Quarterly SAMA Progress Reports Without The Fire Drill
Quarterly SAMA reporting doesn't have to mean a week of console-stitching and evidence-chasing, here's what a governed, continuous approach looks like instead.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,075 matching stories — in Security Orchestration, Automation & Response (SOAR) — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
2026 State of ITSM: What 800+ IT Professionals Say About AI, Automation, and the Year Ahead
08/26/26 AI adoption is no longer the maturity milestone for IT service management. The harder work is turning AI activity into measurable business outcomes. The adoption-to-value gap extends well beyond the service desk. McKinsey found that nearly nine in 10 organizations now use AI in at least one business function, but nearly two-thirds have not begun scaling ... The post 2026 State of ITSM: What 800+ IT Professionals Say About AI, Automation, and the Year Ahead appeared first on SolarWinds B
A call for collective action on cyber defense
Sophos joins organizations worldwide in supporting a coordinated and responsible approach to cyber defense.
The State of Ransomware in Education 2026
Insights from 226 IT and cybersecurity leaders across the education sector in 17 countries whose organizations were hit by ransomware in the past year.
The Stateful SOC: Shared Memory, Bounded Agents, and Accountable Action
The five kinds of state an AI SOC has to preserve, why unknown must be a first-class answer, how bounded agents should work from shared operational memory, and where human authority has to remain.
Celebrating excellence: Palo Alto Networks announces the 2026 North America Partner of the Year Awards
At the 2026 Executive Partner Summit, Palo Alto Networks President BJ Jenkins made one thing clear: the AI era is the platform era — and above all, the AI era is the … The post Celebrating excellence: Palo Alto Networks announces the 2026 North America Partner of the Year Awards appeared first on Palo Alto Networks Blog.
Edge infrastructure under siege: what two independent datasets reveal about who's exploiting your perimeter
A joint Tenable-SentinelOne analysis of 93 CVE-actor attribution pairs reveals that both state-sponsored actors and cybercriminals independently converge on the same edge infrastructure. Special thanks to SentinelOne® Incident Readiness & Response for their contributions to this publication.It is the shared attack surface where state-sponsored threat actors and financially motivated criminal groups independently converge — not the province of a single adversary category, and not exclusively
Edge Infrastructure Under Siege: What Two Independent Datasets Reveal About Who's Exploiting Your Perimeter
A new joint study by Tenable and SentinelOne reveals how state and criminal groups converge on the same vulnerable edge infrastructure.
AI SOC vs SOAR: Where Each One Actually Fits
SOAR runs the workflow you specified. An AI SOC forms the verdict. Where each one fits, what to keep, and how to run both without rebuilding what already works.
How to Migrate SOC Platforms Without Losing Detection Coverage
A cutover runbook for SOC and SIEM migrations: how to baseline coverage before you move, the six ways it disappears quietly, and the phase gates that prove it came back.
Connected Data, Trusted Decisions: Building an AI-Ready Security Program with Lukas Quanstrom
In this episode AI is creating new possibilities for corporate security, but readiness depends on far more than adopting a new tool. Ontic CEO and co-founder Lukas Quanstrom joins Manish to explain why connected, governed data and clearly defined workflows are essential for trustworthy AI outcomes. They discuss the difference between using AI for efficiency… The post Connected Data, Trusted Decisions: Building an AI-Ready Security Program with Lukas Quanstrom appeared first on Ontic.
Why SOAR Implementations Fail (And How to Actually Use Them) | Prophet Security
Most SOAR implementations stall at five to ten playbooks. Here is why the architecture caps adoption, and where to point the SOAR you already own.
Qwen 3.8 27B Cybersecurity: A Local LLM That Costs More
Alibaba's 27B open-weight model ties GPT-5.6 Luna at 52 on the Artificial Analysis Intelligence Index, then finds 10.6% of a real attack at 3x the cost.
The Best Agentic SOC for CrowdStrike in 2026 (and Where Charlotte AI Fits)
The 8 best agentic SOC platforms for CrowdStrike Falcon in 2026, compared. What Charlotte AI's agents do today, how credits work, and where the gap is. The post The Best Agentic SOC for CrowdStrike in 2026 (and Where Charlotte AI Fits) appeared first on D3 Security.
Putting Every Tool on the Trust Ladder
A trust level is a promise that every individual tool has to keep. This post covers how thousands of per-tool decisions get made, and how you audit the result.
The Path to the Autonomous SOC: The Early Returns of AI & What It Means for Cybersecurity
Discover how early-stage AI yields rapid SOC returns, driving platform consolidation and reducing analyst burnout in this blog post.
The SAMA Controls You Can Operationalize Today: IAM, Logging, and Continuous Monitoring
A practical breakdown of three SAMA Cybersecurity Framework controls your team can start operationalizing this quarter, and how governed AI teammates help prove them.
The SAMA Controls You Can Operationalize Today: IAM, Logging, and Continuous Monitoring
A practical breakdown of three SAMA Cybersecurity Framework controls your team can start operationalizing this quarter, and how governed AI teammates help prove them.
Top 10 SOC Automation Tools in 2026
The 10 SOC automation tools security teams shortlist in 2026, what each one is best at, and how to tell playbook automation apart from reasoning.
Sophos Ranked #1 Overall in Endpoint, XDR, MDR, and Firewall in the G2 Fall 2026 Reports
Sophos is the only vendor recognized as a Leader across all five of these core cybersecurity markets.
Ontic’s Connected Lunch Exchange
The post Ontic’s Connected Lunch Exchange appeared first on Ontic.
Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)
Closing the Observability Gap: Connecting Application Traces to Database Execution Plans
08/24/26 The alert fires on p95 latency. A high-traffic API endpoint whose p95 normally sits under 100ms is now sitting at 380ms at the 95th percentile. That’s not right. You go through your initial checks. No errors. No recent deployments. No infrastructure alerts firing anywhere ... The post Closing the Observability Gap: Connecting Application Traces to Database Execution Plans appeared first on SolarWinds Blog.
AI Tools for Investigating Impossible Travel Alerts and Anomalous Logins | Prophet Security
A practitioner comparison of AI tools for investigating impossible travel alerts and anomalous logins, grouped by how far each tier of tool carries a case toward a verdict.
Will AI Replace Penetration Testers? Finding Isn't the Job
Will AI replace penetration testers? An AI agent beat 9 of 10 pros in a Stanford, CMU and Gray Swan AI study. What it still cannot do, and why it matters.
Internal Audit vs External vs Statutory Audit: Differences & Scope
Key Takeaway: Internal Audit: Are our risks and controls working effectively? External Audit: Can an independent party provide assurance over the defined subject matter? Statutory Audit: Is this audit required by applicable law? Internal Audit vs External vs Statutory Audit: Quick Comparison Basis Internal Audit External Audit Statutory Audit Primary purpose Evaluate and improve risks,... The post Internal Audit vs External vs Statutory Audit: Differences & Scope appeared first on ASPIA Inf
A Social Engineering Attempt Against ReliaQuest: What We Found
On August 22, 2026, ReliaQuest was the target of a social engineering attempt. Here's the full playbook of what happened and how we shut it down.
Unit 42 Defends Organizations Against Next-Gen Frontier AI Risks with Anthropic’s Mythos 5
Frontier AI has compressed attack timelines from weeks to minutes. For defenders to gain the upper hand, they need to fight back at machine speed. That’s why Palo Alto Networks Unit 42 … The post Unit 42 Defends Organizations Against Next-Gen Frontier AI Risks with Anthropic’s Mythos 5 appeared first on Palo Alto Networks Blog.
DataBahn Competitor: Is Realm a Better Alternative for Your SOC?
Realm is a DataBahn competitor built for the SOC: it reads your live detections, protects the fields they need, and proves coverage held. See the side-by-side. The post DataBahn Competitor: Is Realm a Better Alternative for Your SOC? appeared first on Realm Security.
Intelligence Insights: August 2026
Debuts, departures, and danger on the blockchain in this month’s edition of Intelligence Insights.
Third-Party Risk Management (TPRM): A Security Guide
A vendor's security can change the day after you assess them. This guide covers what Third-Party Risk Management (TPRM) is, how continuous exposure monitoring keeps up with that, and what it means for security teams and MSSPs, especially in regulated industries. The post Third-Party Risk Management (TPRM): A Security Guide appeared first on Zynap.
How Do You Test Something That's Never the Same Twice?
Benchmarking the whole agent, not the model, on real incidents, and turning resolved cases into a fine-tuned root-cause model that must beat frontier baselines first.
Cribl Just Acquired Radiant Security’s AI SOC Technology. Here’s What It Means for Your SOC.
Cribl acquired Radiant Security's AI SOC technology on August 19, 2026. What it means for Radiant customers, evaluators, and your AI SOC shortlist. The post Cribl Just Acquired Radiant Security’s AI SOC Technology. Here’s What It Means for Your SOC. appeared first on D3 Security.
CVE-2026-19490: Critical Vulnerability Affecting Citrix NetScaler ADC and NetScaler Gateway
OverviewOn August 19, 2026, a security advisory was published for CVE-2026-19490, a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway. The vulnerability carries a CVSS v4.0 base score of 9.3 and can be exploited remotely by an unauthenticated attacker over the network without user interaction or elevated privileges.NetScaler ADC and NetScaler Gateway are widely deployed enterprise networking products commonly positioned at or near the network perim
Rapid7 and Licencias OnLine Partner to Accelerate Cybersecurity Maturity across Latin America
Cássio De Alcântara is Director, LATAM Sales at Rapid7.Across Latin America, organizations are embracing cloud, AI, and digital transformation to drive innovation and business growth. These technologies create new opportunities, but also introduce greater complexity and expanding attack surfaces.In this environment, security leaders are being asked to understand where risk exists across increasingly distributed environments and quickly eliminate blind spots like Shadow IT and Shadow AI – all wit
Think your cybersecurity is Sovereign? Look again.
Think your cybersecurity is Sovereign? Look again. Your cybersecurity provider may be protecting your data while exposing your organisation to risks you have never considered. For years, cybersecurity buyers have been told to ask where their data is hosted. It is an important question, but it is no longer enough. A platform can host information […] The post Think your cybersecurity is Sovereign? Look again. first appeared on BlockAPT | Autonomous AI Cybersecurity.
IT Staffing for Schools and Districts: Ratios, Tools, and What Works at Scale
08/19/26 There’s no single “right” ratio for how many IT technicians a school district needs, and any source claiming otherwise is oversimplifying a genuinely complicated question. The more useful approach is to understand how staffing ratios shift with district size and why the ratio itself is only half the staffing story. Most existing ... The post IT Staffing for Schools and Districts: Ratios, Tools, and What Works at Scale appeared first on SolarWinds Blog.
BYOVD: How Signed Drivers Become Kernel-Level Backdoors
Fast facts 54 out of 90 EDR killers actively used in the wild are BYOVD-based, abusing 35 signed drivers that Windows trusts by default. Bitdefender predicts BYOVD will reach a prevalence rate of 75% or more in ransomware attacks going forward. Adversaries generate over 2,500 distinct variants of TrueSight.sys driver (version 2.0.2) , each with a completely unique hash and a valid certificate. A single BYOVD tool called EDRKillShifter is now shared across eight different ransomware gangs simulta
The LLM Proxy, and How to Put Your Agents Behind One
The exhibit floor at Black Hat this August had one theme, and it was not subtle. Roughly 235 of the 450 or so vendors on the floor marketed AI or agentic…
Clop Returns with Custom Implant in Mass-Extortion Campaign
Clop's exploitation of CVE-2026-12569 in PTC Windchill returns the group to mass exploitation with a custom web shell built for full data theft.