Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,890 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
An airline ran its live GenAI stack through red teaming, an inline prompt firewall, and AI-DR. 2,968 model findings and 455 policy failures later, here is what it learned.
Organizations are integrating AI into their operations and products faster than they’re building the governance to manage it. That gap is where risk lives: lack of transparency, bias, privacy violations, security threats, and ethical dilemmas that surface only after an incident, an audit, or a regulator starts asking hard questions. By 2027, AI governance and […] The post AI Governance: Choose the Right Approach for Your Organization appeared first on A-LIGN.
In 2026, organizations face an accelerating convergence of AI adoption and regulatory scrutiny, making proactive AI risk management essential for maintaining governance, compliance, and operational resilience. Continuum GRC helps CISOs and compliance officers navigate this landscape by integrating AI-specific controls into established frameworks such as NIST SP 800-171 Rev 3 and CMMC 2.0. Effective AI […] The post AI Risk Management 2026: Continuum GRC Governance Compliance appeared first
Autonomous AI is challenging four architectural assumptions at the core of cybersecurity. Learn what breaks and why it matters. The post Autonomous AI Breaks Four Assumptions at the Core of Cybersecurity appeared first on zvelo.
  In this session, we explore why the traditional detect-and-respond model is falling short for organizations of every size, and what a modern, proactive security program looks like in practice — from governance and identity to resilience, response, and continuous improvement.” Watch Tony Scribner, VP Solution Advisory, Bluewave, Connor Jackson, Principal Security Researcher, and Brian […] The post On-Demand Webinar: Attackers Have AI Do You Have A Program? appeared first on CyberMaxx
Water systems in 12 U.S. states experienced cyber attacks on PLCs. Here is technical OT security analysis with mitigation guidance. The post OT Security Analysis: Exposed Devices Attacked in US Water Systems appeared first on Forescout.
Water systems in 12 U.S. states experienced cyber attacks on PLCs. Here is technical OT security analysis with mitigation guidance. The post OT Security Analysis: Exposed Devices Attacked in US Water Systems appeared first on Forescout.
Your hospital contact center is more than a call routing system, it's a critical link in the patient safety chain. When a hospital invests in a modern operator console, it is not just reducing IT complexity — it is closing a gap in the care coordination chain that has direct implications on patient safety.
If you sell to, or contract with, the Department of Defense, you've probably recently heard some version of: "CMMC is dead." "It's cancelled." "We don't have to worry about this anymore."
Every AI agent an organization deploys is also a new non-human identity, whether anyone thinks of it that way or not. It authenticates, holds credentials, acts on systems, data, and other services. It takes these actions continuously, at machine speed, with no human standing nearby to notice when something does not adhere to policy. Most security teams don't think of it that way yet. An agent feels like a feature, a script or a workflow bolted onto an existing product. But to a vault, an IAM...
On July 26 and 27, a coordinated cyberattack hit more than 30 community water systems across Minnesota. Our team is trained in running penetration tests against OT and ICS environments, and when we read the reporting on this one, nothing about it was surprising. That's the part that should worry people.
Here's how to use Spectra Analyze to hunt for malicious SVGs, from setting up queries and evaluations of samples to tips for investigation.
Explore how communicative technology is evolving with AI, and why trust, safety, and compliance are critical to scaling GenAI systems responsibly.
HIPAA compliance won't catch behavioral failures in live AI. WonderSuite tests, protects, and monitors healthcare AI across its full lifecycle so your agents stay safe in production, not just on paper.
Alice WonderFence guardrails plug into Databricks Unity AI Gateway, enforcing your own security and safety policies on prompts, tools, and agents inline, in real time.
5 min readToday, we’re announcing the Aembit Claude Workload Identity Federation Credential Provider, the latest addition to Aembit’s growing Claude support. Aembit already covers a lot of ground with Claude: workloads can authenticate to the Claude API using static API key injection, Claude Web and the Claude App are supported as Client Workloads, direct API access runs […] The post Aembit Adds Workload Identity Federation Support for the Claude API appeared first on Aembit.
Synack Red Team researcher Malcolm Stagg takes the stage at Black Hat USA 2026 on August 6 to present three years of independent research on a new class of network infrastructure attacks. Here's who he is and why the talk belongs on your calendar. The post From DARPA to Black Hat: An SRT Researcher’s Next Chapter appeared first on Synack.
So, what is an AI governance framework? It is a structured system of principles, policies, and practices that guides how your organization ethically develops, deploys, and oversees AI systems. It gives you a repeatable way to keep AI transparent, safe, fair, and legally compliant as adoption scales across the business. Rather than treating each AI […] The post What Is an AI Governance Framework? appeared first on LogicGate Risk Cloud.
So, what is an AI governance framework? It is a structured system of principles, policies, and practices that guides how your organization ethically develops, deploys, and oversees AI systems. It gives you a repeatable way to keep AI transparent, safe, fair, and legally compliant as adoption scales across the business. Rather than treating each AI […] The post What Is an AI Governance Framework? appeared first on LogicGate Risk Cloud.
Our first guide, What is Managed Threat Intelligence, covers the definition, the cost case against building a process in-house, and the US regulatory pressure that come along with it. In this blog we’ll walk you through the proof layer, in these five real investigations from CybelAngel’s REACT team. Here’s the part most vendor content about […] The post What Does Managed Threat Intelligence Actually Catch? Five Investigations to Note appeared first on CybelAngel.
Interac calls for a time-limited, government-led exercise, convened by the Department of Finance, to align the major payments reforms already underway. Canada is making its most consequential payments-policy decisions in a generation — before settling on what it wants the payments ecosystem to deliver, or which capabilities should remain domestically owned and operated for the… The post Catalyzing Canada: The case for a national payments vision, and federal leadership to deliver it appeare
Changes like this are easy to miss, and missing them is the kind of thing that surfaces in front of a partner or a customer at the worst possible moment. So here is the short version. On 29 June…
Changes like this are easy to miss, and missing them is the kind of thing that surfaces in front of a partner or a customer at the worst possible moment. So here is the short version. On 29 June…
A single compromised credential is often all it takes to turn an ordinary workday into a full-scale cybersecurity incident. Despite investments in firewalls, endpoint security, and identity controls, attackers continue to exploit one of the simplest yet most effective entry points—stolen usernames and passwords. Whether exposed through phishing campaigns, malware infections, credential-stealing infostealers, or data breaches, compromised credentials are readily traded across underground forums a
It is common for those of us who work in malware research to have YARA rules continuously monitoring sample feeds in search of new threats, unknown variants, or malware that has not yet been identified. The post Another PhantomRAT, But This Time It’s a Previously Undocumented Stealer+RAT appeared first on Zynap.
Attackers used to work at human speed. A skilled researcher found a vulnerability, built an exploit, and chained it into an attack over days or weeks. That gave defenders room to scan, triage, and patch. That room is gone. AI hasn't just changed how IT teams work, it's changed how attackers operate. Vulnerability discovery, exploit weaponization, and attack chaining that once took weeks now happen in hours. Unfortunately, the monthly patch cycles and manual triage that most teams still run were
An Industry Perspective By Rajiv Pimplaskar, CEO, Dispersive Holdings, Inc. Agentic AI changes the network security problem from inspection to authorization. As more traffic is generated by agents, models, and workloads operating at machine speed, the network has to make trust decisions continuously, evaluate policy in real time, revoke access automatically, and keep communications resilient even when no human is in the loop. What We Are Seeing This week at Black Hat USA 2026, one theme is domin
A firsthand look at how Tangles turns open-source intelligence into actionable insight across executive protection, fraud investigation, and due diligence. The post AI-Powered Open-Source Intelligence for Enterprise Security appeared first on Penlink.
Boxphish’s review of the 2026 Cyber Security Breaches Survey has landed. Last years survey felt like a warning and that feeling has certainly developed with this years release.   The headline: Cyber risk is now business-as-usual  43% of UK businesses reported a cyber breach or attack in the last 12 months, an unchanged statistic from last year. At first glance, that might sound like […]
By Andréanne Bergeron, Security Researcher You type in your email address for a 10% discount. You share your phone number to verify an account. You enter your name on a sign-up form. Each disclosure feels trivial because, in isolation, it is: an email address costs $0.0002 on the dark web, and a name costs about […] The post Combined PII is Worth Thousands of Times More Than its Parts: Stolen Data Math appeared first on Flare | Identity First Threat Intelligence | Unmatched Visibility into
Emergency services remain open, but patients face delays, limited portal access and downtime processes as the health system investigates a potential data breach. The post 10 AnMed facilities remain closed a week after cyberattack appeared first on Clearwater.
From COPLink to AI: Bob Griffin on the evolution of investigative technology In this episode of Siren Investigates, Siren CEO John Randles sits down with Bob Griffin, Chairman of Siren, to explore how technology has transformed law enforcement and intelligence over the past three decades. As a founder and CEO of COPLink and later CEO … Continue reading "Siren Investigates Podcast: The Man Who Changed Police Technology" The post Siren Investigates Podcast: The Man Who Changed Police Technol
Relativity is proud to celebrate the 2026 Innovation Awards Best Innovator category finalists. Get to know them, cast your votes for each category, and join us in Chicago to see who takes home each trophy.
Picture a routine agentic workflow: a user delegates a task, and an AI agent takes… The post How Microsoft and PlainID Extend Trust Through Agentic Workflows appeared first on PlainID.
In the past, cybersecurity was mainly an IT task focused on system updates and antivirus software. Now, even small and midsize businesses rely on technology daily, making cybersecurity a priority […] The post Top 3 Questions Every CEO Must Ask About Cybersecurity appeared first on Teal.
The threat landscape for macOS malware is expanding, while the number of specialists dedicated to defending against it has not kept pace. Unlike Windows, where machine learning (ML) models are supported by extensive documentation and standardized datasets, the macOS environment presents a significant knowledge gap. At Iru, we captured SSTAR Agent, a crypto drainer targeting web3 technology developers via a fake interview lure, which we documented in an earlier post using an ML triage we built.
Exploit Hunt runs an adversarial three-persona pipeline inside Phoenix Purple's knowledge graph: attacker, skeptic, exploit developer. Every reported finding ships as a runnable proof of concept, not a severity label. In one verified run, 3 target files produced 9 confirmed exploits — and the skeptic gate correctly killed every disputed finding before it reached proof. The post Exploit Hunt: How Threat-Model-Led AI Hunting Finds Real Zero-Days — and Why It Beats Scanning and Pentesting appeared
To hear both sides of the build vs buy debate around AI pentesting solutions, we spoke with Dow's cyber engineering team lead Dan Lacher and Synack's CTO Mark Kuhr. From Dow's perspective, Synack served as a force multiplier for a small internal red team. Meanwhile, building the Synack Autonomous Red Agent (Sara) from scratch definitely had some trial and error. The post Build vs. Buy AI Pentesting: Why Dow Chose to Partner With Synack appeared first on Synack.
What is agentic AI governance? Agentic AI governance is the set of authorization policies and… The post Agentic AI Governance: A Complete Guide appeared first on PlainID.
Cyber Threat Intelligence (CTI) Demo page sarah.hunter@l… Wed, 08/05/2026 - 13:41 Cyber Threat Intelligence demo Watch this demo to discover how Logicalis Cyber Threat Intelligence (CTI) helps organisations take a proactive approach to cyber defence by identifying phishing campaigns, credential exposure, and emerging threats before they impact your business. 10 Cyber Threat Intelligence ransomware attack demo See how Cyber Threat Intelligence (CTI) helps prevent ransomware attacks by iden