Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
768 matching stories — in WAF / DDoS / App Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
A Fortune 100 retailer found a subdomain they’d forgotten they owned. It wasn’t just exposed. It had already been taken over by an attacker. And their existing attack surface tool had never surfaced it. That story stuck with me because I hear a version of it constantly. Security teams start with alerts or known vulnerabilities. […] The post Seeing What Attackers See: External Attack Surface Management Changes the Exposure Game appeared first on Infoblox Blog.
Global channel leader recognized for driving partner-led innovation, cyber resilience, and global ecosystem growth London, UK – July 28, 2026 – Corero Network Security (AIM: CNS) (OTCQX: DDoSF), leader in real-time DDoS protection and service availability today announced that CRN®, a brand of The Channel Company, has named that Michelle Ragusa-McBain, Global VP of Channels & Alliances, to its prestigious 2026 Top 100 Executives [...] Read More... from Michelle Ragusa-McBain Of Corero Network
Key Takeaways: If there’s one thing all of us can agree about modern security, it is that penetration testing is no longer a once-a-year activity. Modern attack surfaces do not stay still. New code ships faster, cloud infrastructure is constantly changing, and APIs are multiplying across product ecosystems. To keep up, engineering teams have moved ... Read more
Overview In July 2026, the AI open source community and collaboration platform Hugging Face publicly disclosed a special security incident: the platform’s production infrastructure suffered an intrusion activity. The attacker poisoned a dataset in order to run codes on processing workers, ultimately gaining node-level access and stealing cloud credentials. It is worth noting that the […] The post AI Security Incident Case: OpenAI Models Independently Break Through Test Boundaries and
In 2023, when OWASP introduced the Top 10 for LLM Applications, it was exactly what the industry needed. Suddenly we had a common language for AI risk. Prompt injection Sensitive information disclosure Insecure output handling Training data poisoning Overreliance on model output These weren’t abstract fears anymore — they were categorized, named, and made actionable. At the time, most “AI applications” were exactly that: applications wrapped around a large language model. These included a chat i
Learn how Datadog built Mambark, a small state-space model that scores every security event and enables heavier AI agents to investigate only the events that matter.
In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is [...] The post Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender appeared first on Wallarm.
The Week in One Line This weekly cyber threat report covers July 20-27, 2026 a week that brought an actively […] The post Weekly Cyber Threat Report (July 20–27, 2026): NGINX RCE, SonicWall Zero-Days & the 160M-Record Decathlon Claim appeared first on .
Your employees aren't trying to create compliance incidents by using AI tools. They're trying to finish their work faster. According to a 2026 BCG survey, 74% of frontline employees now use generative AI every day or a few times a week. When an employee uses an enterprise AI assistant to summarize a customer contract before a meeting, another pastes application logs into a public generative AI tool to troubleshoot an issue, or a developer relies on an AI coding assistant connected to an internal
An actively exploited SharePoint zero-day, Copilot command injection, and Entra SSRF top Microsoft's July 2026 advisory. Get the full breakdown The post Copilot RCE, Entra SSRF, and SharePoint Zero-Day: Critical Vulnerabilities in Microsoft’s July 2026 Advisory appeared first on Indusface.
Learn how Observability Pipelines normalizes your telemetry to Google SecOps UDM, enabling both consistent investigations across sources and precise upstream control over your SIEM ingest.
Protect APIs and agentic traffic at the edge. Explore a practical guide to enforcing x402 HTTP payment challenges using Fastly Compute and testnet stablecoins.
Key Takeaways Credentialed scanning (also called authenticated vulnerability scanning) is a vulnerability scan that logs into the target system with valid credentials and inspects it from the inside. Instead of poking at open ports and guessing versions from banners, a credentialed vulnerability scan reads the installed package list, patch level, registry keys, and configuration files ... Read more
Key Takeaways: Most cloud breaches begin with a configuration error the customer made. Gartner projected that through 2025, 99% of cloud security failures would be the customer’s responsibility, caused by misconfigured identity and access management, exposed storage, and over-permissioned services.  Cloud penetration testing is the simulation of real-world attacks against cloud infrastructure on AWS, Azure, ... Read more
Network telemetry is actually business revenue telemetry. Every packet and digital interaction shapes the customer experience, which directly influences retention and customer lifetime value.
Between April and June 2026, Prophaze blocked 16.4 million attacks across 2.33 billion requests spanning 581 domains in 11 industries. […] The post What the Q2 2026 Threat Analysis Report Reveals About What’s Coming and What’s Already Here appeared first on .
Critical unauthenticated RCE vulnerability CVE-2026-6875 hits ServiceNow via a GlideRecord sandbox escape. Attackers are already exploiting unpatched instances. The post CVE-2026-6875: ServiceNow Sandbox Escape Leads to Pre-Auth RCE in AI Platform appeared first on Indusface.
Agencies now have a FedRAMP Moderate SaaS path to modernize DNS, DHCP and IP address management while improving asset visibility. Infoblox Government Cloud Receives FedRAMP Moderate Certification Federal and broader public-sector IT teams are under pressure to modernize critical network services while adhering to a growing list of executive orders, mandates and standards. Often, a […] The post Infoblox Universal DDI™ Comes to Infoblox Government Cloud appeared first on Infoblox Blog.
Genie Networks will be a Silver Sponsor at SANOG 44, taking place in Kathmandu, Nepal from July 26–28. As one of South Asia’s premier gatherings for the Internet operations community, SANOG brings together network operators, ISPs, researchers, and technology leaders for technical sessions, workshops, and collaboration on the latest developments in Internet infrastructure. Visit Genie’s […] The post Meet Genie at SANOG-44 in Nepal first appeared on Genie Networks.
Layer 7 DDoS attacks surged 104% over two years, with API attacks rising 113% year over year. Yet most organizations are still protected primarily at L3/L4 firewalls and volumetric scrubbing that don’t touch the application layer at all. The gap isn’t simply a question of tooling. CDNs and WAFs are widely deployed, but across Red […]
Alliance members will validate architectural requirements for the AI SOC across Context, Harness, and Model, anchored by discoverable, semantically rich context every agent can query and reason on, so enterprises can adopt autonomous, machine-speed defense
A new WordPress core exploit chain, now widely tracked as wp2shell, is being actively used against internet-facing WordPress sites. It […] The post wp2shell: Inside the WordPress Unauthenticated RCE Chain (CVE-2026-63030/CVE-2026-60137) appeared first on .
With telecom providers facing rising AI-driven fraud, the expanding data and attack surfaces require integrated, AI-powered, automated detection; real-time responses; and unified visibility to protect an evolving infrastructure.
Genie Networks has recently been named a winner for the Best AI-Powered Network Observability Solution at the Global Tech Insider Awards 2026, recognizing the company’s achievement and innovation in AI-powered network traffic analytics and cybersecurity for service provider networks. The Global Tech Insider Awards recognize organizations that demonstrate excellence in technology innovation and industry impact […] The post Genie Crowned Winner of Global Tech Insider Award 2026 first a
2026 US midterm threats expose the DDoS validation gap. See what BFSI CISOs can learn about continuously testing live defenses before disruption. The post DDoS Risk and the 2026 US Midterms: Why the Attack Surface Extends Beyond .gov appeared first on MazeBolt.
Most DDoS protection failures aren’t caused by a missing product. They’re caused by a product that’s already deployed but misconfigured. In our testing experience, the gap between “protection is deployed” and “protection works effectively” almost always goes back to configuration – not architecture, and many times, not even the vendor selection. And misconfigurations don’t fail […]
How do you stream the World Cup to estimated 1.8B fans? Explore Fastly’s traffic insights, extra-time viewer surges, and real-time anti-piracy strategies.
Looking for account takeover prevention methods? Discover the steps to preventing all levels of ATO fraud, how to detect attacks, & how to mitigate risks.
WP2Shell chains CVE-2026-60137 and CVE-2026-63030 for unauthenticated RCE on WordPress Core. Patch to 6.8.6, 6.9.5, or 7.0.2 now, PoCs are already public. The post WP2Shell: WordPress Core SQLi + REST API Chain to Pre-Auth RCE appeared first on Indusface.
Key takeaways Most enterprise DDoS protection was sized for a threat environment that no longer exists. Precision L7 attacks produce no volumetric signal; they’re invisible to detection logic tuned for bandwidth and packet rate. APIs are the most consistently unprotected surface, with misconfigured or absent rate-limit rules, incomplete WAF coverage, and endpoints outside CDN scope. […]
Cybersecurity is shifting from prevention to resilience as AI-driven, machine-speed attacks outpace traditional defenses, requiring visibility, automation, and intelligence to ensure continuity, rapid response, and business stability.
Ivanti releases standard security patches on the second Tuesday of every month. In today’s rapidly evolving technology and threat landscape, we believe responsible transparency should be a cornerstone of any product security program. AI is compressing the time-to-exploit, and Ivanti uses leading technologies to proactively find and fix issues ––including integrating advanced LLMs into our Engineering and product security to enhance the capabilities of our teams. Our philosophy is simple: discove
CISOs: AI-powered DDoS attacks are outpacing defenses. See what your current validation may be missing in MazeBolt’s latest report. The post MazeBolt’s Take on Akamai’s DDoS Report appeared first on MazeBolt.
Apple Declarative Device Management (DDM) is now the standard for device management across Apple platforms. As part of this transition, Apple is retiring legacy software update controls in iOS 27, iPadOS 27, macOS Golden Gate, watchOS 27, visionOS 27, tvOS 27 and later releases. This is just one of several platform changes arriving this fall that could impact how your team manages and secures Apple devices. The good news? Ivanti has supported Declarative Device Management for more than a year, g
Key Takeaways The agentic web is the phase of the internet where autonomous AI agents browse, research, and act on websites alongside humans, not just... The post What Is the Agentic Web? AI Agents and the New Internet first appeared on CHEQ.
June 2026 DDoS attacks hit public safety, exams, VPNs, and betting platforms. See the timeline, targets, and key security lessons. The post What DDoS Attacks Were Reported in June 2026? Timeline, Targets, and Security Lessons appeared first on MazeBolt.
