Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
768 matching stories — in WAF / DDoS / App Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
[tl;dr sec] #346 - Can AI Do Novel Security Research?, Anthropic's Threat Intel Report, How Cloudflare Enforces Engineering Standards
Portswigger's James Kettle's HTTP Terminator, pretty crazy report about how threat actors were abusing Claude, how Cloudflare enforces code quality at scale
You Don’t Need a Locksmith: Preparing for the Root Zone Key-Signing Key (KSK) Rollover in October 2026
Introduction If your outbound recursive DNS infrastructure is performing DNS Security Extensions (DNSSEC) validation (and if it isn’t, it probably should be), then you need to be aware of the upcoming rollover of the DNSSEC key-signing key (KSK) for the root zone on October 11, 2026. If this is new information to you, then you […] The post You Don’t Need a Locksmith: Preparing for the Root Zone Key-Signing Key (KSK) Rollover in October 2026 appeared first on Infoblox Blog.
Why Autonomous Endpoint Management Depends on Trusted Data
Why Autonomous Endpoint Management Depends on Trusted Data Back to Basics: AEM Fundamentals | Part 1 of 5 The market is rushing toward autonomous endpoint management. But most of the conversation skips past the infrastructure and jumps straight to the outcomes. The market is loud, the promises are bold, and the buyers who got burned before are now the ones asking the hardest questions. They don't need another feature list. They need to know what's actually underneath the claims. IT teams have he
Cisco drops another exploited zero-day, this time a perfect 10
ISE authentication bypass under active attack just days after another Cisco zero-day sent admins scrambling to patch
API Gateway Security: Risks, Best Practices and How WAAP Closes the Gaps
Key Takeaways API gateway security is the set of controls, mainly authentication, authorization, and rate limiting, that a gateway applies […] The post API Gateway Security: Risks, Best Practices and How WAAP Closes the Gaps appeared first on .
Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard
The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution. The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek.
Unifying Client-Side Protection in Akamai Application Protection Platform
Weekly Threat Report September 9–16, 2026: GitLab API File Read, Cisco ISE Bypass, WSO2 JWT Forgery & Issabel PBX RCE
Reporting Convention New this week refers to vulnerabilities, exploits, or incidents disclosed between September 9–16. Active-exploitation update signifies an older […] The post Weekly Threat Report September 9–16, 2026: GitLab API File Read, Cisco ISE Bypass, WSO2 JWT Forgery & Issabel PBX RCE appeared first on .
How to Evaluate DDoS Testing and Validation: Building the Vendor Scorecard
How to evaluate DDoS validation: eight scorecard criteria covering evidence currency, independence, attack surface coverage, and AI readiness. The post How to Evaluate DDoS Testing and Validation: Building the Vendor Scorecard appeared first on MazeBolt.
The Attack Surface Is Growing. Here’s What the AI Security Threat Report Reveals
Two decades ago, security meant building a wall. Today, the wall is gone. Every AI feature ships as an API. […] The post The Attack Surface Is Growing. Here’s What the AI Security Threat Report Reveals appeared first on .
How Content Scarcity Creates Bugs in LLM-Generated Code
Large language models are now a core part of the software development lifecycle. The 2025 Stack Overflow Developer Survey found that 82% of developers used OpenAI’s GPT models in their work last year, and Google has reported that AI now writes over 25% of new code committed at the company. All of that rests on ... Read more
Building Metered Streams with MPP and Fastly Compute
Learn how to build an MPP streaming demo on Fastly Compute comparing Stripe Shared Payment Tokens and native Tempo payment sessions for pay-as-you-go agent APIs.
Preventing Automated Security Decisions from Impacting Critical Events
Learn how Fastly DDoS Protection's new Challenge action prevents false positives and keeps legitimate traffic flowing during critical events.
Oracle Corporation security advisory (AV26-929)
It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?
It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation. As many leaders in the global finan
Oracle’s September patches put Fusion Middleware back in the hot seat
Oracle’s September 2026 Critical Security Patch Update has arrived with 673 new security patches spanning 17 Oracle product families, with Oracle E-Business Suite accounting for the largest share at 159 patches, followed by Fusion Middleware with 153. Of these, 19 E-Business Suite vulnerabilities and 78 Fusion Middleware vulnerabilities can be remotely exploited without authentication. Other product categories with 50 or more issues fixed in the rollout include Oracle Database Server, Oracle Com
Oracle Critical Security Patch Update, September 2026 Review
Oracle released its September edition of Critical Security Patch Update. The update received patches for 673 security vulnerabilities. Some of the vulnerabilities addressed in this update impact more than one product. These patches address vulnerabilities in various product families, including third-party components in Oracle products.  Out of the 673 security updates published, a total of 104 […]
Beyond the “Pacing the Frontier” Debate: What Can Organizations Do Today
On September 12, Dario Amodei, Anthropic’s CEO, published an essay titled We Must Pace the Frontier. In this essay, he urges that “We must slow the pace at which we improve the capabilities of AI models.” OpenAI CEO Sam Altman and xAI CEO Elon Musk quickly tweeted their agreements. The call for AI development to […] The post Beyond the “Pacing the Frontier” Debate: What Can Organizations Do Today appeared first on Infoblox Blog.
NETSCOUT Earns 14 Leader Badges in the G2 Fall 2026 Grid Reports
NETSCOUT solutions continue to receive praise from real customers in G2’s Grid Reports, earning 14 badges for the fall 2026 reporting period.
CVE-2026-20349: What the Cisco ASA/FTD DoS Flaw Means for WAAP
Guest post by Eran Atias Cisco confirmed in August 2026 that attackers are actively exploiting a firewall vulnerability that requires no authentication. A single crafted HTTP request sent to a Cisco Secure Firewall Adaptive Security Appliance (ASA) or Cisco Secure Firewall Threat Defense (FTD) device is enough to force it to restart, causing downtime that […]
Transform and route security logs to Microsoft Sentinel tables using Observability Pipelines
Learn how Observability Pipelines Packs map security logs to Microsoft Sentinel schemas and help control downstream ingest volume.
From alert to resolution: Manage incidents with Bits Chat in Slack
Use Bits Chat in Slack to investigate incidents, collaborate with responders, make code fixes, and capture follow-up work where your team communicates.
What is Style Smuggler (CVE-2026-75650)?
CVE-2026-75650 (StyleSmuggler) is a critical SSTI being actively exploited in ecommerce platforms. Learn what it is and how Fastly customers can stay protected.
Low-quality casino sites conceal highly dangerous threat actors
Security firm Infoblox shines light on malicious infrastructure lurking beneath illegal gambling sites
Advancing Ivanti’s Commitment to Modern, Cloud-Connected Cybersecurity in Europe
Across Europe, organizations are navigating a rapidly changing cybersecurity and regulatory landscape. Customers are seeking solutions that help them strengthen resilience, simplify operations and meet evolving compliance expectations while supporting the flexibility and scale modern enterprises require. At Ivanti, this shift is shaping how we prioritize investment, innovation and certification efforts. As part of that ongoing strategy, Ivanti has made the decision to withdraw Ivanti Endpo
AI-Ready Network Intelligence Takes Center Stage in Atlanta
NETSCOUT will showcase Omnis AI Insights at SCTE TechExpo26, demonstrating how packet-derived Smart Data helps cable operators improve AI-readiness, automation, subscriber experience, cybersecurity, and service innovation.
Akamai Recognized as a Strong Performer in 2026 Gartner Peer Insights™ for Secure Enterprise Browsers
Corero Network Security Named Best in Channel-First Cybersecurity Distribution at CybersecAsia Readers’ Choice Awards 2026
Recognition Reflects Corero’s Channel-First Strategy and Growing Partner Ecosystem London, UK – September 15, 2026 – Corero Network Security (AIM: CNS) (OTCQX: DDoSF), the distributed denial of service (“DDoS”) protection specialists and champion of adaptive, real-time service availability, today announced it has been named Best in Channel-First Cybersecurity Distribution at the CybersecAsia Readers’ Choice Awards 2026. The [...] Read More... from Corero Network Security Named Best i
Chaining Vulnerabilities into Attack Vectors with Autonomous Pentesting
Your vulnerability report is sorted by severity. The adversary looking at the same environment is sorted by path. That mismatch is the whole problem. Open any scanner output, and you get a tidy hierarchy: criticals at the top, then highs, then a long tail of mediums and lows that most teams will never touch. To ... Read more
DDoS Testing: The Three Models and How to Evaluate Them
DDoS testing explained: the three models, how much of your attack surface each one covers, and five criteria for evaluating a DDoS testing vendor. The post DDoS Testing: The Three Models and How to Evaluate Them appeared first on MazeBolt.
Manage Cursor costs with Datadog Cloud Cost Management
Analyze Cursor spend by user and model, catch unexpected cost changes, and manage AI coding costs alongside your cloud and SaaS spend.
The Evolution of AI Red Teaming: Lessons from the Front Lines
AI red teaming has evolved. This blog post explores agentic risks, adversarial threats, and how enterprises can secure AI systems across the full stack. As AI systems move from experimental tools to operational infrastructure, the nature of risk has changed dramatically. What was once a question of model accuracy is now a broader challenge of system integrity, adversarial resilience, and real-world impact. In a recent discussion, Lee Weiner sat down with AI red teaming experts John Vaina and Gav
AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of
Here's the uncomfortable part first: in August 2026, researchers found AI agents connected to Hugging Face running loose inside enterprise networks. No owner, no audit trail, nobody who could tell you they existed until something broke. If that sentence made your stomach drop a little, good, because it should. It's the same blind spot most [...] The post AI Agent Security Readiness: The Federal Standard You Should Get Ahead Of appeared first on Wallarm.
What DDoS Attacks Were Reported in August 2026? Timeline, Targets, and Security Lessons
A timeline of the DDoS attacks reported in August 2026, from Norway's ID-porten to Bluesky and Threema, and what each outage revealed about defense gaps. The post What DDoS Attacks Were Reported in August 2026? Timeline, Targets, and Security Lessons appeared first on MazeBolt.
CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
The CAPTCHA Is Dead. Don’t Mourn It. It’s Time To Move On.
On September 7, an OpenAI engineer posted a screen recording of GPT-6 Astra playing “I’m Not a Robot,” a browser game built from 48 CAPTCHA-style The post The CAPTCHA Is Dead. Don’t Mourn It. It’s Time To Move On. first appeared on CHEQ.
A Gaming Company Nearly Fired Its Carrier. The DDoS Box Wasn't Enough.
A DDoS box is an asset. DDoS protection is an operating capability. A strong product still becomes a weak service when nobody owns the outcome.
AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768
Quantum computers could very soon undermine the public-key cryptography that secures financial transactions, health records, and other sensitive data moving over TLS today. When that happens, encrypted information protected by. The post AppTrana Adds Post-Quantum Cryptography Support with X25519MLKEM768 appeared first on Indusface.
AI Crawlers and Agentic Bots: New Traffic Types Security Teams Need to Manage
AI crawlers that collect web content are increasing, while AI agents are beginning to go beyond reading information and interact with websites on behalf of users. As a result, the distinction between different bot roles is becoming less clear. For security teams, the task is no longer limited to detecting and blocking bots. They also […] The post AI Crawlers and Agentic Bots: New Traffic Types Security Teams Need to Manage first appeared on Cloudbric.