Sophos DNS Protection update for GenAI
New Generative AI category is now available in DNS filtering policy and reporting.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,898 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Anubis: A Threat Profile
Aliases Sphinx — original codename under which early ransomware samples and initial victims were recorded in late 2024, before formal rebranding Anubis__media — operator persona used on the XSS underground forum superSonic — operator persona used on the RAMP underground forum for affiliate recruitment Get Threat Intel and Security Updates Delivered to Your Inbox.   Profiling Threat […] The post Anubis: A Threat Profile appeared first on Vali Cyber.
Malware Defense: A multi-agent detection engine and package firewall | Ebook/Report | Endor Labs
Open source malware doesn't wait for a CVE. Neither should your defenses.
From executive order to operational reality: a federal AI SOC blueprint
Xage Security Delivers Critical Asset Protection, Providing Comprehensive Asset Defense as AI-enabled Threats Grow Exponentially
VMblog | David Marshall | August 4, 2026 The post Xage Security Delivers Critical Asset Protection, Providing Comprehensive Asset Defense as AI-enabled Threats Grow Exponentially appeared first on Xage Security.
CMMC Compliance Assessments: Continuum GRC Defense 2026
In 2026, defense contractors face heightened scrutiny under CMMC compliance assessments as federal mandates tighten around the protection of Controlled Unclassified Information (CUI). Continuum GRC delivers authoritative guidance that goes beyond checkbox compliance, focusing on sustainable security postures that align with evolving DoD expectations. This analysis examines CMMC 2.0 assessment protocols, their technical intersections with […] The post CMMC Compliance Assessments: Continuum
Governing a New Kind of Employee
How AI Has Compelled the Evolution of Corporate Governance, and Why the Answer Is Already in the Boardroom A whitepaper by Steven Hill, Managing Partner, OakTruss Group LLC August 2026 Executive Summary Artificial intelligence (AI) has moved consequential judgment into software. Systems now approve, flag, prioritize, and decide. These are functions that, until recently, only people performed, and that shift has compelled an evolution in corporate governance. The good news is, this evolution...
Coding agents are scaling fast. How do teams keep up?
Scaled AI-assisted development creates a visibility gap Coding agents have moved from experiment to everyday engineering workflow faster than many organizations expected. Agent adoption has scaled faster than teams’ ability to understand how AI-assisted changes behave once they reach production. As developers shift from writing code themselves to specifying, reviewing, orchestrating, and refining agent-generated output, […] The post Coding agents are scaling fast. How do teams keep up? app
A guide to Perplexity security
Perplexity is increasingly moving from consumer answer engine into enterprise AI workflows, and security leaders now need a practical view of what Perplexity security requires. If you’re already reviewing AI vendors on tight timelines, you’ve seen this split before: under the shared responsibility model, Perplexity supplies controls through its Enterprise tier. The organization remains responsible... Read more » The post A guide to Perplexity security appeared first on WitnessAI
What is AI runtime security?
AI runtime security is the inspection and enforcement of policy on AI activity as it happens. It covers AI conversations and agent tool calls, from the prompt an employee sends to the response a model returns. It operates during live AI use, after deployment reviews have finished, when written policies need an enforcement point. AI... Read more » The post What is AI runtime security? appeared first on WitnessAI.
What is an MCP gateway?
The Model Context Protocol (MCP) is the open standard that lets AI agents discover and call external tools and data sources, such as APIs. In enterprise governance, an MCP gateway serves as the control layer between agents and the MCP servers they connect to. It governs which tools each agent can reach and creates audit... Read more » The post What is an MCP gateway? appeared first on WitnessAI.
AIS & AFRL Host Test Event for the National Motor Freight Traffic Association®
... The post AIS & AFRL Host Test Event for the National Motor Freight Traffic Association® appeared first on Assured Information Security.
Securing AI Agents in Claude with Akeyless
See how Akeyless Agentic Runtime Authority enables secure AI agent access with just-in-time credentials, runtime policy enforcement, and full auditability. The post Securing AI Agents in Claude with Akeyless appeared first on Akeyless.
Why NIS2 Requires Organizations to Move Beyond Legacy TPRM Processes
NIS2 Has Redefined What “Good” Third-Party Risk Management Looks Like NIS2 has not introduced third-party risk management as a new concept. Instead, it has redefined the expected baseline of maturity. Under traditional cybersecurity and vendor risk programs, third-party risk management was typically built around periodic assessments. Organizations maintained supplier inventories in spreadsheets, sent annual security ... Read more The post Why NIS2 Requires Organizations to Move Beyond Legacy TPR
ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2
ChainDrop npm worm: 444 packages and 2,212 versions poisoned, starting with [email protected]. Payload analysis, affected package list, IOCs, and remediation steps.
What Is a Remediation Confidence Score?
A remediation confidence score is a safety rating that tells you whether a cloud security fix can be applied without breaking production. Tamnoon’s AI agent, Tami, scores every proposed fix as SAFE, RISKY, or AWAITING DATA by investigating the affected resource against live cloud data, mapping its dependencies, and calculating blast radius before any change […] The post What Is a Remediation Confidence Score? appeared first on Tamnoon.
Patch faster isn’t the answer. Patch smarter is.
AI killed the patch window. Smarter patch management is how teams keep up.
What an ISO Internal Audit Requires
Why Responsible AI in Enterprise Networking Is No Longer Optional — It’s Essential
The network is the core of every organization. When it goes offline, the business suffers. So, it’s not surprising that as AI-driven automation advances in network operations, the response from those who manage that infrastructure tends to be more cautious than celebratory. That caution is justified. AI is everywhere now, but adoption and trust are […] The post Why Responsible AI in Enterprise Networking Is No Longer Optional — It’s Essential appeared first on BackBox Software.
Preparing for the CRA: SBOM Adoption for Embedded Software Teams
On July 27, 2026, the European Commission published its most substantial guidance yet on applying the EU Cyber Resilience Act (CRA). The guidance helps manufacturers, developers, and businesses of all sizes by working through questions that have caused the most confusion, from what counts as a product with digital elements to how open source, support […] The post Preparing for the CRA: SBOM Adoption for Embedded Software Teams appeared first on RunSafe Security.
After the Minnesota Water System Cyberattacks: Why Every Count of Exposed Rockwell PLCs Differs
By Adrian Cheek, Senior Cybercrime Researcher Late July, attackers targeted operational technology at more than 30 community water systems across Minnesota. In Braham, attackers disabled computerized controls and briefly shut down the city’s well and water treatment plant. In Plymouth, cellular communications failed at two water towers and multiple wastewater lift stations. Days later on […] The post After the Minnesota Water System Cyberattacks: Why Every Count of Exposed Rockwell P
Future of Digital Banking Security in the Middle East
Digital banking transformation across the Middle East accelerates as regional financial institutions embrace cloud infrastructure, mobile-first customer experiences, and real-time payment systems. This technological evolution creates unprecedented attack surfaces that traditional perimeter-based security models cannot adequately protect. Regional banks face mounting pressure to secure sensitive customer data, transaction records, and regulatory communications whilst maintaining the Read more...
Penlink and Chainalysis Partner to Unify Digital Intelligence and Blockchain Data in One Investigation Workflow
Penlink and Chainalysis have partnered to bring blockchain intelligence directly into Penlink's digital intelligence platform, giving investigators a single workflow that connects on-chain activity to identities, communications, and locations. The post Penlink and Chainalysis Partner to Unify Digital Intelligence and Blockchain Data in One Investigation Workflow appeared first on Penlink.
swampUP 2026 Preview: The Trust Layer for the Agentic Software Supply Chain
Malicious packages and AI assets have grown 7.4x in the last three years. And yet, four out of five enterprises have no governance framework for coding agents. The software supply chain has become agentic, yet most enterprises are still securing and governing it with the manual systems from the last era. This moment requires a …
What Are the Best Data Privacy Compliance Tools for Mid-Sized Organizations?
Data privacy tools handle consent and mapping, but most ignore the data itself. Discover the third tool category you need to stop leaks.
Your Data Lives Everywhere. Your Security Doesn’t Have To.
Why modern enterprises need to move beyond fragmented data security toward unified visibility, governance, and protection. The post Your Data Lives Everywhere. Your Security Doesn’t Have To. appeared first on ALTR | Automated Data Access Governance and Security.
npm Stealer Reads Its C2 From an Ethereum Contract
Netskope Threat Labs identified and analyzed 28 malicious npm package versions published across four unrelated enterprise namespaces (@servicetitan, @or-sdk, @onereach, and @umacloud) on 2026-08-04. The packages arrived in two rapid bursts: the @or-sdk and @onereach packages at 10:39 UTC, the @servicetitan packages two minutes later at 10:41 UTC, and @umacloud/knowledge nearly three hours after that […]
How Austrian Defence Companies Handle Classified Data Sharing
Austria's defence sector operates under stringent security requirements, where a single breach could compromise national security operations. Defence companies must navigate complex regulatory frameworks whilst maintaining operational efficiency and enabling secure collaboration with government agencies, international partners, and supply chain vendors. Austrian defence organisations face the dual challenge of protecting highly sensitive military data whilst Read more...
Advisory Alert: Defending Critical Infrastructure Against Industrial Control System Attacks
Reading Time: 5 minsA new FBI warning reveals cyberattacks on U.S. water systems have caused physical shutdowns. Discover how to defend your Operational Technology with Lumu. The post Advisory Alert: Defending Critical Infrastructure Against Industrial Control System Attacks appeared first on Lumu Technologies.
NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
We are actively investigating a coordinated malware campaign affecting a broad set of highly downloaded packages by Jared Wray (GitHub) and affecting the cacheable ecosystem.
Control before consequence: Governing enterprise email with Zoho Mail rules
At 9:17 AM, the CFO receives an email.It looks legitimate.It references an ongoing vendor payment.It uses the correct company logo.It even matches the tone of previous conversations.The attachment?Updated_Invoice.xlsmLooks routine. Nothing about it screams danger.Except it isn’t.In another part of the organization, a sales executive is about to...
Active exploitation of N-able N-central authentication bypass flaw
Update: On August 6, 2026, N-able released N-central 2026.3.1.10 (Hotfix 2), which supersedes 2026.3.1.7 (Hotfix 1) and is required even for organizations that already installed Hotfix 1.
Managed Detection and Response: Why Modern Security Needs More Than Alert
Cyber attacks are becoming faster, more complex and increasingly difficult to detect using traditional security controls alone. For organisations with large, distributed and increasingly complex IT environments, the challenge is no longer simply collecting security alerts. Security teams need to understand what is happening across the environment, which activity is abnormal, and whether apparently isolated […]
ChainDrop: The Mini Shai Hulud npm worm’s latest wave hits keyv and cacheable
A self-propagating npm worm hit keyv, cacheable, and hundreds of dependent packages to steal CI/CD, cloud, and API credentials. Here's what to do now.
FileCloud Product Award – 2026 Q2 Products That Count
FileCloud Wins Products That Count 2026 Q2 Product Award FileCloud has been named a winner of the 2026 Q2 Product Awards from Products That Count, earning recognition alongside notable products working across cybersecurity, financial technology, and healthcare. This FileCloud Product Award is an important milestone for our team, but it represents more than an industry […] The post FileCloud Product Award – 2026 Q2 Products That Count appeared first on FileCloud blog.
What’s Hiding Inside Your Salesforce Flows?
As organizations rely more on Salesforce Flows, security risks are moving beyond Apex code. Discover the common vulnerabilities hidden in declarative automation and why comprehensive Salesforce security must include Flow scanning. The post What’s Hiding Inside Your Salesforce Flows? first appeared on DigitSec. The post What’s Hiding Inside Your Salesforce Flows? appeared first on DigitSec.
Two Threats, One Weakness: What the Minnesota Water Attacks and Rogue AI Agents Have in Common
Over a single weekend in late July, more than 30 water and wastewater utilities across Minnesota lost control of their operational technology. In Braham, MN, […] Source
AI Security Posture Management (AI-SPM) in Focus
More businesses are using artificial intelligence, like autonomous AI agents, to handle day-to-day tasks like scheduling meetings, updating CRMs, and generating reports. While these systems help teams save … The post AI Security Posture Management (AI-SPM) in Focus appeared first on BigID.
Choosing Remote Work Software Compliance Solutions: Top 10 Compared
TL;DR: Remote work compliance software keeps regulated data protected across unmanaged devices and networks. Best overall for BYOD compliance: Venn (Blue Border). Also strong: Zscaler Private Access, Box, and Cloudflare Zero Trust, depending on whether your priority is access, content, or network control. What is Remote Work Software? Remote work software refers to digital tools and […] The post Choosing Remote Work Software Compliance Solutions: Top 10 Compared appeared first on Venn
Choosing Remote Work Software Compliance Solutions: Top 10 Compared
TL;DR: Remote work compliance software keeps regulated data protected across unmanaged devices and networks. Best overall for BYOD compliance: Venn (Blue Border). Also strong: Zscaler Private Access, Box, and Cloudflare Zero Trust, depending on whether your priority is access, content, or network control. What is Remote Work Software? Remote work software refers to digital tools and […] The post Choosing Remote Work Software Compliance Solutions: Top 10 Compared appeared first on Venn