A Guide to Vendor Risk Management Reporting in 2026 | UpGuard
Learn about which metrics are the most valuable for stakeholders and senior management in a Vendor Risk Management report.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,075 matching stories — in Security Orchestration, Automation & Response (SOAR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Ultimate Guide to Vendor Risk Scoring | UpGuard
Follow this guide for a complete overview of vendor risk scoring, why it’s important, and how it’s calculated.
11 Third-Party Risk Management Best Practices in 2026 | UpGuard
Discover 11 third-party risk management practices your organization should implement in 2026.
Incident Severity Levels Explained: Not Every Alert Is a Fire Drill
Learn what incident severity levels are, how SEV1 to SEV5 work, and why your team needs a clear framework before the next alert fires.
SOC Analyst Burnout: Does an AI SOC Reduce Analyst Hours?
SOC analyst burnout is draining security teams fast. Here is how an AI SOC cuts alert volume, reduces MTTD and MTTR, and gives your analysts their time back.
ANY.RUN & SentinelOne: One Workspace, Instant Context for Rapid Response
Speed and clarity are the ultimate advantages for modern SOC teams. The integration of ANY.RUN into SentinelOne delivers exactly that. Instant threat intelligence and interactive sandbox capabilities embedded right where your analysts already work. Let’s look at how this unified workflow eliminates context switching, accelerates incident response, and drives higher ROI by transforming alerts into […] The post ANY.RUN & SentinelOne: One Workspace, Instant Context for Rapid Response appeared
Chaotic Eclipse Returns With Another Microsoft Defender Exploit
In April, we covered an unusual string of Microsoft Defender disclosures from a security researcher known as Chaotic Eclipse, or Nightmare Eclipse. BlueHammer, RedSun, and UnDefend all found ways to turn trusted Windows security workflows into attack paths. Within weeks, all three techniques had been observed in real-world attacks, and BlueHammer was later linked to […]
The AI SOC is commoditized. Here’s why building our own is the next frontier.
Why wild code is the next big challenge for CIOs
OSINT (Open Source Intelligence) A Complete Introduction
Open source intelligence (OSINT), sometimes called open source threat intelligence, is the practice of collecting and analyzing publicly available information to identify risk before it becomes an incident. For corporate security teams, that mostly means physical threats: a person of interest posting about a company location, a protest forming near a facility, a credible-sounding threat… The post OSINT (Open Source Intelligence) A Complete Introduction appeared first on Ontic.
ClickFix Attacks: How to Detect and Investigate Fake CAPTCHA Lures | Prophet Security
How to detect and investigate a ClickFix attack: the process ancestry, registry and macOS artifacts that outlive the fake CAPTCHA page that delivered it.
Where Are Corporate Security Budgets Going in 2027?
Insights from more than 100 CSOs on the priorities shaping corporate security investment in 2027 Corporate security budgets are being reshaped around a different kind of security operation. That’s one of the clearest takeaways from the 2026 Annual CSO Survey, conducted by The Clarity Factory and sponsored by Ontic. The report draws on responses from… The post Where Are Corporate Security Budgets Going in 2027? appeared first on Ontic.
CrowdStrike Validated the Agentic SOC. Bricklayer Provides the Harness.
CrowdStrike’s latest announcement deserves attention—not simply because another major security company has introduced AI agents, but because of how those agents are being organized. CrowdStrike is bringing data, detection, specialist agents, shared context, orchestration, governance, and response together inside the Falcon platform. Its agents can investigate different security domains concurrently, build on one another’s findings, […] The post CrowdStrike Validated the Agentic SOC. Brickl
Agentic SOAR: What Changes When the Decision Happens at Runtime | Prophet Security
Why SOAR playbooks splinter into exceptions, and what changes when an agentic investigation makes the decision around a response action at runtime.
IBM security advisory (AV26-922)
Exaforce extends its AI security tool to monitor more than just Claude
Exaforce is offering to help enterprise security teams discover and monitor AI agents using security telemetry they already collect, rather than requiring yet another endpoint sensor. By combining usage data from agentic AI platforms with endpoint, cloud, SaaS and code data, Exaforce AI Security can identify risks, detect suspicious behavior, and respond to threats, the company said. “Exaforce uses data the SOC already collects to inventory every AI app and agent, connect each one to the person,
CVE-2026-76461: Critical Cisco Secure Email Gateway Vulnerability Exploited in the Wild
OverviewOn September 14, 2026, Cisco published a security advisory for CVE-2026-76461, a critical SQL injection vulnerability affecting Cisco AsyncOS Software for Cisco Secure Email Gateway. The vulnerability has a reported CVSS v3.1 base score of 9.8 and could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on an affected appliance.Cisco Secure Email Gateway, formerly known as IronPort Email Security Appliance, is an enterprise email security product
Red Cards, Comeback Wins, and the Unsung Defense Keeping Modern Business Online
09/15/26 For IT Pro Day 2026, SolarWinds surveyed the global THWACK® community and discovered our IT professionals and sports pros aren’t all that different. Cut through the tech jargon and it’s clear modern IT pros are playing championship-level defense, navigating unforced errors, and quietly keeping ... The post Red Cards, Comeback Wins, and the Unsung Defense Keeping Modern Business Online appeared first on SolarWinds Blog.
Active vs. Passive Asset Discovery: Finding What’s Really on Your Network
Learn why combining active scanning with passive traffic monitoring is the only way to close visibility gaps before attackers exploit them.
On the NSA’s Supercomputer from the 1960s
Really interesting story about Harvest, a specialized code breaking computer built in the 1960s by IBM for the NSA.
Who Keeps Prod Healthy When Nobody Is Looking? Introducing Loops
The bottleneck in a software organization has moved from writing code to operating it, and most of operating is quiet upkeep nobody schedules. Loops are standing goals your AI Team keeps verifying, bounded by the guardrails you already set.
Your boss called. Or did they? Trust now needs a second factor.
Your boss called. Or did they? Trust now needs a second factor. When a convincing voice, face or message can be generated on demand, ‘it sounded like them’ is no longer a control. It is a vulnerability. The Finance Director receives a video call from the Chief Executive Officer. The face is familiar. The voice […] The post Your boss called. Or did they? Trust now needs a second factor. first appeared on BlockAPT | Autonomous AI Cybersecurity.
Multi-Tenant SOC Readiness: An AI Checklist for MSSPs
Before an MSSP onboards tenants onto an AI SOC platform, five things have to be true on its own side. Contracts, access, runbooks, authority and analyst capacity, tenant by tenant.
Why the SOC Can't Run on Vibes
Evaluate the buy, build-with, and DIY spectrum for AI in the SOC to balance operational control with ongoing maintenance needs.
MSP Perspectives 2026: The evolution of the MSP cybersecurity value proposition
MSPs are no longer simply being asked to manage technology; increasingly, customers are expecting them to provide cybersecurity leadership, deliver compliance programs, and guide security investment.
Cisco Secure Email Gateway vulnerability (CVE-2026-76461) in active exploitation
Messageboards are all they need
This article was first published on LinkedIn.
Agentic SOC Platforms for Financial Services, Judged on What the Examiner Asks For
Ten agentic SOC platforms compared for banks, insurers, and capital markets, on the question regulated evaluations turn on: one incident, one document? The post Agentic SOC Platforms for Financial Services, Judged on What the Examiner Asks For appeared first on D3 Security.
FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory (ACDI) solution. With this certification, federal agencies can deploy QSS immediately. The authorization … The post FedRAMP Moderate Authorization for Palo Alto Networks Quantum-Safe Security appeared first on Palo Alto Networks Blog.
Rapid7 Named Among Notable Vendors in Forrester MDR Landscape: Why the Future is Exposure-informed, Preemptive MDR
The managed detection and response (MDR) market has reached a turning point. We’ve gone beyond the baseline of 24/7 monitoring focusing on the speed of detection and moved to a world with a convergence of exposure management and response to deliver measurable, outcome-based defenses of a larger, AI-driven attack surface.For anyone evaluating MDR right now, the Managed Detection and Response Services Landscape, Q3 2026 report by Forrester is a useful map that lays out where the market is heading.
CVE-2026-85706: Critical GitLab Path Traversal Exploited in the Wild
OverviewOn September 10, 2026, GitLab published a critical patch release for GitLab Community Edition (CE) and Enterprise Edition (EE). The release addresses CVE-2026-85706, a critical path traversal vulnerability (CWE-22) in the repository commits API with a CVSSv3.1 score of 10.0. According to GitLab, improper path confinement and missing authentication enforcement could allow an unauthenticated user to read arbitrary files from an affected GitLab server under certain conditions.On September 1
Exception Management Process: Steps, Workflow & Best Practices
Introduction Organizations routinely encounter situations where a policy, control, security requirement, compliance obligation, or established standard cannot be met as defined. These deviations may be necessary, but managing them through email approvals, spreadsheets, or informal requests can create governance gaps. An exception management process provides a structured way to identify, request, assess, approve, monitor, review,... The post Exception Management Process: Steps, Workflow & Be
Agentic Investigation for Identity Alerts: A Field Comparison
Drowning in identity alerts? 10 AI SOC platforms compared for triaging impossible travel, MFA fatigue, and credential-compromise alerts, plus the question that decides the category: where does the evidence for the verdict live? The post Agentic Investigation for Identity Alerts: A Field Comparison appeared first on D3 Security.
Your AI Keys Are The Loot Now
Anthropic's September 2026 threat report spans seven harm areas. For SOC teams, the actionable finding is that AI credentials are now a primary target. The post Your AI Keys Are The Loot Now appeared first on D3 Security.
AI Governance Framework: A Guide for Security Teams and MSSPs
AI governance determines who is accountable for each AI system an organization operates and what evidence it needs to provide to regulators. Legal and risk teams define accountability, while security teams put the controls and evidence in place. Learn which rules apply in the EU, US, and UK, how to identify AI systems already in use, and what an effective AI governance framework needs to cover. The post AI Governance Framework: A Guide for Security Teams and MSSPs appeared first on Zynap.
The SOC Just Gained a Capability It Never Had
Agentic investigation is the shift your SOC could never staff. Here is how the always-on AI, the evolved analyst, and the expert on call now fit together.
Top AI SOC Vendors in 2026
The 10 AI SOC vendors worth evaluating in 2026, ranked, with what each is best at and the one question that separates them.
Agentic SOC: Why the Model Is the Easy Part
An agentic SOC is only as good as what surrounds the model. Best of 25 frontier models: a 45.1% MITRE coverage score, zero passes. Five demands to make on a demo.
Web Shell Detection and Investigation | Prophet Security
How to detect a web shell, confirm one without guessing, and hunt for the ones that never fired an alert: telemetry, provenance, and the investigation methodology.
Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
Securing Every Environment at the Speed of Frontier AI Recognized as a Leader for the second consecutive time and positioned furthest for Completeness of Vision. Palo Alto Networks is advancing hybrid mesh … The post Palo Alto Networks Named a Leader in the 2026 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall appeared first on Palo Alto Networks Blog.