Continuous Attack Surface Management: An Easy Guide
Your attack surface grows every day. Here is how continuous attack surface management keeps you ahead of attackers.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,008 matching stories — announcement, in Security Orchestration, Automation & Response (SOAR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Why 68% of Saudi Financial Institutions Fail Their First SAMA Audit (and the Pattern Behind It)
Most Saudi financial institutions do not fail SAMA audits from a lack of knowledge; they fail from a lack of continuous, evidenced execution, and here is the pattern behind it.
Detection Engineering vs Alert Triage: What Each Fixes
Alert triage judges one event. Detection engineering decides whether the next one fires at all. How a closed case becomes a hunt, a rule, and a test.
Grounded Reality: What the CVE Numbers Say About AI Pentesting and Vulnerability Growth
A Simbian field note on live NVD CVE data: Q2 2026 ran 71% hotter than Q2 2025, 2026 YTD already beat all of 2025, and 78.7% of this year's CVEs are unscored.
DataBahn Competitor: Is Realm a Better Alternative for Your SOC?
Realm is a DataBahn competitor built for the SOC: it reads your live detections, protects the fields they need, and proves coverage held. See the side-by-side. The post DataBahn Competitor: Is Realm a Better Alternative for Your SOC? appeared first on Realm Security.
Intelligence Insights: August 2026
Debuts, departures, and danger on the blockchain in this month’s edition of Intelligence Insights.
Third-Party Risk Management (TPRM): A Security Guide
A vendor's security can change the day after you assess them. This guide covers what Third-Party Risk Management (TPRM) is, how continuous exposure monitoring keeps up with that, and what it means for security teams and MSSPs, especially in regulated industries. The post Third-Party Risk Management (TPRM): A Security Guide appeared first on Zynap.
How Do You Test Something That's Never the Same Twice?
Benchmarking the whole agent, not the model, on real incidents, and turning resolved cases into a fine-tuned root-cause model that must beat frontier baselines first.
The Free Agentic SOC Add-On That Quietly Locks You In
Free agentic add-ons come with ecosystem lock-in. Learn the four questions that reveal the real cost before you standardize on one vendor.
Cribl Just Acquired Radiant Security’s AI SOC Technology. Here’s What It Means for Your SOC.
Cribl acquired Radiant Security's AI SOC technology on August 19, 2026. What it means for Radiant customers, evaluators, and your AI SOC shortlist. The post Cribl Just Acquired Radiant Security’s AI SOC Technology. Here’s What It Means for Your SOC. appeared first on D3 Security.
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
Cássio De Alcântara is Director, LATAM Sales at Rapid7.Across Latin America, organizations are embracing cloud, AI, and digital transformation to drive innovation and business growth. These technologies create new opportunities, but also introduce greater complexity and expanding attack surfaces.In this environment, security leaders are being asked to understand where risk exists across increasingly distributed environments and quickly eliminate blind spots like Shadow IT and Shadow AI – all wit
Think your cybersecurity is Sovereign? Look again.
Think your cybersecurity is Sovereign? Look again. Your cybersecurity provider may be protecting your data while exposing your organisation to risks you have never considered. For years, cybersecurity buyers have been told to ask where their data is hosted. It is an important question, but it is no longer enough. A platform can host information […] The post Think your cybersecurity is Sovereign? Look again. first appeared on BlockAPT | Autonomous AI Cybersecurity.
IT Staffing for Schools and Districts: Ratios, Tools, and What Works at Scale
08/19/26 There’s no single “right” ratio for how many IT technicians a school district needs, and any source claiming otherwise is oversimplifying a genuinely complicated question. The more useful approach is to understand how staffing ratios shift with district size and why the ratio itself is only half the staffing story. Most existing ... The post IT Staffing for Schools and Districts: Ratios, Tools, and What Works at Scale appeared first on SolarWinds Blog.
BYOVD: How Signed Drivers Become Kernel-Level Backdoors
Fast facts 54 out of 90 EDR killers actively used in the wild are BYOVD-based, abusing 35 signed drivers that Windows trusts by default. Bitdefender predicts BYOVD will reach a prevalence rate of 75% or more in ransomware attacks going forward. Adversaries generate over 2,500 distinct variants of TrueSight.sys driver (version 2.0.2) , each with a completely unique hash and a valid certificate. A single BYOVD tool called EDRKillShifter is now shared across eight different ransomware gangs simulta
Fake AI, real malware: Attackers impersonating AI brands
A year of MDR casework shows attackers repeatedly exploiting demand for AI tools
The LLM Proxy, and How to Put Your Agents Behind One
The exhibit floor at Black Hat this August had one theme, and it was not subtle. Roughly 235 of the 450 or so vendors on the floor marketed AI or agentic…
New Report: AI threats are here. Why Q2 2026 signals the end of traditional patch cycles
You can’t patch everything. So what do you fix first? Findings in Q2 2026 have changed traditional answers.The latest Quarterly Threat Landscape Report from Rapid7 Labs shows vulnerability disclosures still surging while attackers use automation and AI-assisted tooling to compress the time between disclosure and exploitation. The gap that patch cycles were built to fill is closing. Speed and volume are overwhelming security teams that have relied on traditional patch cycles and reactive programs
The Lossy Handshake: Why Context Dies Between SOC Functions
One identity incident, five different stories. What gets lost when work moves between threat intelligence, hunting, detection engineering, investigation, and remediation, and why the unicorn analyst is a workaround for missing system state.
Clop Returns with Custom Implant in Mass-Extortion Campaign
Clop's exploitation of CVE-2026-12569 in PTC Windchill returns the group to mass exploitation with a custom web shell built for full data theft.
How the US plan to fight transnational cyber crime affects you
On 12 August 2026 the White House published a memorandum on cyber-enabled crime. It lets vetted private companies carry out surveillance and disruption work in cyberspace, under US government direction. The targets are criminal groups abroad. No specific country is named in the text.
Resources – Synqly
Give Your Coding Tools a Map of Production with Edge Delta's Knowledge Graph
Edge Delta's Knowledge Graph, an automatically maintained map of your services, teams, and incidents, is now queryable directly from the edx CLI, giving your coding agent blast radius and ownership context in the same investigation where it finds the bug.
Autonomous Red Teaming Is the Warm-Up. The Real Test Is the Operating Model
Three wake-up calls in four months. The industry is testing the attacker. It also needs to rethink the defender. Faced with autonomous attackers, the cybersecurity industry has largely converged on the same response: more testing. In April 2026, Anthropic disclosed that Mythos, restricted from public release, had autonomously discovered and exploited thousands of zero-day vulnerabilities […] The post Autonomous Red Teaming Is the Warm-Up. The Real Test Is the Operating Model appeared first
Cost Audit vs Management Audit vs Financial Audit: Differences, Scope, Objectives & Examples
In Simple Terms: Cost Audit → Cost Management Audit → Management & Performance Financial Audit → Financial Statements Cost Audit vs Management Audit vs Financial Audit at a Glance Basis Cost Audit Management Audit Financial Audit Primary focus Cost records and cost information Management effectiveness and organizational performance Financial statements and financial reporting Main question... The post Cost Audit vs Management Audit vs Financial Audit: Differences, Scope, Objectives & Ex
Microsoft Defender External Attack Surface Management
SonarQube Server
Detection Engineering in an AI-Driven SOC: What Actually Needs to Change | Prophet Security
AI SOC analysts investigate every alert. So what should detection engineers do differently? A look at how the lifecycle, metadata, and tuning model need to adapt.
Operation ASTERIX: Anatomy of a Crypto Fraud Pipeline
Operation ASTERIX overviewRapid7 researchers identified an exposed web directory on infrastructure used to support a cryptocurrency fraud operation. The server contained raw phone-number datasets, account-validation tools, enriched lead records, phishing panels, voice-dialing scripts, fake wallet applications, persistence mechanisms, and Telegram exfiltration code. Among the artifacts was evidence that the operator relied on AI coding assistants throughout the campaign's development; recovered p
Hunting the Undead: Accelerating NetNTLMv1 Lookups Without GPUs
Outdated protocols, forgotten configurations, and legacy dependencies continue to create opportunities for attackers in modern environments. This research explores how NetNTLMv1 can still be leveraged today and how improvements in attack tooling are reducing the cost and complexity of exploiting it.
MDR vs MSSP: what each model covers and where context comes from
MDRs and MSSPs solve different problems, and both solve them well. An MSSP manages your security tools and gets alerts in front of someone around the clock. Managed detection and response, or MDR, adds a team that investigates those alerts before they reach you. For most organizations, buying one of these is a better decision […]
I Played ARC-AGI-3 With My Own Method
I Played ARC-AGI-3 With My Own Method/images/i-played-arc-agi-3.webp/images/i-played-arc-agi-3.webp Kai here. Daniel asked me to write this one up myself, since I ran it. He sent me a repo called arc-codehttps://github.com/jerber/arc-code that got 96.2% on ARC-AGI-3's public games using plain Cla...
The Best Agentic SOC Platforms for MSSPs in 2026: Multi-Tenancy, Margin Math, and a Full Comparison
The definitive 2026 guide to agentic SOC platforms for MSSPs. 9 platforms compared on multi-tenancy depth, cost-to-serve economics, tenant onboarding, and white-labeling, plus a vendor-neutral evaluation framework. The post The Best Agentic SOC Platforms for MSSPs in 2026: Multi-Tenancy, Margin Math, and a Full Comparison appeared first on D3 Security.
The 10 Best Torq Alternatives in 2026: Agentic SOC Platforms Compared After the SOC Brain Launch
Researching Torq alternatives after the SOC Brain announcement? 10 agentic SOC platforms compared by architecture, learning model, pricing behavior, and audit trail, plus the five evaluation questions and the 10-run test to bring to any vendor demo. The post The 10 Best Torq Alternatives in 2026: Agentic SOC Platforms Compared After the SOC Brain Launch appeared first on D3 Security.
10,000 Alerts a Day: Rethinking the Analyst’s Role with AI
Embed Security CEO and Co-Founder Seth Summersett joined ITSPmagazine’s Sean Martin at Black Hat USA to discuss how AI can help security teams manage alert volume at machine scale while giving analysts the evidence they need to trust the results. Read the full ITSPmagazine article here, listen to the podcast here, or watch the interview […] The post 10,000 Alerts a Day: Rethinking the Analyst’s Role with AI appeared first on Embed Security.
The Good, the Bad and the Ugly in Cybersecurity – Week 33 (2026)
Courts sentence Com member for sextorting 117 minors, joint advisory warns of Gunra ransomware, and ShieldBreak bypasses MS Defender for SYSTEM access.
Internal Audit Checklist: Free Excel Template, Examples & Best Practices
Download the Free Internal Audit Checklist Excel Template Internal Audit Checklist Excel Template Includes audit planning, checklist testing, findings, remediation, evidence, validation, and automatic dashboard reporting Download Template → What Is an Internal Audit Checklist? An internal audit checklist is a structured list of audit areas, control requirements, questions, testing procedures, and evidence requirements used... The post Internal Audit Checklist: Free Excel Template, Examples &
What Is AI Threat Hunting and How Does It Work? | Prophet Security
A practitioner's guide to AI threat hunting: what an AI threat hunter does, which hunts run and why, and what changes for a team that hunts continuously.
Top 6 SOAR Platforms of 2026 | Prophet Security
Stop maintaining playbooks. We rank the Top SOAR Platforms of 2026 and how to start looking beyond legacy SOAR to Agentic AI.
Corporate Security: A Complete Guide (2026)
What is corporate security and how does it fit into both physical and cybersecurity? Corporate security is the function responsible for protecting an organization’s people, physical assets, information, and operations from threats that originate both inside and outside the business. For large enterprises, that mandate spans everything from the guard at the front desk to… The post Corporate Security: A Complete Guide (2026) appeared first on Ontic.
From Online Activism to Physical Disruption: How Security Teams Can Spot Escalating Risk
The post From Online Activism to Physical Disruption: How Security Teams Can Spot Escalating Risk appeared first on Ontic.