Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

712 matching stories — announcement, in WAF / DDoS / App Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Beyond the “Pacing the Frontier” Debate: What Can Organizations Do Today

On September 12, Dario Amodei, Anthropic’s CEO, published an essay titled We Must Pace the Frontier. In this essay, he urges that “We must slow the pace at which we improve the capabilities of AI models.” OpenAI CEO Sam Altman and xAI CEO Elon Musk quickly tweeted their agreements. The call for AI development to […] The post Beyond the “Pacing the Frontier” Debate: What Can Organizations Do Today appeared first on Infoblox Blog.

Announcement

CVE-2026-20349: What the Cisco ASA/FTD DoS Flaw Means for WAAP

Guest post by Eran Atias Cisco confirmed in August 2026 that attackers are actively exploiting a firewall vulnerability that requires no authentication. A single crafted HTTP request sent to a Cisco Secure Firewall Adaptive Security Appliance (ASA) or Cisco Secure Firewall Threat Defense (FTD) device is enough to force it to restart, causing downtime that […]

Announcement

What is Style Smuggler (CVE-2026-75650)?

CVE-2026-75650 (StyleSmuggler) is a critical SSTI being actively exploited in ecommerce platforms. Learn what it is and how Fastly customers can stay protected.

Announcement

Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

Oracle addresses 672 CVEs in its September 2026 Critical Security Patch Update with 673 patches, including 104 critical updates.Key TakeawaysThe September 2026 Critical Security Patch Update (CSPU) contains fixes for 672 unique CVEs in 673 security updates104 issues (15.5% of all patches) were assigned a critical severity ratingOracle E-Business Suite received the highest number of patches at 159, accounting for 23.6% of all patchesBackgroundOn September 15, Oracle released its Critical Security

Announcement

Critical Cisco Secure Email Gateway zero-day gives attackers root access

Cisco released emergency patches for a critical vulnerability in its Secure Email Gateway appliance that could allow attackers to take over the device by simply sending malicious crafted emails to users. The flaw was already being exploited in the wild when the fixes were released. Tracked as CVE-2026-76461, the vulnerability is described by Cisco as an SQL injection caused by insufficient validation in the product’s email parsing code. Parsing incoming email messages for threats is this applian

Announcement

How Money Laundering, Scams, and Espionage Hide in a Web Full of Casino Garbage

Why Should Anyone Care About Casino Websites? Many security teams ignore online gambling and casino domains, especially Chinese-language websites. Over the last decade there’s been massive growth in both gambling websites catering to Chinese audiences and similar casino sites targeting people all over the world. There’s also been growth in legal gambling and casino websites, […] The post How Money Laundering, Scams, and Espionage Hide in a Web Full of Casino Garbage appeared first on Infob

Announcement

Advancing Ivanti’s Commitment to Modern, Cloud-Connected Cybersecurity in Europe

Across Europe, organizations are navigating a rapidly changing cybersecurity and regulatory landscape. Customers are seeking solutions that help them strengthen resilience, simplify operations and meet evolving compliance expectations while supporting the flexibility and scale modern enterprises require.  At Ivanti, this shift is shaping how we prioritize investment, innovation and certification efforts. As part of that ongoing strategy, Ivanti has made the decision to withdraw Ivanti Endpo

Announcement

Corero Network Security Named Best in Channel-First Cybersecurity Distribution at CybersecAsia Readers’ Choice Awards 2026

Recognition Reflects Corero’s Channel-First Strategy and Growing Partner Ecosystem London, UK – September 15, 2026 – Corero Network Security (AIM: CNS) (OTCQX: DDoSF), the distributed denial of service (“DDoS”) protection specialists and champion of adaptive, real-time service availability, today announced it has been named Best in Channel-First Cybersecurity Distribution at the CybersecAsia Readers’ Choice Awards 2026. The [...] Read More... from Corero Network Security Named Best i

Announcement

Chaining Vulnerabilities into Attack Vectors with Autonomous Pentesting

Your vulnerability report is sorted by severity. The adversary looking at the same environment is sorted by path. That mismatch is the whole problem. Open any scanner output, and you get a tidy hierarchy: criticals at the top, then highs, then a long tail of mediums and lows that most teams will never touch. To ... Read more

Announcement

DDoS Testing: The Three Models and How to Evaluate Them

DDoS testing explained: the three models, how much of your attack surface each one covers, and five criteria for evaluating a DDoS testing vendor. The post DDoS Testing: The Three Models and How to Evaluate Them appeared first on MazeBolt.

Announcement

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-76461, carries a CVSS score of 9.8 out of a maximum of 10.0. It has been described as a case of insufficient validation in the email parsing logic that could allow an unauthenticated, remote attacker

Announcement

The Evolution of AI Red Teaming: Lessons from the Front Lines

AI red teaming has evolved. This blog post explores agentic risks, adversarial threats, and how enterprises can secure AI systems across the full stack. As AI systems move from experimental tools to operational infrastructure, the nature of risk has changed dramatically. What was once a question of model accuracy is now a broader challenge of system integrity, adversarial resilience, and real-world impact. In a recent discussion, Lee Weiner sat down with AI red teaming experts John Vaina and Gav

Announcement

AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of

Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good, because it should. It's the same blind spot most [...] The post AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of appeared first on Wallarm.

Announcement

The CAPTCHA Is Dead. Don’t Mourn It. It’s Time To Move On.

On September 7, an OpenAI engineer posted a screen recording of GPT-6 Astra playing “I’m Not a Robot,” a browser game built from 48 CAPTCHA-style The post The CAPTCHA Is Dead. Don’t Mourn It. It’s Time To Move On. first appeared on CHEQ.

Announcement

AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768

Quantum computers could very soon undermine the public-key cryptography that secures financial transactions, health records, and other sensitive data moving over TLS today. When that happens, encrypted information protected by. The post AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768 appeared first on Indusface.

Announcement

AI Crawlers and Agentic Bots: New Traffic Types Security Teams Need to Manage

AI crawlers that collect web content are increasing, while AI agents are beginning to go beyond reading information and interact with websites on behalf of users. As a result, the distinction between different bot roles is becoming less clear. For security teams, the task is no longer limited to detecting and blocking bots. They also […] The post AI Crawlers and Agentic Bots: New Traffic Types Security Teams Need to Manage first appeared on Cloudbric.

Announcement

Autonomous Pentesting to Vet Vendors at Scale in 2026

Somewhere in your vendor list, right now, there is a door you have never checked. You didn’t build it, you don’t hold the key, and yet if someone walks through it, the breach notification goes out on your letterhead.  The numbers too aren’t subtle. Verizon’s 2026 Data Breach Investigations Report found that 48% of breaches ... Read more

Announcement

How to Justify Paid DDoS Testing When You Have Never Been Attacked

To justify paid DDoS testing without a past outage, frame it as quality assurance on protection you have already bought – not as a second protection purchase. The business case rests on what a contract, a configuration, and a provider dashboard cannot show: whether every asset is routed through the mitigation path, and whether real […]

Announcement

How to Prove DDoS Defences to a Regulator

To prove DDoS defences to a regulator, show how they perform – not simply what was purchased or configured. Credible evidence connects each critical service to a documented risk, protection control, realistic test scenario, and measured outcome, then records any failure, its owner and remediation, and whether controlled retesting verified that the gap was closed. […]