Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
235 matching stories — in Workload Protection — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The vulnerability: CVE-2026-42897, a cross-site scripting (XSS) flaw in Outlook Web Access (OWA), the browser-based interface for on-premises Microsoft Exchange Server. CVSS score: 8.1 (High). Affected systems: On-premises Exchange Server 2016, 2019, and Subscription Edition (SE). How the attack works: An unauthenticated attacker sends a "half-click" phishing email — no links, no attachments, no action [...] The post Russian Hackers Are Exploiting an Unpatched Outlook Web Access Flaw appeared fi
Learn how the Datadog Runtime Prioritization Engine infers ownership and identifies business-critical resources to help you prioritize security findings.
This datasheet illustrates how ZeroLock blocks attacks like the one against Fairlife's Nutanix systems. The post Stopping the Fairlife Playbook on ESXi appeared first on Vali Cyber.
TL;DR: The OpenAI agent’s attack on Hugging Face showed how quickly AI can chain vulnerabilities, steal credentials, and move through an environment. It also showed why strong runtime defense matters. Like a World Cup goalkeeper, runtime security does not need to know how the attack developed. It needs to stop the final action, contain the …
The recent vulnerability identified as CVE-2026-15328 affects IBM WebSphere Application Server and WebSphere Application Server Liberty. This flaw allows for inconsistent interpretation of HTTP requests, posing a significant threat to server security. The vulnerability is pres...
Recently, the CVE-2026-15325 vulnerability has come to light, impacting IBM WebSphere Application Server. This vulnerability poses significant risks, particularly for system administrators and hosting providers managing Linux servers. Understanding these vulnerabilities, and r...
In today's rapidly evolving digital landscape, cybersecurity vulnerabilities are an ongoing threat for server administrators and hosting providers. The recent alert concerning CVE-2026-15280, affecting IBM WebSphere Application Server, underscores the necessity for robust serv...
On July 21, 2026, OpenAI disclosed that their large language models (LLMs) had "escaped" their testing environment and compromised Hugging Face's production infrastructure during a training exercise. As of the publication of this article, this is the first well-documented incident involving an AI agent compromising real production infrastructure. While we don't know everything in great detail, let's review the facts of the situation.
On July 23, 2026, a bug in Microsoft's automated network maintenance system triggered a nearly five-hour outage across Microsoft 365 and Azure, cutting off a West US datacenter from Microsoft's global network. What happened The outage started at 10:44 AM ET during routine maintenance meant to isolate specific network paths in Microsoft's West US Azure [...] The post Microsoft 365 Outage: Bug Takes Down Microsoft 365 for Hours appeared first on Messageware.
For government contractors and MSPs that store, process, or transmit Controlled Unclassified Information (CUI), NIST SP 800-171 Rev. 3, published on May 14, 2024, provides a modern framework for strengthening security while preparing them for evolving federal cybersecurity requirements, including those that may be reflected in future CMMC and FedRAMP updates. Atomicorp delivers the endpoint […] The post NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline appeared first on Atomicorp --
We are proud to announce that Senteon has been named a finalist in Cyber Defense Magazine’s 2026 Top InfoSec Innovator Awards and its Top 25 Most Innovative Cybersecurity Companies in the World.
CWE-first protection wins again. While the industry raced to publish emergency wp2shell detections, Atomicorp’s existing generic SQL injection and RCE protections were already positioned to stop the underlying attack behavior. wp2shell: The attack was new. The weakness was not. The wp2shell chain combines CVE-2026-63030, a WordPress REST batch-route interpretation conflict, with CVE-2026-60137, an SQL injection […] The post Atomicorp Blocked wp2shell Exploit Before It Had a Name appe
Reports indicate the attack that halted Fairlife’s US production targeted the Nutanix hypervisor, the one place in the technology stack with no runtime security. The same playbook works against VMware ESXi. Each attack stage maps to a ZeroLock control that prevents it. The post Stopping the Fairlife Playbook on ESXi appeared first on Vali Cyber.
Organizations today face an increasing number of cybersecurity frameworks, regulatory requirements, and customer security expectations. Whether it's CMMC, NIST 800-171, CIS Benchmarks, or another compliance framework, one challenge remains the same:
TL;DR Most of the vulnerabilities in a container environment will never be exploited, the hard part is knowing which ones will. The remediation timeline for production workloads is not shrinking fast enough to keep up with attacks that adapt at machine speed, so teams cannot afford to work the list in severity order and hope. …
Microsoft is officially retiring Outlook on the Web (OWA) Light. First introduced nearly 20 years ago to support legacy browsers and slow network connections, the lightweight email interface has reached the end of its journey. In an upcoming Exchange Server SE update, estimated for August 2026, Microsoft will permanently disable and remove OWA Light. Exchange [...] The post Microsoft Announces Retirement of OWA Light for Exchange Server appeared first on Messageware.
Continuous compliance monitoring provides the ongoing visibility organizations need as AI-accelerated attacks shorten the time between vulnerability discovery and exploitation. Atomicorp’s Atomic OSSEC EDR delivers continuous compliance monitoring and benchmarking across IT and OT environments through agent-based or agentless deployment on modern, legacy, and unsupported operating systems. Built-in antivirus, endpoint firewall, file integrity monitoring, vulnerability […] The post Wh
The Department of War has announced the immediate suspension of CMMC Phase 2 requirements, which were originally scheduled to take effect on November 10, 2026.
Artificial intelligence is changing cybersecurity at an incredible pace. Every few months, a new breakthrough sparks discussions across the industry—but few have generated as much conversation recently as Mythos. Some headlines suggest it could revolutionize software security. Others warn it could become the next major weapon for cybercriminals.
Most security products stop at detection. They identify prompt injection, unusual API usage, suspicious MCP servers, or sensitive data leaving an organization, generate an alert, and hand the incident to a SIEM. That model works for traditional infrastructure because humans are still in the loop. Agentic systems are different. A single autonomous agent can execute hundreds of tool calls in seconds. It may invoke an MCP server, retrieve confidential documents through RAG, execute shell commands,
This post comes from Pushkar Joglekar, Principal Security Engineer at Broadcom, where he focuses on VMware Kubernetes distributions. Pushkar is a Kubernetes security maintainer and co-author of the security chapters in Nigel Poulton’s “The Kubernetes Book.” He writes from experience securing infrastructure at scale. It starts with a failing deployment. You attempt a quick fix—maybe …
As enterprise AI systems grow more autonomous, a fundamental question is reshaping the security landscape: what happens when an agent acts faster than any human can respond?
The recent announcement that SpaceX will acquire Cursor for approximately $60 billion marks one of the largest acquisitions in the history of developer tools. While most of the attention has focused on the valuation and the strategic implications for Elon Musk's AI ambitions, developers should pay close attention to what this could mean over the next five to ten years.
