are , >= 8.0, , and >= 8.1, . Vips is the default Active Storage variant processor for applications that load Rails 7.0 or later defaults. Rails 6 applications are affected only when they explicitly configure Vips.Our Emergent Threat Response blog cov
Threat Actor Profile – Qilin
Executive Summary: Qilin (formerly Agenda) is a financially motivated Ransomware-as-a-Service (RaaS) group that has been active since 2022. The group operates a mature affiliate program that provides ransomware payloads, negotiation support, data leak infrastructure, and additional services such as legal assistance and spam campaigns. Qilin targets organizations across multiple sectors, including healthcare, manufacturing, finance, government, […]
Rapid7 Expands UK and Ireland Channel Presence Through Strategic Partnership with Exclusive Networks
Ross Baker is Senior Director, Northern Europe at Rapid7.As organizations across the United Kingdom and Ireland embrace AI, cloud technologies, and digital transformation in the name of enhancing customer experiences and accelerating business growth, the cybersecurity landscape must continue to evolve just as quickly.In this environment, business leaders still expect security to enable innovation, not slow it down. They're pushed to reduce risk, improve visibility across expanding attack surface
CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates
Hugging Face AI Breach: Enterprise Security Lessons
What the Hugging Face incident reveals about AI-driven breach paths, exposure management, compensating controls, and proving closure at machine speed.
What is your AI actually doing? Introducing the Cribl App for AI Observability
The Good, the Bad and the Ugly in Cybersecurity – Week 31 (2026)
Police flag 4,000 URLs to disrupt The Com, theft victims sue Apple over a $1.8M wallet scam, and OpenAI and Anthropic models reach real systems in cyber tests.
Teaching an AI Your Infrastructure
A per-org knowledge graph plus vector memory, and the fight to keep it from poisoning an investigation with last month's stale state.
Deconstructing npm Registry & Supply Chain Attacks | Netenrich
Modern JavaScript/TypeScript development relies on composing applications rather than writing them from scratch. With over 2 million public packages and billions of weekly downloads, the npm registry (registry.npmjs.org) has become critical global software infrastructure. However, this convenience introduces a massive extension of trust.
Antiy AVL SDK Anti-Virus Engine Upgrade Announcement (20260801)
Based on the principles of transparency, accessibility, usability, verifiability and perceptibility of security capabilities, Antiy releases weekly updates of the AVL SDK anti-virus engine and the full set of capabilities to the public every week. 1.Weekly Update Statistical period: July 25, 2026 ~ July 31, 2026 Antiy AVL SDK anti-virus engine released a total of […]
Prioritize security findings with the Datadog Runtime Prioritization Engine
Learn how the Datadog Runtime Prioritization Engine infers ownership and identifies business-critical resources to help you prioritize security findings.
Closing the AI gap: How next-generation knowledge access unlocks mission outcomes for government
IDC research shows 72% of US public sector leaders struggle to scale AI. Learn how federated knowledge access unlocks mission outcomes.
The Great AI Escape: What OpenAI’s Sandbox Breakout Teaches Us About Agentic Security
Quick disclaimer before we start: I have a strict rule against ambulance chasing. You’ve seen vendor blogs that pounce on a breach headline just to pitch a product and claim it never would have happened with their tool installed. This isn’t that. The reported OpenAI and Hugging Face sandbox incident points to something bigger. Security … Continued The post The Great AI Escape: What OpenAI’s Sandbox Breakout Teaches Us About Agentic Security appeared first on Exabeam.
How Behavior Sequences Reveal Insider Risk Earlier
AI agents don’t hack their way in. They don’t need to. They carry real credentials. They run inside approved systems. They read data, call APIs, and execute workflows on their own. Every action looks authorized because it is. That’s exactly the problem. The risk doesn’t show up in any single action; it emerges in the … Continued The post How Behavior Sequences Reveal Insider Risk Earlier appeared first on Exabeam.
Sumo Logic SIEM Pricing: What Cloud SIEM Actually Costs
Sumo Logic Cloud SIEM runs about $340,800 in year one at 100 GB/day. Here's how credits, burn rates, and multipliers work - and how to cut the bill. The post Sumo Logic SIEM Pricing: What Cloud SIEM Actually Costs appeared first on Realm Security.
Kimi is Not K3
Articles comparing Kimi K3 with Claude Fable 5 often describe the result as Kimi competing with Claude. That comparison sounds reasonable because each name…
Bank of Baroda Data Leak: Analysis of the Triple X Extortion Claim and Exposed Customer Data
Executive Summary In May 2026, the threat actor group Triple X claimed responsibility for a significant data breach involving Bank of Baroda (BoB), one of India’s largest public sector banks. The actor published the alleged stolen data on its data leak site. According to the claims, the exposed information includes customer account-opening forms, mobile banking application […]
Automating security reporting and response with Wazuh and Shuffle
Security teams process large volumes of alerts each day, which makes it difficult to identify recurring threats, prioritize incidents, and respond consistently. While continuous monitoring is essential, organizations can also benefit from scheduled summaries that consolidate alert activity over a defined period. These reports help analysts recognize patterns, surface recurring issues, and track risk trends […] The post Automating security reporting and response with Wazuh and Shuffle appea
When Your Parser Breaks: Schema Drift and Detection Gaps That Sneak Up On You – Axoflow
Schema drift silently breaks parsers and creates detection gaps. Learn how pipeline-layer validation catches drift before your SIEM does.
When Trusted Tools Reach Their Limits: The Evolution of Log Pipelines – Axoflow
syslog-ng was the right choice for years, but modern log pipelines demand more than stability. Why log infrastructure needs to evolve, and where to go next.
The night before DORA: One CISO. Five timelines. Zero confidence.
AI Governance in Security: Human In or On the Loop
"Human in the loop" appears in virtually every AI governance in security conversation in security today — typically as a reassurance that humans remain in control, without much specificity about what that means operationally. I want to be more precise, because in security operations, precision matters.
Falcon AIDR Now Protects Copilot Studio Agents and Claude Code
264% ROI in New Forrester Consulting TEI Study
Security teams using legacy SIEMs face rising data volumes, limited resources, fragmented tools, and growing operational complexity, while outdated architectures and pricing models make security data costly to collect, difficult to manage, and slow to investigate.
A practical guide to React error monitoring
Learn how to catch, enrich, and sanitize React errors using tools like error boundaries alongside Datadog Error Tracking.