Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,882 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Table of contents Legal Requests: Our Q2 Numbers DMCA Complaints Police Requests Q2 Bug Bounty Results Transparency Through Consistent Reporting Transparency reports aren’t meant to be dramatic. Their value comes from publishing the same information, quarter after quarter, so anyone can see what requests we receive and how we handle them. In the second quarter of 2026, CyberGhost VPN received 64,006 DMCA complaints and five police requests. Our bug bounty program also received 49 submissions, in
Frontier labs are catching autonomous models breaking containment. These aren’t isolated harness bugs—they’re the first observable data points of a system racing beyond our control. If you see one mouse, there are more in the walls. Frontier labs and safety institutions—including OpenAI, Anthropic,  and the UK AI Security Institute (AISI)—recently disclosed an alarming series of […] The post Did We Just Witness Step One of the Autonomous AI Arms Race? app
Key Takeaway: A major launch always triggers a wave of fraud before it triggers a wave of sales, so brands that prepare early protect both customers and revenue. Every major launch creates excitement. A new video game, a global product launch, tickets going on sale for a sold-out concert, Black Friday, or a major sporting […] The post Is the Next Launch Safe from Fraud and Cyberscams? appeared first on EBRAND.
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into ransomware leak sites. The post What are Ransomware Leak Sites? appeared first on DarkOwl, LLC.
Distributed IT infrastructure spreads compute, storage, and networking across multiple physical or virtual locations instead of housing everything in one central data center. Rather than routing every request back to a single hub, a distributed model processes data closer to where it's created, at branch offices, retail locations, or other sites at the edge. [...] The post What is Distributed IT Infrastructure? appeared first on StorMagic.
Cloud-native applications drive business agility, but they also bring unique security challenges. Here’s what CNAPP is and why it matters. Table of Contents ▼ What Is CNAPP? A Cloud-Native Security Foundation Why CNAPP Matters for Modern Enterprises Key Components of a CNAPP Solution CNAPP vs CSPM: Understanding the Differences Key Points for CSPM Key Points... The post What Is CNAPP? Cloud-Native Application Protection Platform Explained appeared first on CoreStack.
Introduction: The Endpoint has Become the New Battleground The modern enterprise no longer operates within defined security boundaries. Hybrid workforces, cloud adoption, third-party access, connected devices, and distributed applications have fundamentally expanded the attack surface. While organizations continue to invest heavily in perimeter defenses, security operations platforms, and identity solutions, attackers are increasingly shifting their […]
Summary Attack Surface Management (ASM) covers the full internal and external attack surface, running continuous discovery, risk prioritization, and remediation. Cyber Asset Attack Surface Management (CAASM) aggregates data from existing security tools into one accurate, real-time asset inventory. External Attack Surface Management (EASM) focuses only on public-facing assets, assessed the way an outside attacker would … Continued The post ASM vs CAASM vs EASM: Finding the Best Attack Surfa
The five user access review tools worth evaluating in 2026, judged on what actually reduces risk: reviews that execute the revoke, show context, cover the apps outside SSO and include AI agents. Why Cakewalk leads for mid-market SOC 2 and ISO 27001 teams.
For the second consecutive year XTN Cognitive Security has been recognized in the Gartner Hype Cycle for Fraud and Financial Crime Prevention, 2026. Gartner includes XTN Cognitive Security as a Sample Vendor in two key innovation categories essential for modern financial crime defense: Why This Matters for Financial Institutions The 2026 Gartner Hype Cycle emphasizes […] The post XTN Featured in Gartner’s 2026 Hype Cycle for Fraud and Financial Crime Prevention appeared first on XTN
Attackers have accelerated, but most security programs have not... The post What the IBM 2026 Cost of a Data Breach Report Means for Product Security: 5 Takeaways appeared first on Cycode.
Vibe coding lets developers describe what they want and accept whatever the AI writes back... The post Vibe Coding Security: Risks and Vulnerabilities appeared first on Cycode.
Thirty metrics CISOs are commonly advised to track, and a harder question underneath all of them: which ones have ever actually changed a decision. “If you have to forecast, forecast often.”Edgar Fiedler Most cybersecurity metrics programs grow by addition. A new framework arrives, a board member asks a pointed question, an audit flags a gap, […] The post The 30 Best Cybersecurity Metrics to Track appeared first on CybelAngel.
Every DDoS threat report leads with the same terrifying headline: record-breaking terabit attacks, massive botnets, and apocalyptic growth percentages. They make for great headlines, but they rarely reflect the threats that actually take your business down.
The record-breaking DDoS attacks of the last year weren’t powered by hackers’ supercomputers. They ran on ordinary office gear, the printer, the camera, the box nobody remembers buying. Here’s how to find yours before someone else uses them.
The UK's AI Security Institute disclosed on August 4, 2026 that AI agents in a cyber evaluation took 19 unsanctioned actions against real people and organizations. One agent built fake identities to pressure an open-source maintainer into approving malicious code, which the maintainer refused.
TL;DR: BreachRx introduces Scratch Pad – a collaborative document workspace built directly into incidents and exercises in the Rex Platform. It gives response teams one protected, real-time place to capture findings, hypotheses, handoffs, decisions, and communications so everyone stays aligned without chasing information across chats and standalone documents. We’ve all been there before. Something goes […] The post Scratch Pad: Where Cybersecurity Incident Response Teams Work, Share, and S
Why Post-Quantum Security Is Climbing the Enterprise Agenda andrew.gertz@t… Thu, 08/06/2026 - 07:56 Learn why post-quantum security is becoming an enterprise priority, how AI and quantum computing are reshaping cryptography, and how Thales Luna 8 helps organizations prepare. Data Security Key Management Encryption Key Management Bree Fowler | Journalist More About This Author > At Black Hat, Quantum Security Stops Feeling Like Tomorrow's ProblemFor a few days every summer, the Las Vegas Strip
A self-propagating worm named ChainDrop infected more than 400 npm packages, including keyv, flat-cache and cache-manager, Microsoft reported on 4 August 2026. The malware steals developer and cloud credentials, then uses stolen publishing tokens to poison further packages on its own. For third-party risk teams, it is a fourth-party exposure most vendor registers never capture.
Automate your investigation due diligence with Unit21's Online Search task. Get verified, citation-backed results and defensible audit trails in minutes.
Most vendors claim they have agentic AI, but few do. Learn how to evaluate systems and move from simple automation to genuine autonomy in financial crime workflows.
Key Takeaways Dropping Elephant, also known as Patchwork, is an espionage APT first observed in December 2015 targeting government and defense. Windows chains start with malicious shortcuts disguised as PDFs, launching obfuscated PowerShell downloaders that stage payloads and persistence. Trojanized Android apps spread through romance chat lures, steal messages, call recordings, keystrokes, images, and files. The Picus Platform simulates Dropping Elephant attacks so teams can validate security c
AI agents are now transacting, browsing, and making decisions on behalf of real people. They are also being spoofed, deceived, and weaponized. For brands, the impersonation problem just expanded in three directions at once. Agentic AI refers to artificial intelligence systems that can take independent actions, make decisions, and execute multi-step tasks without waiting for […] The post Agentic AI and the New Impersonation Surface appeared first on Allure Security.
Threat Intelligence Report Jul 28 - Aug 3 2026 john.cezar Thu, 08/06/2026 - 07:23 New Threats Detection Added • OWAReaper New Threat Protection 68 Newly Detected Threats 8 Weekly Detected Threats The following threats were added to Crystal Eye this week: Threat name: OWAReaper OWAReaper is a malicious Javascript-based backdoor targeting Microsoft Outlook Web Access (OWA) by exploiting a cross-site scripting vulnerability, allowing the malware to be executed by simply opening a phishing/malicious
Most sending platforms don’t detect abuse. They discover its consequences. Here's why the industry is stuck in damage-driven abuse handling, and what it takes to get out.
Federal agencies have spent nearly two decades routing traffic through Managed Trusted Internet Protocol Services (MTIPS) gateways built for a world that no longer exists. While the architecture kept running, the environment moved on without it. In June 2026, the Cybersecurity and Infrastructure Security Agency (CISA) published The Journey to Zero Trust: Using Secure Access […]
Progressive delivery is not only about creating the new Pods, it is also about controlling which traffic reaches them. This blog explores Header-based canaries with Argo Rollouts and Gateway API
Gateway proxy or standards-based token exchange? The two credible models for authorizing AI agents at runtime have complementary strengths, and no enterprise environment is uniform enough for one to cover everything. Why the right question is whether your platform supports both.
One simple automation task, two very different AI coding experiences — and a 10x price gap. S3 storage is great. Reliable, convenient, and cheap. Except when it isn't. That's the trap, really. S3 is so easy to use that it becomes way too tempting to dump huge amounts of "temporary" data into a bucket and then just… forget about it. Nobody sets out to waste money. It happens gradually: a test export here, a debug dump there, a "just for now" backup that quietly becomes permanent. Usage creeps up,
Two evaluation escapes in one week. Mapped onto the seven MAESTRO layers, one is an operations failure, and the other is an alignment failure, and the fix lists barely overlap. In the last two weeks of July 2026, two frontier labs published the same headline and two completely different stories. On 21 July, OpenAI confirmed that models it was benchmarking on ExploitGym had broken out of an isolated research network, chained zero-days in a self-hosted JFrog Artifactory proxy, and...
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident. The post Npm Supply Chain Attacks: Biggest Incidents & How to Stop Them appeared first on Xygeni AI-Powered AppSec Platform.
Key Takeaways Enterprise architects often group several delivery models under one label. Yet each cloud DNS architecture creates different boundaries for DNS automation and DNS visibility, especially across multicloud DNS environments. This article provides a practical framework for deciding where Domain Name System (DNS) governance, data authority and execution should reside. Four Cloud DNS Operating… The post Cloud DNS Architecture Is Not Just DNS in the Cloud appeared first on Efficient
