Investigate every security event with an AI agent, without the frontier bill
Learn how Datadog built Mambark, a small state-space model that scores every security event and enables heavier AI agents to investigate only the events that matter.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
210 matching stories — announcement, in Workload Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Vulnerability Alert: SQL Injection in Chaty Pro Plugin
The cybersecurity landscape constantly evolves, and vulnerabilities like CVE-2026-6251 require our attention. This particular vulnerability affects the Chaty Pro plugin for WordPress. Systems running versions 3.5.5 or earlier are susceptible to an authenticated SQL injection a...
SQL Injection Vulnerability in ShopLentor Plugin
The recent discovery of a vulnerability, CVE-2026-16811, in the ShopLentor plugin for WordPress has significant implications for server security. This SQL injection vulnerability affects all versions of the plugin up to and including 3.4.5. It allows authenticated attackers wi...
SQL Injection Vulnerability in SMS Alert Plugin
Recently, a vulnerability surfaced in the SMS Alert plugin for WordPress, versions 3.9.7 and below. This weakness allows authenticated users with administrator access to execute SQL injection attacks. The exploit targets the 'id' parameter due to insufficient input validation,...
NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline
For government contractors and MSPs that store, process, or transmit Controlled Unclassified Information (CUI), NIST SP 800-171 Rev. 3, published on May 14, 2024, provides a modern framework for strengthening security while preparing them for evolving federal cybersecurity requirements, including those that may be reflected in future CMMC and FedRAMP updates. Atomicorp delivers the endpoint […] The post NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline appeared first on Atomicorp --
Normalize security logs to Google SecOps UDM with Observability Pipelines
Learn how Observability Pipelines normalizes your telemetry to Google SecOps UDM, enabling both consistent investigations across sources and precise upstream control over your SIEM ingest.
Senteon Named a Finalist Among the World’s Most Innovative Cybersecurity Companies
We are proud to announce that Senteon has been named a finalist in Cyber Defense Magazine’s 2026 Top InfoSec Innovator Awards and its Top 25 Most Innovative Cybersecurity Companies in the World.
AI gateway best practices: Model routing, reliability, and budget controls for production agents
Learn how AI gateways help you scale your agents to consume multiple LLM services reliably, and how to monitor these systems to ensure you’re getting the best performance and cost.
Atomicorp Blocked wp2shell Exploit Before It Had a Name
CWE-first protection wins again. While the industry raced to publish emergency wp2shell detections, Atomicorp’s existing generic SQL injection and RCE protections were already positioned to stop the underlying attack behavior. wp2shell: The attack was new. The weakness was not. The wp2shell chain combines CVE-2026-63030, a WordPress REST batch-route interpretation conflict, with CVE-2026-60137, an SQL injection […] The post Atomicorp Blocked wp2shell Exploit Before It Had a Name appe
Stopping the Fairlife Playbook on ESXi
Reports indicate the attack that halted Fairlife’s US production targeted the Nutanix hypervisor, the one place in the technology stack with no runtime security. The same playbook works against VMware ESXi. Each attack stage maps to a ZeroLock control that prevents it. The post Stopping the Fairlife Playbook on ESXi appeared first on Vali Cyber.
Senteon Partners with Compliance Scorecard to Bridge the Gap Between Compliance and Continuous Security
Organizations today face an increasing number of cybersecurity frameworks, regulatory requirements, and customer security expectations. Whether it's CMMC, NIST 800-171, CIS Benchmarks, or another compliance framework, one challenge remains the same:
Integrate Aqua and ServiceNow to Prioritize Vulnerabilities by Runtime Reality
TL;DR Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will. The remediation timeline for production workloads is not shrinking fast enough to keep up with attacks that adapt at machine speed, so teams cannot afford to work the list in severity order and hope. …
Why Continuous Compliance Monitoring Matters More Than Ever
Continuous compliance monitoring provides the ongoing visibility organizations need as AI-accelerated attacks shorten the time between vulnerability discovery and exploitation. Atomicorp’s Atomic OSSEC EDR delivers continuous compliance monitoring and benchmarking across IT and OT environments through agent-based or agentless deployment on modern, legacy, and unsupported operating systems. Built-in antivirus, endpoint firewall, file integrity monitoring, vulnerability […] The post Wh
Pwn2Own Berlin 2026: Inside the ESXi VM Escape
The post Pwn2Own Berlin 2026: Inside the ESXi VM Escape appeared first on Vali Cyber.
ESX Hardening vs. Behavioral Enforcement
Complete your VCF security stack with runtime protection on the hypervisor—closing critical gaps and enforcing control where attacks converge. The post ESX Hardening vs. Behavioral Enforcement appeared first on Vali Cyber.
CMMC Phase 2 Requirements Are Paused But Self-Assessments and Cybersecurity Obligations Remain
The Department of War has announced the immediate suspension of CMMC Phase 2 requirements, which were originally scheduled to take effect on November 10, 2026.
5 Things Every Security Team Should Know About Mythos
Artificial intelligence is changing cybersecurity at an incredible pace. Every few months, a new breakthrough sparks discussions across the industry—but few have generated as much conversation recently as Mythos. Some headlines suggest it could revolutionize software security. Others warn it could become the next major weapon for cybercriminals.
Runtime Enforcement Is the Missing Layer in Agentic Security
Most security products stop at detection. They identify prompt injection, unusual API usage, suspicious MCP servers, or sensitive data leaving an organization, generate an alert, and hand the incident to a SIEM. That model works for traditional infrastructure because humans are still in the loop. Agentic systems are different. A single autonomous agent can execute hundreds of tool calls in seconds. It may invoke an MCP server, retrieve confidential documents through RAG, execute shell commands,
When Security Scans Break the Brain: Solving Trivy’s etcd Exhaustion Problem
This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …
How Do You Protect a Workload You Cannot Afford to Patch Right Now?
TL;DR Vulnerability management is collapsing under scale and the remediation timeline for production workloads is not going to shorten fast enough to keep pace with attacks that adapt at machine speed. Aqua vShield is a patented runtime capability that closes the gap between discovery and remediation by enforcing compensating controls directly inside running containers, blocking …
AI Agents Need Runtime Security, Not Just Detection
As enterprise AI systems grow more autonomous, a fundamental question is reshaping the security landscape: what happens when an agent acts faster than any human can respond?
Microsoft June Security Updates for Exchange Server
🚨 Actively exploited Exchange Server zero-day is now patched. Refer to the Microsoft June updates section and links below. Messageware June Releases: Messageware AttachView SE/2019, 2016AttachView includes important security updates in our attachment viewing technology. Messageware EPG SE/2019, 2016EPG includes important Spamhaus and Geolocation updates. Get secure with our products: Server Security and Health monitoring (STG) Exchange [...] The post Microsoft June Security Updates for Exchange
What Cursor Under SpaceX Could Mean for Developers in the Long Term
The recent announcement that SpaceX will acquire Cursor for approximately $60 billion marks one of the largest acquisitions in the history of developer tools. While most of the attention has focused on the valuation and the strategic implications for Elon Musk's AI ambitions, developers should pay close attention to what this could mean over the next five to ten years.