Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
1,191 matching stories — in Vulnerability Management — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Our first engineering post covered prompt caching, the infrastructure change that made long-running agentic tasks economically viable. That post assumed a multi-step, multi-agent system already existed. It did not exist on day one. When we started building Neo, the product was a single agent with a sandbox and a large toolset. Today, a typical task runs through optional planning, an Execution agent that delegates to parallel specialized subagents, and a verification loop that can re-run w
In today’s rapidly evolving technology and threat landscape, responsible transparency should be a cornerstone of any product security program. As part of our ongoing product security program, we continually assess, investigate, and address vulnerabilities. When an issue is found, we communicate relevant information as quickly and responsibly as possible. To this end, we are issuing an important security update addressing vulnerabilities in Ivanti Neurons for ITSM (cloud and on-premises). Custome
In our previous post, we showed how general-purpose AI coding assistants produce vulnerability patches that compile, pass tests, and still break production. The data was clear: a persistent ~20% defect rate across compatibility, correctness, and precision – not because the models can’t code, but because they skip the critical step of understanding the APIs deltas. […] The post Your AI Patches Still Break Production? The Fix Isn’t a Better Model, It’s a Better Workflow. appeared
À l’heure où les applications web, API et services en ligne sont devenus des actifs critiques pour les organisations, la protection des environnements exposés sur Internet représente un enjeu majeur. Les entreprises doivent aujourd’hui faire face à des menaces toujours plus sophistiquées : attaques DDoS, exploitation de vulnérabilités Zero-Day, compromission d’API ou encore automatisation [...]
From documentation compliance to operational observability — navigating the RBI audit lifecycle for scheduled commercial banks, urban co-operative banks, and payment infrastructure operators. The RBI’s supervisory approach has undergone a quiet but fundamental rewrite. Where once a well-documented policy library sufficed, inspectors now test for continuously observable control effectiveness. Multiple audit practitioners report that a... The post RBI Audit for Banks: Complete Cybersecurity,
Historically, Patchstack has aimed to keep its bug bounty program focused on vulnerabilities with a clear and meaningful security impact. The goal has always been to reward research that helps protect the wider WordPress ecosystem, while keeping the program practical to triage and maintain. This approach continued after Patchstack became a CNA. In many cases, […]
GPS trackers for kids are growing in popularity because they help parents track their kids’ whereabouts and increase their safety. But how do GPS trackers for kids work, what types are there, and what should parents look out for when buying one? Read on to learn all you need to know about GPS trackers for
Security teams are drowning in vulnerabilities. We’re talking tens of thousands of findings per quarter. Hundreds of thousands at larger organizations. Today's IT environments have no boundaries and span across every OS platform. Managing and securing that estate in a linear fashion is no longer viable, and neither is a vulnerability remediation process that treats every fix as a simple, low-impact task. Risk-based prioritization helps cut through that noise by introducing threat context and bus
AI agents are not chatbots with extra features. They perceive, reason, and act on real systems with real credentials. Before you can secure them, you need to know what you are dealing with: who controls the runtime, where it executes, and what it can reach.
Faraday participated in Ekoparty Miami 2026, joining the cybersecurity community to share technical research on AI, offensive security, automated reverse engineering and continuous security automation. The event brought together experts, researchers and security teams exploring the next stage of cybersecurity. The post Ekoparty Miami 2026: AI, Offensive Security and the Next Stage of Cybersecurity appeared first on Faraday.
Tuesday, June 2: New York, NY Register, Thursday, July 9: Toronto, Canada Register, Thursday, Sept 17: Chicago, IL Register,
AUTOCRYPT, a leading automotive and AI cybersecurity solutions provider, announced that its V2X Public Key Infrastructure (PKI) service (Link) has officially obtained WebTrust certification through an independent third-party audit, confirming that the company meets globally recognized standards for PKI operations, security controls, certificate issuance, and lifecycle management. Supporting V2X PKI and SCMS deployments across multiple […]
BackgroundThe Verizon Data Breach Investigations Report, widely known as the DBIR, is one of the most respected annual reports in the cybersecurity industry. Published by Verizon, the report analyzes real-world security incidents and confirmed data breaches to identify attack vectors, threat actors, and defensive measures. Since its first edition in 2008, the DBIR has become […] The post Key Takeaways of the DBIR 2026 for SAP Solutions appeared first on Layer Seven Security.
Network edge equipment is physical or virtual equipment including firewalls at the edge, VPN gateways, enterprise edge routers, and Internet boxes. How should you respond if you suspect that this equipment has been compromised, or if the compromise is proven? The response sheets from InterCERT France (FR) summarize the steps involved in assessing and containing the incident. The incident must […]>
Wednesday, June 17: Atlanta, GA Register, Wednesday, September 16: Baltimore, MD Register, Wednesday, November 18: Orlando, FL Register
Le premier semestre 2026 confirme une mutation profonde de l'écosystème cybercriminel. Les campagnes observées ne reposent plus sur des prouesses techniques isolées, mais sur une industrialisation des processus, une segmentation accrue des rôles et une réutilisation systématique d'outils éprouvés. Pour les responsables de la sécurité, cette évolution impose une révision des modèles de détection [...]
Chez ITrust, nous considérons que la cybersécurité moderne repose sur une approche globale associant technologies avancées, expertise opérationnelle et partenaires de confiance. Face à l’évolution constante des menaces, il est essentiel de s’appuyer sur des solutions capables d’assurer à la fois prévention, détection et réponse aux incidents. C’est dans cette dynamique que s’inscrit notre [...]
Certification reinforces Deepwatch’s commitment to responsible AI innovation, enterprise-grade governance, and transparent AI-powered security operations PALO ALTO, CA — MAY 21, 2026 —  Deepwatch today announced it has achieved ISO/IEC 42001:2023 certification, the international standard for artificial intelligence management systems (AIMS). The certification validates the company’s disciplined approach to developing, deploying, and managing its NEXA… Continue reading Deepwatch Achiev
Most AI security tooling shipped over the last year focuses on one of two workflows, code review at PR time or zero-day research in open-source software. Models in PR pipelines now flag insecure patterns at every commit and autonomous research runs have produced more zero-days across open-source projects than the patch teams behind them can realistically triage. We've been running Neo on both of those workflows at ProjectDiscovery for a while now, surfacing zero-days in production software and t
We explore where AI fits in the defender's toolkit, how it's closing the gap between scanning and pentesting, and what the future of pentesting looks like.
The threats facing critical infrastructures are numerous and sophisticated: from espionage and data theft, to attacks aimed at disrupting essential services. Artificial intelligence also makes these attacks accessible to less advanced actors and facilitates the processing of data collected through theft or espionage operations. How can you detect and respond to threats targeting the workspace […]>
In my twenty years in information security, I’ve witnessed the rise and fall of countless technologies. I’ve seen “silver bullets”... The post The Ghost in the Machine: What 20 Years in Infosec Taught Me About AI Agent Security appeared first on NopSec.
The IT service management (ITSM) industry stands at a real inflection point. For decades, service desks have operated on a fundamentally reactive model — employees face problems, submit tickets and wait for human analysts to diagnose, triage and resolve their issues. Automation improved throughput within that model, but it never challenged the model itself. The inflection point: why ITSM will never be the same Agentic AI changes the equation entirely. Rather than simply accelerating the speed at
Titania CTO Andrew Woodford is intrigued to see what Anthropic’s Mythos AI uncovers next… but it won’t be the answers to how to protect networks.
SHub Reaper bypasses Apple's Terminal mitigation, steals credentials and documents, and plants a persistent backdoor for continued access after infection.
Introduction What happens when two enterprises discover the same critical vulnerability at the same time? One remediates it in a few hours. The other is still assessing it weeks later. How do they deal with it when an attacker finds it first? The gap between them is not the tools; it is the speed of risk reduction. After all, for years, enterprise vulnerability management has been measured by coverage: how many systems are […]
CVE-2021-26855 — the original ProxyLogon — sits in most external pen test scopes as a check-the-box concern. The scanner has... The post Validating Exploit Paths, Not Cataloging Vulnerabilities appeared first on NopSec.
The Canvas Breach Is a Third-Party Risk Story. Treat It Like One. The Instructure Canvas breach that unfolded across the last two weeks of April and the first two weeks of May 2026 is not just a cybersecurity incident affecting one vendor. For higher education institutions, it is a case study in exactly what happens when […] The post Instructure Canvas Breach: What Happened, What It Means for Your Vendor Risk Program appeared first on Consolidated Cyber Risk Management Platform | FortifyDa
The SAP security advisories for May 2026 address several high-impact vulnerabilities, including a targeted software supply-chain attack, a “Hot News” SQL injection in S/4HANA, a missing authentication check in Commerce Cloud, and a high-risk OS command injection. Organizations should treat these notes as urgent and prioritize remediation to mitigate significant risks. Executive Summary SAP’s security […] The post SAP Security Notes May 2026: Supply-Chain Attack and Critic
Two releases shipped this cycle - v10.4.2 (April 15) and v10.4.3 (May 5) - delivering deep KEV coverage, a major push into AI/LLM attack surface, fresh Perforce visibility, and broad quality improvements across the template library. 🚀 April Stats Release New Templates CVEs Added First-time Contributors v10.4.2 121 61 15 v10.4.3 105 62 12 Total 226 123 27 * 226 new templates shipped across both releases * 123 CVEs covered, including ~10 actively exploited vulnerabilities
Without continuous network monitoring, changes to your attack surface go unnoticed. Learn what it is, how it works, and how it keeps your external exposure under control.
