Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,876 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Varonis Threat Labs uncovered a vulnerability in Rovo, Atlassian's enterprise AI assistant. Dubbed RovoBlast, a single click on a link triggers the attacker's embedded instructions and forces Rovo to accept externally supplied parameters as trusted inputs within a user's session. No jailbreaks, no permission bypass, and no warnings or confirmation.
By Assaf Morag, Cybersecurity Researcher What if the tool you use to run your criminal infrastructure is itself criminal infrastructure, and you are the target? FirewallFalcon Manager is presented as a free open-source Linux server management tool for VPN and proxy services. But, beneath the well-polished GitHub repo and feature-rich shell menus lies a multi-layered […] The post FirewallFalcon Manager: Supply-Chain Backdoors in Underground VPN Infrastructure appeared first on Flare | Ident
Nearly ten years after its source code was leaked, Mirai’s methodology is still working largely unchanged. The original botnet scanned the Internet for devices running default credentials and unpatched services, then weaponized them at scale. Its descendants do the same thing against the same device categories: consumer routers, DVRs, and IP cameras. What has changed […] The post Mirai and Its Heirs: A Decade of Structural Neglect in IoT Security appeared first on Censys.
Chat bots are sending friend requests in Riot immediately after ending your game. What are the scammers up to now?
A new court ruling not only fined Meta to the extent of $942 million but also ordered it to improve its age assurance tools.
Mend.io at Black Hat USA 2026: keynote, podcasts, awards, and a hit booth game.
Photo from the ManageEngine UserConf 2025 in Las VegasManageEngine is bringing its signature user conference to Orlando, Florida, on October 8 and 9, 2026. Join us at the Omni Orlando Resort at ChampionsGate for two days of expert-led sessions, product roadmaps, hands-on technical workshops, customer stories, and one-on-one conversations with the... The post ManageEngine UserConf 2026 is heading to Orlando! appeared first on ManageEngine Blog.
Most security architecture reviews produce a document. Few produce a decision. That distinction is the entire premise behind PASTA — the Process for Attack Simulation and Threat Analysis. It’s the... The post PASTA Threat Modeling for Security Architecture appeared first on VerSprite, Threat Modeling and Pentesting Services.
This week, something important happened in AI. Vercel, OpenAI, AWS, Microsoft, Cursor, and GitHub agreed on Agent Plugins, an open, […] The post AI Agents Just Got a Standard. Now They Need an Identity Discipline. appeared first on JumpCloud.
Quick Answers How does AI-generated content create narrative risk for real estate organizations and rental platforms? AI makes it easier to create and distribute convincing fake listings, fabricated reviews, and deepfakes of agents and buyers at scale. As that content spreads, it can reinforce damaging perceptions and amplify narratives that an organization does not verify […] The post How AI-Generated Content and Deepfakes Are Creating Narrative Risk for Real Estate and Rental Platforms a
The post Optimizing Executive Protection: What 3 Years of Data Reveals About Threats to VIPs appeared first on Ontic.
Learn which mobile app security vulnerabilities automated scanners miss and how layered testing strengthens mobile app protection. The post Mobile App Testing: The Security Vulnerabilities Automated Scanners Miss appeared first on Novee.
The trophy has been lifted. The stadiums are empty. The highlight reels have already been cut down into a thousand different formats for a thousand different feeds. By every measure that matters to FIFA, the 2026 World Cup was a success.By the measures that matter to fraud executives, it's only just getting interesting.
Microsoft has evolved far beyond productivity software. Today, it powers nearly every aspect of modern business — from collaboration and The post Microsoft security challenges: How to protect your business, data and identity appeared first on Kaseya.
You download an open source AI model with an Apache 2.0 license and figure you’re safe to use it commercially. With the license green light, you go ahead and deploy it. But here’s the thing nobody talks about: 76% of open source AI models are trained on data whose license is incompatible with or materially more […] The post The hidden liabilities in open source AI model adoption appeared first on Black Duck.
08/07/26 Database teams are navigating noisy alerts, SAP HANA slowdowns, application performance issues, and a growing list of tools to evaluate. Our August live sessions focus on these challenges, with practical guidance for DBAs, SAP Basis teams, application owners, and observability teams. Explore the webinars ... The post Webinars, Webinars, Everywhere! Register Now For Our Special Webinars On Alerts, SAP HANA, And More… appeared first on SolarWinds Blog.
Last week brought a stark reminder that even the most sophisticated financial institutions are only as secure as their weakest access point: a human on the phone. According to Bloomberg, reported by Reuters, hackers launched a coordinated wave of attacks against some of the largest hedge funds and private equity firms in the world, including […] The post Hackers Just Vished Wall Street’s Biggest Hedge Funds. Here’s the Access Control Lesson. appeared first on Portnox.
TL;DR: Recent Portswigger research introduced novel HTTP desync techniques discovered through an AI-assisted research system called the HTTP Terminator. The findings expand the range of unusual HTTP behaviors that can cause front-end and back-end systems to interpret the same traffic differently. Imperva Cloud WAF and On-Prem WAF customers are protected against practical attack patterns described in the research. Imperva’s existing security engine already blocked malicious […] The post Imp
“How much does SaaS backup cost?” If you’ve tried to answer that question by visiting vendor pricing pages, you’ve likely hit a wall. Most sites list feature tiers and then ask you to “get pricing” or “contact us” before showing a number. This isn’t a coincidence. SaaS backup pricing for platforms like Microsoft 365, Google […]
About: CVE-2026-18577 is a high-severity authentication bypass vulnerability affecting N-able N-central, a remote monitoring and management platform used by MSPs and IT teams. The vulnerability exists because a previous patch for CVE-2026-18556 addressed one exploitation path but left an alternate path to the same underlying weakness accessible. Successful exploitation can allow an attacker to bypass authentication and take over administrative accounts, potentially providing control over the end
See CrashPlan’s Microsoft 365 backup and archiving solution in action, with this interactive demo. Navigate the console and see policies and settings for yourself, and get a walkthrough of how to archive files and avoid paying extra for Microsoft 365 storage.
Finance forwards you the quarterly AI invoices and asks a reasonable question: Is this under control? Answering it takes most of a week. There is an invoice from Anthropic and …
The post Protecting People, Facilities, and Operations in Today’s Threat Landscape appeared first on Ontic.
To see what our CEO Ken Carnesi thought of the week at Black Hat, check out his blog here. Black Hat took over Mandalay Bay this week, and the official theme was impossible to miss: AI, everywhere, all at once. The keynotes covered cyber power in the age of AI, defending when offense is cheap, and vulnerability research in the agentic age. The vendor announcements were wall-to-wall AI agents, autonomous response, and identity security. TechTarget's recap sums up the show floor mood well:
Can an AI SOC be accurate but still untrustworthy? Yes. Accuracy is only one part of trust. Security teams don't just need correct answers—they need decisions they can understand, reproduce, and defend. Learn why accuracy, consistency, and transparency are the three pillars of trustworthy AI for modern security operations. The post Build vs. Buy AI for the SOC? You're Probably Asking the Wrong Question appeared first on Embed Security.
Black Hat 2026 key takeaways: Learn how AI deception, multi-channel attacks, and agentic infrastructure disruption are reshaping social engineering defense.
In this episode of Below the Surface, Paul Asadoorian is joined by Chase Snyder and Vlad Babkin for a conversation about InfraTrust, InfraTrust Pulse, and the hard problem of making infrastructure vulnerability data useful for defenders. The first half of the episode focuses on why infrastructure advisories are harder to track than ordinary CVE feeds […] The post BTS #79 - InfraTrust - Understanding Infrastructure Vulnerabilities & Risk appeared first on Eclypsium.
Learn how the Joint Commission–CHAI AI guidance helps healthcare organizations operationalize responsible AI through governance, privacy, monitoring, event response, and defensible documentation. The post Joint Commission–CHAI AI Guidance: What Healthcare Leaders Need to Operationalize Responsible AI appeared first on RadarFirst.
XSS2Shell (CVE-2026-64638) is a critical pre-authentication XSS vulnerability affecting WordPress login pages. This technical analysis explains the five-stage exploitation chain, the conditions required for RCE, mitigation guidance, and why discovering every exposed WordPress instance is essential.
Palo Alto Networks works closely with OpenAI across our product platform and Unit 42, leveraging advanced frontier model capabilities. Furthermore, we are a partner in the OpenAI Daybreak Cyber Partner Program, working … The post Strengthening Security of AI Coding: Prisma AIRS API Integration with OpenAI Codex appeared first on Palo Alto Networks Blog.
Security teams are not struggling to find vulnerabilities. The harder problem is getting them fixed fast enough. Most AppSec programs already generate more alerts than developers can realistically work through, which turns remediation into the real bottleneck.
Executive Summary The recently disclosed WP2Shell vulnerabilities exposed a critical weakness affecting WordPress sites worldwide and highlighted how quickly threat actors can weaponize newly discovered flaws. Researchers reported that the exploit chain was uncovered with the aid of AI-assisted analysis, demonstrating how advances in technology are accelerating both security research and the emergence of new threats. Once exploited, the vulnerabilities could allow attackers to gain unauthorized
The Claim Governance frameworks that rely on manual code review to catch malicious packages create systemic risk when an artifact is deliberately built to survive that review. Zero Trust for Code addresses this by requiring a pre-execution trust decision on what a package does when invoked, rather than solely depending on a reviewer’s judgment of what […]
An autonomous AI agent powered by a combination of OpenAI models escaped an isolated cyber-capability evaluation environment, reached the public internet, and conducted a multi-stage intrusion into Hugging Face’s systems. The models included GPT-5.6 Sol and a more capable internal research prototype operating with reduced cyber refusals and without the production safeguards normally used to […] The post Hugging Face Breach: OpenAI Agent Abused Exposed Credentials Across Four Services
Baxter Lee, president of Clearwater, says building organizational resilience in an AI-driven threat landscape is a must despite critical national coordination efforts to patch healthcare vulnerabilities swiftly. The post All hands needed for AI cyber resilience appeared first on Clearwater.
Key Takeaways HIPAA defines 18 identifiers that can identify an individual when associated with health or healthcare payment information, making that information Protected Health Information (PHI). All 18 identifiers must be removed under HIPAA Safe Harbor for healthcare data to qualify as de-identified under that method. The identifiers cover a broad range of data, including names, addresses, dates, phone numbers, ... Read More The post PII Dataset Download – All 18 HIPAA Identifiers appeared f
Access your Huntress data easily with the Huntress MCP Server, connecting your AI assistant directly to your incidents, agents, billing, and more. No portal required.
A talk about how artificial intelligence is transforming offensive security and why traditional strategies are no longer enough against threats evolving at the speed of technology. The post The game has changed. How will you protect your company? (Spanish Version) appeared first on Faraday.
FedRAMP 20x ushered in a new era for federal compliance. Previously, FedRAMP authorization came with a hefty price tag, extended timeline, and required federal agency sponsorship. Under the new rules, more organizations can become certified quicker and at a lower cost, opening the door to new federal revenue.  For those with a SOC 2, the path to FedRAMP has never been more accessible. FedRAMP has now allowed a S