AI GitHub Agents: How One Issue Leaked Private Repos | UpGuard
Uncover how indirect prompt injection and tool poisoning allow attackers to exfiltrate private data via AI agents—all without stealing a single credential.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,073 matching stories — in Security Orchestration, Automation & Response (SOAR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Data leakage risks with DBHub MCP servers | UpGuard
UpGuard found exposed DBHub servers leaking live databases to the open internet—an early sign that MCP exposure is becoming a systemic data risk.
Best Data Breach and Data Leak Detection Tools in 2026 | UpGuard
Stopping an intrusion is half the battle. Our 2026 guide ranks the top breach and leak tools to neutralize exposed credentials before they are weaponized.
What autonomous SOC agent should enterprises evaluate for full alert coverage?
What autonomous SOC agent should enterprises evaluate for full alert coverage? We checked 10 AI SOC tools' own docs against 5 tests and found where each stops.
IT onboarding automation: building a provisioning agent with Tines 3B
The Mango Strategy: A CEO’s Guide to AI Cybersecurity
Hope is not a strategy. Neither is nostalgia. Mark Carney, Prime Minister of Canada   Business leaders cannot respond to AI-era cyber risk by longing for a simpler technology stack, slower decision-making … The post The Mango Strategy: A CEO’s Guide to AI Cybersecurity appeared first on Palo Alto Networks Blog.
How Security Stacks Fell Behind, and How We’re Managing the Modern Attack Path
Nobody sits down and designs a security stack from scratch. Stacks grow over time, usually driven by more endpoints, more identities, and whatever risk feels most urgent. Endpoints became a target, so you bought antivirus, then EDR. Phishing took off, so an email gateway went in. Credentials became the easiest way in, so identity protection […]
IBM security advisory (AV26-1022)
Ontic Connected Lunch Exchange Atlanta
The post Ontic Connected Lunch Exchange Atlanta appeared first on Ontic.
Ontic Connected Lunch Exchange Boston
The post Ontic Connected Lunch Exchange Boston appeared first on Ontic.
Driven by Innovation: Our Latest Analyst Wins and Product Momentum in Network & AI Security
Market leadership comes down to two things: the vision to anticipate and solve customer problems and proven engineering execution. Across AI Security, Network Security, SASE, and critical infrastructure protection the industry’s top … The post Driven by Innovation: Our Latest Analyst Wins and Product Momentum in Network & AI Security appeared first on Palo Alto Networks Blog.
Splunk security advisory (AV26-1018)
Bricklayer Introduces Agentic Approvals: Delegating Authority to Act
Bring humans and AI agents into the approval process with explicit requirements, relevant context, and control over when actions execute. An agent identifies a compromised workstation at 2 a.m. The investigation points to active malicious behavior, and containment could prevent further damage. But permission to isolate that device depends on more than the detection itself. […] The post Bricklayer Introduces Agentic Approvals: Delegating Authority to Act appeared first on Bricklayer AI.
AWS’s repeated problems with AI agent controls illustrates the autonomous agent dilemma
Throughout this year, Amazon Web Services (AWS) has repeatedly had to patch autonomous agent security holes, which have then reemerged in slightly different forms, according to cybersecurity researchers at Palo Alto Networks’ Unit 42 and at Zenity Labs. But the problem is not with AWS, which seems to be reacting quickly to address security reports, as much as it is with the essential nature of autonomous AI agents and the difficulty in controlling those agents. The fact that a hyperscaler with A
SonicWall and Splunk Patch Critical Vulnerabilities
Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.
Bricklayer AI Named “Agentic AI Security Platform of the Year” in 10th Annual CyberSecurity Breakthrough Awards Program
Annual Awards Program Recognizes Breakthrough Information Security Products and Companies Around the World. Arlington, VA — October 8, 2026 — Bricklayer... The post Bricklayer AI Named “Agentic AI Security Platform of the Year” in 10th Annual CyberSecurity Breakthrough Awards Program appeared first on Bricklayer AI.
Synqly Adds ServiceNow USEM Integration for Exposure Data
Vulnerability data means little to a security team without asset context, and for organizations already running ServiceNow, that context usually lives in one place: the configuration management database (CMDB). The post Synqly Adds ServiceNow USEM Integration for Exposure Data first appeared on Synqly.
The Context of Record: Keeping the Reasons Behind Security Decisions
Security teams keep careful records of what happened, but the reasons behind each decision are much harder to find. The context of record keeps those reasons where your team can find them. This article looks at what goes into it, the three layers of security context it brings together and how it applies to risk acceptance. The post The Context of Record: Keeping the Reasons Behind Security Decisions appeared first on Zynap.
Abusix Launches Frontline, A Partner Program To Meet Growing Demand
Phishing remains one of the biggest ways malicious actors breach networks, according to Verizon’s 2025 Data Breach Investigations Report. The volume of AI-powered phishing attacks is increasing by the minute, and IBM’s 2025 Cost of a Data Breach Report finds that 16% of breaches now involve attackers using AI tools, most often to write the […] The post Abusix Launches Frontline, A Partner Program To Meet Growing Demand appeared first on Network Abuse Management at Scale | Abusix.
Why Your MDR Won't Cover the Custom Detections You Built | Prophet Security
Your MDR covers its own detection library, not the custom rules your team built. Here is why those alerts fall to you, and how an AI SOC platform covers them.
Automated Investigation at Scale: How Prophet AI Protects High-Exposure Partner Environments | Prophet Security
How Prophet AI runs automated investigation at scale in a partner-heavy Microsoft 365 tenant: credential sprays, AiTM session hijacking, token persistence.
AI SOC Statistics: Adoption, Accuracy, and ROI Data | Prophet Security
AI SOC statistics for 2026: alert volume, breakout times, adoption rates, barriers, and ROI data, each with a dated source you can cite in a business case.
Claude Haiku 5.5 Cybersecurity: Anthropic's Answer to Jev?
Claude Haiku 5.5 scores 9.3% on the Cyber Defense Benchmark, 28th of 30 models, for about a cent per run. It quits after a tenth of its turn budget, and 16 samples still trail one Opus 5 run.
From the World Cup to the Olympics: Scaling Event Security with LA Metro’s Robert Gummer
In this episode Keeping a major event safe means protecting more than the stadium. Robert Gummer, Deputy Chief of Emergency Management and Security at LA Metro, joins Fred Burton to discuss lessons from the World Cup and how they’re informing preparations for the 2028 Olympics. He shares how integrating security across business units and strengthening… The post From the World Cup to the Olympics: Scaling Event Security with LA Metro’s Robert Gummer appeared first on Ontic.
Four compliance frameworks, one security team: Why fragmented university security raises regulatory risk
In Part 1 of this series, we looked at the security challenges created by fragmented, campus-by-campus environments. Higher education also faces a second pressure that makes that fragmentation harder to sustain: overlapping compliance obligations across FERPA, GLBA, HIPAA, and CMMC.Each framework brings different requirements, reporting timelines, and consequences for failure. Managing them across one institution is already complex, but across a multi-campus university system with separate tools
Data Haven Now Supports Natural Language Search
Data Haven now supports natural language search in beta. Describe the events you need, review the query Realm builds, and resupply them anywhere. The post Data Haven Now Supports Natural Language Search appeared first on Realm Security.
More Databases, Same Headcount? How AI-Driven RCA Helps DBAs Scale Database Coverage
10/07/26 Working as a DBA has always meant doing more with less. But the gap between estate growth and headcount is becoming harder to ignore. Database platforms keep multiplying. Instance counts keep climbing. The DBA team rarely grows at the same rate. Often, the assumption ... The post More Databases, Same Headcount? How AI-Driven RCA Helps DBAs Scale Database Coverage appeared first on SolarWinds Blog.
Zero-Day vs One-Day Attack: Key Differences Explained
Key Takeaways Introduction In 2025, Google’s Threat Intelligence Group tracked 90 zero-day vulnerabilities exploited in the wild, with 48% of them targeting enterprise technology. That number gets a lot of attention. But the bigger, quieter threat is not the unknown flaw. It’s the known one sitting unpatched in your environment right now. 80%+ KEVs are...
CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian products
OverviewOn October 5, 2026, Atlassian published a security advisory for CVE-2026-21589, a critical arbitrary file access vulnerability affecting eight products: Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, and Fisheye. Atlassian assigned the vulnerability a CVSSv4 score of 9.3. An unauthenticated remote attacker who knows a target file's exact name and path can access it within the
Synqly Adds BMC Helix ITSM Integration for Ticket Workflows
Through the BMC Helix ITSM integration, a security or IT operations product built on Synqly can create a ticket, retrieve one by ID, patch it to update status or fields as work progresses, and query tickets using filters for assignee, contact, priority, status, and both creation and update timestamps. The post Synqly Adds BMC Helix ITSM Integration for Ticket Workflows first appeared on Synqly.
How AI Agents Turned One Exposed Endpoint into a Server Takeover
What happens when LLM-driven agents carry out substantial portions of an attack? ReliaQuest analyzed an incident where AI did the heavy lifting.
ReliaQuest Named a Leader in the IDC MarketScape: Worldwide Standalone AI SOC Platforms 2026 Vendor Assessment
IDC MarketScape positioned ReliaQuest in the Leaders Category for standalone AI SOC platforms. See what the assessment found about GreyMatter.
The ASOS Incident: When Attackers Use the Channels Customers Trust
This week, ASOS customers opened their phones to find a hostile push notification delivered through the retailer’s own app. The message claimed the company’s Snowflake environment had been compromised and directed ASOS to engage with the sender through Telegram. ASOS later confirmed to Sky News that an unauthorized customer notification had been sent and said it was investigating activity involving third-party platforms used to communicate with customers. The company also said basic personal inf
CISA’s 17 Common Active Directory Compromise Techniques: A Sophos MDR Perspective
Active Directory defenses must combine identity fundamentals, telemetry, and rapid response as attackers reach the environment’s first breach attempt within a median of 11 hours.
Tribal Knowledge in the SOC: What an AI SOC Agent Must Know
Your logs record what happened, not why it was fine. The four layers of tribal knowledge an AI SOC Agent needs, who approves them, and why they expire.
Dark Forums: The Institution That Survives Its Own Seizures
Between January 2025 and January 2026, law enforcement took Cracked, Nulled, XSS, BreachForums and RAMP. Yet the volume of stolen data in circulation went up. This article traces the criminal forum from pre-Tor carding boards to the platforms running today, and why the forum as an institution outlives the sites that host it. The post Dark Forums: The Institution That Survives Its Own Seizures appeared first on Zynap.
Migrating From Splunk to Microsoft Sentinel? 5 Questions to Ask Before You Move
Moving from Splunk to Microsoft Sentinel? Ask these 5 questions first: which detections to move, how to run both SIEMs, and what to do with Splunk history. The post Migrating From Splunk to Microsoft Sentinel? 5 Questions to Ask Before You Move appeared first on Realm Security.
Beyond the AI SOC label
We compared ten AI SOC platforms. AI investigation is the shared promise. The real differences are in the data a platform keeps, the environment it…
What Is Cybersecurity Awareness Month? 2026 Themes, Dates, and What It Means for Security Teams
TL;DR: Cybersecurity Awareness Month runs October 1 to 31 every year. It started in 2004 and is co-led by CISA and the National Cybersecurity Alliance. In 2026, it has two official themes, one from each organization, which is why you keep seeing different slogans. The four habits it teaches still work. What’s changed is the...
Integration Pains a Unified API Solves for Cybersecurity Vendors
5 Integration Pains a Unified API Solves for Cybersecurity Vendors The post Integration Pains a Unified API Solves for Cybersecurity Vendors first appeared on Synqly.