Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
239 matching stories — release, in Vulnerability Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Faraday Release 5.24: Let Teams Run Their Own Workspaces, Without Global Admin Access
As security programs grow, more people need to create and manage their own work, and more time goes into everyday navigation. Faraday 5.24 tackles both. It brings a new role that lets non-admin users create and manage their own workspaces, weekly reports you can actually keep, a faster way to move around the platform, and […] The post Faraday Release 5.24: Let Teams Run Their Own Workspaces, Without Global Admin Access appeared first on Faraday.
connect v0.5.55
connect v0.5.54
connect v0.5.53
PatrowlHearsData 2026-10-20
From Finding to Fix: A Phoenix Release Built for Action
Phoenix Security's latest platform release tackles the three points where AI security tools break down: unverified findings, firewalls nobody can live with, and remediation that stops at a ticket. Grounded verification, real exception workflows, and PR-first remediation replace guesswork with proof, and tickets with merged code. The post From Finding to Fix: A Phoenix Release Built for Action appeared first on Phoenix Security.
metadefender-k8s metadefender_storage_security-4.6.1
PatrowlHearsData 2026-10-19
orca-cli 1.128.0
metasploit-framework 6.5.7
orca-cli 1.127.1
The Fix Is Ready. Let’s Find Who’s Going To Ship It.
A ticket assigned to a team is a ticket assigned to nobody. Backline now brings each remediation to the people who need to act on it, in Slack, Microsoft Teams and Jira, and stays in the conversation until the finding is gone. How many of your critical findings sit right now in a ticket owned […] The post The Fix Is Ready. Let’s Find Who’s Going To Ship It. appeared first on Backline.
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
October 2026 Patch Tuesday
What's happened since September Patch Tuesday Here’s a fun fact to start this month. Ivanti’s Vulnerability Knowledge Base is now tracking more than 406,000 CVEs. Over 78,000 of them were disclosed in 2026 alone, which is more than the roughly 70,000 CVEs released in 2015 and earlier, going back to 1999. CVE Disclosure: 2026 year to date has already exceeded the full 2025 total by 64% (as of October 12). (Source: Ivanti Vulnerability KB) Exploitation: 2026 year to date has exceeded the full 2025
Patch Tuesday - October 2026
Microsoft is publishing 1,413 own-product vulnerabilities on October 2026 Patch Tuesday, including 1,102 vulnerabilities in Windows. Anyone who enjoyed last month’s record-setting Patch Tuesday will love the October 2026 edition, because it’s much bigger still. As Rapid7 has noted over the course of 2026, there is every reason to suppose that vulnerability volumes will continue to rise. Microsoft is aware of exploitation in the wild for just one of the vulnerabilities published today, as well as
October 2026 Patch Tuesday Brief: What Sysadmins Should Patch First and Verify Next
October 2026 Patch Tuesday: CISO Executive Summary
This CISO-focused summary highlights the vulnerabilities and critical infrastructure risks that should take priority for remediation following Microsoft’s October 2026 Patch Tuesday release. The post October 2026 Patch Tuesday: CISO Executive Summary first appeared on Action1.
Patch Tuesday October 2026
In this issue: October 2026 Patch Tuesday updates from Microsoft, featuring zero-day vulnerabilities and critical security flaws. The post Patch Tuesday October 2026 first appeared on Action1.
The patch tsunami: Microsoft addresses 1,415 CVEs in Patch Tuesday
For nearly 25 years, Patch Tuesday gave IT teams a predictable stream of patches to manage. In 2026, AI turned that stream into a tidal wave that threatens to overwhelm the organizations that can’t adapt. The post The patch tsunami: Microsoft addresses 1,415 CVEs in Patch Tuesday appeared first on ThreatDown.
metadefender-k8s metadefender_storage_security-4.6.0
metadefender-k8s metadefender_software_supply_chain-4.1.0
nanitor-platforms nandev v0.2.0
orca-cli 1.127.0
metasploit-framework 6.5.6
SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released
SAP OVERPASS (CVE-2026-44756) remains an urgent patching priority for SAP solutions. As reported in our advisory earlier this month, the vulnerability affects the processing of SAP Extended Passport (EPP) data in shared SAP Kernel code. It can enable attackers to execute arbitrary operating system commands with SAP service account privileges by triggering memory corruption through […] The post SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released appeared fir
One Platform, Three Surfaces: Phoenix Ships a CLI and an MCP Server
Phoenix Security now ships two open-source clients — a full v1.27 CLI and a Model Context Protocol server — so security teams can query risk posture from the terminal or from Claude, Cursor, and ChatGPT. Same data, same risk math as the dashboard, now reachable from wherever the question gets asked. The post One Platform, Three Surfaces: Phoenix Ships a CLI and an MCP Server appeared first on Phoenix Security.
What we've shipped lately: September 2026
A roundup of the latest features and updates shipped to the Intruder platform, from AI pentest improvements and cross-domain scanning to new code repo integrations and smarter SQL
skills v0.4.1
Patch Tuesday to Pentest Wednesday: How an Equipment Rental Company Is Turning Continuous Testing Into Continuous Exposure Management
See how an equipment rental company moved beyond point-in-time pentesting with NodeZero®, continuously validating exploitable risk, driving remediation, and measuring whether exposure is actually decreasing.
September 2026 Patch Tuesday
What's happened since August Patch Tuesday It's been an active month between cycles. Since Microsoft's August 11 release, five Microsoft CVEs have been confirmed exploited in the wild, and Google shipped an emergency Chrome fix for a sixth 2026 zero-day. None of this is theoretical — all six are on CISA's Known Exploited Vulnerabilities catalog today, and two carry active nation-state attribution. Before we get into today's release, here's what defenders should already have handled — or should e
Your SBOM Is a Release Artifact. CRA and DORA Need It to Be a System of Record
CRA and DORA both treat the SBOM as evidence a regulator can demand on any given day. Most manufacturers have a file generated per build instead of a record they can query. Here's the identifier gap that breaks it, and the screens Phoenix built to close it. The post Your SBOM Is a Release Artifact. CRA and DORA Need It to Be a System of Record appeared first on Phoenix Security.