Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,076 matching stories — in Security Orchestration, Automation & Response (SOAR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The riskiest AI-enabled attackers look routine one alert at a time. What Anthropic's study of 832 threat actors means for SOC triage. The post Why the Most Dangerous AI-Enabled Attacks Look Ordinary to Your SOC appeared first on D3 Security.
Supabase is a favorite of AI coding agents. It's also prone to misconfiguration. We studied more than 16,000 open databases to see what's leaking.
As cloud perimeters expand and threats become more sophisticated, managing and securing network traffic is more critical than ever. Today, I am excited to announce the latest addition to Synqly’s integration ecosystem: the Network Security category. The post Expanding the Synqly Ecosystem: Introducing the Network Security Integration Category first appeared on Synqly.
I’m a father of four, and I’ve recently started teaching my oldest daughter how to drive, which is an experience all by itself. To be clear, she isn’t taking the car anywhere on her own yet. But that day is coming soon, which is both exciting for her and slightly terrifying for me. 😬 Teaching […] The post Guardrails Aren’t Governance: What Raising Four Kids Taught Me About Agentic Autonomy appeared first on Bricklayer AI.
Thank you for your interest in Ontic Summit 2027! We’ve created these two templates to help you make the case for attending and highlight the value for you and your team. Simply copy, paste, and customize the template that best fits your needs. Use this template if you are an Ontic client Subject Line: Approval… The post Summit 2027 Business Justification Email appeared first on Ontic.
Detection rule portability is the practice of writing and managing threat-detection logic so it moves across SIEM, EDR, and XDR platforms without a full rewrite. What happens to my detection rules when I migrate to a new SIEM platform? Rules written in a platform’s native query language do not travel. SPL stays in Splunk. KQL […] The post Detection Rule Portability appeared first on SOC Prime.
The concrete pillow: you can be fully compliant and still sell nobody what they wanted. Chris Jordan and Henry Denner on inherited compliance, what really…
A 7-step SIEM migration guide: run your old and new SIEM in parallel, validate detection coverage, and keep your history before you switch the old one off. The post SIEM Migration Guide: How to Switch SIEMs Without Compromising Detection Coverage appeared first on Realm Security.
Research across 14,652 detections shows why nearly half need attention, and what to measure instead of detection count.
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the trad
Semtech Corporation, provider of high-performance semiconductors powering AI data center networking and intelligent, connected Internet of Things (IoT)... The post Semtech and Palo Alto Networks integrate 5G/LTE routers with Zero Trust security for industrial IoT appeared first on Industrial Cyber.
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication. The post SolarWinds Patches Critical RCE Flaws in Observability Self-Hosted appeared first on SecurityWeek.
The top 10 autonomous SOC platforms in 2026, ranked, led by the one CISOs across 300+ enterprise environments and MSSPs rank first. Plus two tests to run on your own queue before you buy.
Learn how attackers combine environment variable staging and steganography in PNG files to deliver DCRat malware in memory.
Security teams already have long queues of potential application vulnerabilities. The useful question is what happens next: can they see how a weakness behaves in a running application, reproduce the attack, and give developers enough evidence to fix it?Dynamic application security testing (DAST) helps answer those questions by testing applications as an attacker encounters them. The IDC MarketScape: Worldwide Dynamic Application Security Testing 2026 Vendor Assessment (Doc #US54119126, Septembe
NINA is live for every Zynap customer. Our multi-agent AI engine investigates the threats facing your organization in real time, tells you what to patch first and designs, builds and repairs the workflows that respond. It works with the tools you already run, the agents you build and the models you choose, and you decide what runs on its own. The post Inside NINA: Zynap’s Multi-Agent AI Engine appeared first on Zynap.
Your SSO logs only tell half the story. Learn what shadow IT is, how discovery tools compare, and how teams are closing the gap without banning apps.
Shadow AI is the use of unapproved AI tools at work. Learn how it differs from shadow IT, the risks it creates, and how to detect and govern it.
Traditional red teaming is just a snapshot. Agentic red teaming uses autonomous AI agents to continuously reason within your environment. Here are the five use cases we see that security teams should adopt first.
In this episode Cyber threats don’t stay online—and insider threats don’t stop at the employee roster. Former FBI Deputy Director Paul Abbate joins Fred Burton to explore what these shifting boundaries mean for corporate security. Drawing on nearly three decades at the FBI and his advisory work at FTI Consulting, Paul discusses cyber-physical convergence, the… The post Evolving Insider Threats and Cyber-Physical Convergence with Former FBI Deputy Director Paul Abbate appeared first on Onti
For decades, we believed that if could hear someone’s voice on a phone call or see them on a video call, they were who they said they were. What if that’s no longer true?
Every large organization generates a constant stream of security-relevant information: a protest forming near an office, a threatening social media post aimed at an executive, a supply route disrupted by severe weather, an access badge reported stolen. A global security operations center, or GSOC, is the function that takes in all of that information, figures… The post Global Security Operations Center (GSOC): A Complete Introduction appeared first on Ontic.
The New Insider Threat Is Trying to Help You. Your next data leak may not begin with a hacker. It may begin with one of your best employees trying to do their job faster. They paste a confidential document into an AI tool to summarise it. They upload a spreadsheet to get some quick analysis. […] The post The new Insider Threat is trying to help you. first appeared on BlockAPT | Autonomous AI Cybersecurity.
Cybersecurity is in the middle of a generational shift. AI has disrupted a 30-year balance of power between defenders and adversaries. Armed with agentic AI tools and open-weight models stripped of safety … The post Introducing Unit 42 Continuous Frontier AI Defense appeared first on Palo Alto Networks Blog.
See Why ReliaQuest was named a Strong Performer.
Learn how to strengthen asset visibility with 8 proven strategies including complete discovery, agentless workflows, and monitoring tools to reduce security blind spots.
Grok 4.7 scores 37.6% on Simbian's Cyber Defense Benchmark against Grok 4.6's 41.3%, and 96% of its turns spend zero reasoning tokens.
Chris Jordan of Fluency Security and Henry Denner of ASI Connect on what mean time to detect should actually measure, why AI scales quality rather than…
Welcome to the PCI Security Standards Council’s blog series, The AI Exchange: Innovators in Payment Security. This special, ongoing feature of our PCI Perspectives blog offers a resource for payment security industry stakeholders to exchange information about how they are adopting and implementing artificial intelligence (AI) into their organizations.
We are announcing a new GitHub identity integration now live within the Synqly ecosystem. The post Synqly Adds GitHub Identity Integration for Access Visibility first appeared on Synqly.
The real metrics, formulas, and business case framework security leaders use to measure penetration testing ROI and justify the budget.
A red team rarely wins with one big exploit. They win by connecting small, boring weaknesses into one working path to your crown jewels.
Strategic partnership brings network depth for incident handling and better cost management. SecureVisio and Sycope are pleased to announce their technology partnership. Two independent vendors — connected by a documented integration. Sycope brings the network side: analysis of flow-based data and metadata collected from network probes, and the alerts that come out of that visibility. […] The post SecureVisio and Sycope Partnership: NDR Integration Brings Network Context Directly Into the