Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
111 matching stories — release, in Software Supply Chain Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
renovate-ce-ee mend-renovate-enterprise-edition-10.8.0
renovate-ce-ee mend-renovate-ce-15.8.0
Faster bulk ticket creation for manifest alerts
Updated Fixes API docs for more reliable requests
metadefender-k8s metadefender_storage_security-4.6.1
Stronger repository access controls for OAuth sessions
endorlabs-sdk v0.7.4
metadefender-k8s metadefender_storage_security-4.6.0
metadefender-k8s metadefender_software_supply_chain-4.1.0
rl-scanner v4.4.0
CRA compliance will be judged by the binary you ship
With the EU Cyber Resilience Act’s Article 14 reporting requirements now live, executives need evidence drawn from the final software artifact.
endorlabs-sdk v0.7.3
Evo ADS Govern Agent Behavior Goes GA: Bringing MCP Usage Under Control
Evo ADS Govern Agent Behavior is now generally available, starting with MCP Governance. Discover, approve, monitor, log, and block MCP server usage across leading AI coding agents.
rl-scanner v4.3.9
Polaris release update: Bringing AI security findings, scan governance, and remediation together
As development teams adopt AI-generated code and manage security across more repositories and workflows, keeping everything connected can become increasingly challenging. Scan configurations can drift over time, dependency risk can change between scans, and security activities often span multiple tools and environments. The latest Black Duck Polaris™ Platform release helps bring AI-powered analysis, scan governance, […] The post Polaris release update: Bringing AI security findings, scan g
endorlabs-sdk v0.7.2
npm Package Vulnerabilities: How to Find and Fix Them Before They Ship
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident. The post npm Package Vulnerabilities: How to Find and Fix Them Before They Ship appeared first on Xygeni AI-Powered AppSec Platform.
container_iac_secrets_scanning Add policy parameter to IAC
megalinter v10.1.0
Every Release Needs a Chain of Custody. AI Agents Just Made That Harder.
When an auditor asks what went into your last release, most teams do the same thing. They open four tabs: GitHub for commits Jira for tickets A Slack thread for the approvals A spreadsheet to track what made it to production (built two sprints ago) None of it connects. None of it is bound to …
terraform-provider-xray v3.1.13
Wiz Penetration Test Findings is now GA
Transform point-in-time pen-tests into continuous exposure management with unified platform combining pen-test findings and real-time cloud context
Polaris release update: Two-way bug tracker sync, AI-assisted fixes, scanning you can govern
Most AppSec friction is administrative. A vulnerability gets fixed, but the ticket stays open. A triage decision made in Jira never reaches Polaris. Code on an internal server can’t be scanned without a firewall exception. Three repositories scan against a config file nobody has updated in a year. The latest Black Duck Polaris™ Platform release […] The post Polaris release update: Two-way bug tracker sync, AI-assisted fixes, scanning you can govern appeared first on Black Duck.
megalinter v10.0.0
megalinter latest
TrustCoreSDK v9.1.0
terraform-provider-xray v3.1.12
Stop The Sprawl Snyk Secrets Now Generally Available
Snyk Secrets is now generally available, bringing contextual ML detection, secure-at-commit prevention, and unified secrets governance to the Snyk AI Security Platform.
Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan
Malicious beta versions of the Joyfill npm packages @joyfill/components and @joyfill/layouts hide an obfuscated remote access trojan and credential stealer. Full analysis, IOCs, and remediation from StepSecurity.
The Wiz Red Agent is Now Generally Available
Continuously uncover complex, exploitable risks to stay ahead in the AI Threat Era with the Red Agent
Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners
Harden-Runner v2.20.0 extends egress block mode to macOS and Windows GitHub-hosted runners, so you can stop secret exfiltration on every OS your pipelines run on, not just observe it.
user-docs pre-docs-removal-2026-07-14
Polaris release update: Smarter risk scoring, AI-assisted triage, and complete container coverage
Every security team is dealing with the same pressures: vulnerabilities arriving faster than teams can triage them, a growing catalog of confirmed active exploits, and development pipelines that can’t afford to slow down. The latest Black Duck Polaris™ Platform release addresses these issues directly, equipping teams with the intelligence to cut through the noise, the automation to […] The post Polaris release update: Smarter risk scoring, AI-assisted triage, and complete c