Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,924 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
What CISOs Expect from an Enterprise Browser
CISOs aren't evaluating enterprise browsers as incremental tools. Here's the bar they're setting, and why traditional security stacks can't meet it.
The Generator Can't Be the Validator: What OpenAI's Hugging Face Incident Proves About AI Security
OpenAI’s Hugging Face incident is a wake-up call: AI systems can escape their own test harnesses, and vendors can’t be the only ones validating safety.
Elastic Cloud Serverless: Ongoing multicontinent expansion
Elastic announces the availability of Elastic Cloud Serverless in two additional Azure regions and two additional Google Cloud regions. Elastic meets customers where their data is — all around the globe.
Response to CISA Advisory (AA26-204A): Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suite
AttackIQ introduced the following scenarios in response to the recently published CISA Advisory (AA26-204A), which details how the Russian state-sponsored adversary known as Laundry Bear has targeted and compromised government and commercial organizations across Western countries through the exploitation of the Zimbra Collaboration Suite (ZCS) since at least July 2025. The post Response to CISA Advisory (AA26-204A): Russian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users o
Fast Remediation Is the New Trust Model: JFrog and OpenAI Collaboration on Zero-Day Security Findings
UPDATE August 5, 2026: This week at Black Hat USA, the OpenAI team presented a detailed reconstruction of the chain of events behind the Hugging Face incident. I was glad to watch OpenAI speaking openly about it. This kind of transparency reflects the same spirit of collaboration we experienced working with their team behind the …
Finosec Forward: $8,000 to Folds of Honor
Every scholarship Folds of Honor delivers is for a family that gave something enormous. The organization provides educational scholarships to the families of fallen and disabled military service members and first responders, year-round. Over the Fourth of July weekend, Finosec donated $8,000 to that mission. How the number was built Here’s the part we love […]
Why Enterprises Trust CERT-In Empanelled Auditors for High-Risk Environments?
In this blog, we will discuss what qualifies as a high-risk environment, why these environments require specialized security assessments, why enterprises trust CERT-In empanelled auditors for security audit of their High-Risk Environments, and risks of hiring Non-Empanelled Auditors in these cases.  What Are High-Risk Environments?  All IT environments don’t carry the same level of risk. Some systems process sensitive information, […]
What Is an Audit Management Platform and How Does It Fit With Your GRC Tool?
Compliance programs typically run on two different kinds of software. A GRC platform manages your compliance program including the continuous, internal work of keeping controls, policies, and risks in order year-round. An audit management platform manages your audit and is the structured engagement between your organization and your audit firm, from kickoff through final report. […] The post What Is an Audit Management Platform and How Does It Fit With Your GRC Tool? appeared first on A-LI
When AI Connects to Health Records, Privacy Governance Must Become Incident-Ready
As ChatGPT connects to health records, healthcare leaders need unified AI and privacy incident management to assess risk and respond defensibly. The post When AI Connects to Health Records, Privacy Governance Must Become Incident-Ready appeared first on RadarFirst.
Executive Guide: Securing Microsoft Copilot Deployments
Quick Guides
Windows Tracks You With a Hidden ID. So We Built deGDID to Block It.
Windows has obvious identifiers, like your computer name, and less obvious ones buried in Microsoft's identity systems. One of the more interesting ones is the Global Device Identifier, or GDID: a Microsoft-issued identifier tied to a Windows installation.GDID is not new, but it recently got dragged into
Risk, Return, and Remediation: An Investment Strategy for Application Security
Learn why a hybrid application security strategy combining deterministic tools and AI delivers better protection, lower costs, and faster remediation for AI-generated code.
Why eBPF Is Useful for Watching and Sandboxing AI Agents
Most of our runtime security habits were built for deterministic workloads. A service does what its code says: review the code, sign the image, and its behavior is bounded. Agents are different. An agent’s behavior... The post Why eBPF Is Useful for Watching and Sandboxing AI Agents appeared first on Tigera.
Azure VM Command Execution using Third-Party Extensions – Salt Minion
In part two of our series, learn how attackers can leverage this legitimate tool to achieve undetected, arbitrary code execution as root, and explore the key detection methods you need to protect your Linux and Windows environments. The post Azure VM Command Execution using Third-Party Extensions – Salt Minion appeared first on NetSPI.
Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender
In July 2026, an OpenAI model escaped its evaluation sandbox and broke into Hugging Face's production infrastructure. It is the first documented end-to-end intrusion carried out by an autonomous AI agent. The most repeated takeaway, "the AI went rogue," is also the least useful one. The real lessons are about containment engineering, about who is [...] The post Lessons from the OpenAI and Hugging Face Incident: When Safety Filters Disarm the Defender appeared first on Wallarm.
What the CMMC Phase II Suspension Means for MSPs and Their DIB Customers | Todyl
The Department of War has updated their requirements for CMMC Phase II Read this blog to see how you can prepare your defense contractor clients for the changes.
CMMC 2.0 Compliance Guide for MSPs Serving DoD Contractors | Todyl
MSPs helping DoD contractors achieve CMMC 2.0 compliance need a clear scope, defined responsibilities, and the right security stack. Here is your practical guide.
Iranian-Affiliated Actors Expand PLC Targeting to Siemens and Schneider Electric: What CISA’s Updated Advisory Means for CNI
Key Takeaways On 22 July 2026, CISA, the FBI, NSA, and five other US agencies updated joint advisory AA26-097A, expanding the scope of an ongoing Iranian-affiliated campaign against internet-exposed PLCs from Rockwell Automation to now include Schneider Electric and Siemens devices [1]. The update adds a new exfiltration technique (MITRE ATT&CK T1041): actors are using vendors’ own legitimate engineering software to steal PLC project files from victim environments [1]. At one confirmed US vi
What retail enterprises should demand from an AI control plane
AI agents are already repricing products, replenishing inventory, and triaging contact center queues in production, and many are touching customer purchase history and pricing engines before any policy exists to …
What financial services firms should demand from an AI control plane
AI agents are already in production at financial services firms, and many are touching customer data and regulated records before any governance policy exists to control them. Our new AI …
Mobile devices and insider threat investigations: Why access keeps getting harder
Mobile devices are playing an increasingly important role in insider threat investigations. As mobile access becomes more challenging, DFIR teams need effective ways to collect relevant evidence while protecting employee privacy. The post Mobile devices and insider threat investigations: Why access keeps getting harder appeared first on Magnet Forensics.
Governed Data Foundation for Data & AI Teams
Governed Data Foundation for Data & AI Teams AI is only as trustworthy as the data behind it. FileOrbis gives data and AI teams a governed, content-aware data layer, classifying, permissioning, and protecting every file before it reaches a model, so you can accelerate AI initiatives without leaking sensitive data or losing control [...] The post Governed Data Foundation for Data & AI Teams appeared first on FileOrbis.
ClickFix on macOS: how the Terminal-based attack works, and how to protect yourself | Kaspersky official blog
We break down how ClickFix works on macOS: why attackers trick users into running commands in Terminal, what data the malware steals, and how to protect your device.
Optimized CyberVault Integration with CohesityOS 7.4
Nearly nine months after launching Cyber Vault for Cohesity, 11:11 Systems continues to advance a cost- and performance-optimized solution for moving a copy of Cohesity backups offsite into immutable AWS… The post Optimized CyberVault Integration with CohesityOS 7.4 appeared first on 11:11 Systems.
NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline
For government contractors and MSPs that store, process, or transmit Controlled Unclassified Information (CUI), NIST SP 800-171 Rev. 3, published on May 14, 2024, provides a modern framework for strengthening security while preparing them for evolving federal cybersecurity requirements, including those that may be reflected in future CMMC and FedRAMP updates. Atomicorp delivers the endpoint […] The post NIST SP 800-171 Rev. 3: The Current Modern CUI Baseline appeared first on Atomicorp --
How Tamnoon Determines Cloud Asset Ownership
A remediation plan is only as good as your ability to find who owns the fix. Does this sound familiar? A finding gets investigated, a fix gets planned, and then it waits because the ticket landed with the wrong person or with no one at all. In most organizations, ownership is where remediation stalls. Even […] The post How Tamnoon Determines Cloud Asset Ownership appeared first on Tamnoon.
Back-to-Back: G2 Users Name Opsera a High Performer Again in Summer 2026
As the AI revolution continues to throw software development into hyperdrive, we’re working relentlessly to redefine how organizations govern and...
Why Sovereign AI Demands Private Cloud
Why Sovereign AI Demands Private Cloud caro2698 Mon, 07/27/2026 - 13:28 AI Insights Why Sovereign AI Demands Private Cloud July 28, 2026 by Amine Badaoui, Senior Manager — AI/HPC Product Engineering, Rackspace Technology and Simon Bennett, Chief Technology Officer, EMEA, Rackspace Technology Link Copied! Recent Posts Who controls the intelligence your AI creates? October 13th, 2026 AI, Digital Maturity and Resilience at HTN Live Leeds October 7th, 2026 How Upfront Work Makes Healthcare Migration
Why Healthcare Staff Are the Ultimate Target
Discover why healthcare CISOs must evolve beyond static HIPAA compliance to dynamic Social Engineering Defense (SED) and multi-channel risk management.
What Are the Best Enterprise File Encryption Solutions in 2026?
How do Virtru, Kiteworks, Purview, Seclore, and Theodosian compare on file encryption? Discover what each platform actually protects.
Modica Group Joins Shush as Network Authentication Demand Partner
Leading CPaaS provider Modica Group joins the Shush Sherlock partner ecosystem to deliver GSMA CAMARA-compliant network authentication APIs to enterprise customers across the Asia-Pacific region
Shush Inc. Signs Modica Group as Demand Partner to Accelerate Network Authentication Across Oceania, Asia and Latin America
Leading CPaaS provider Modica Group joins the Shush Sherlock partner ecosystem to deliver GSMA CAMARA-compliant network authentication APIs to enterprise customers across the Asia-Pacific region
State of AI in Healthcare: Who Defines Trustworthy AI?
The post State of AI in Healthcare: Who Defines Trustworthy AI? appeared first on Clearwater.
From Commitment to Execution: Operationalizing AI Governance in Healthcare
The post From Commitment to Execution: Operationalizing AI Governance in Healthcare appeared first on Clearwater.
Opsin Now Governs Claude Deployments Through Claude's Compliance API
News
Opsin Reports Strong 2026 Momentum in Enterprise Agent Security
News
A Record vs. CNAME: What’s the difference (and when to use each)?
Confused about DNS records? Understand when to use A records vs CNAMEs with examples and practical scenarios. The post A Record vs. CNAME: What’s the difference (and when to use each)? first appeared on Valimail.
When the Attackers Bring AI: 2026 Healthcare Threats in Plain View
The post When the Attackers Bring AI: 2026 Healthcare Threats in Plain View appeared first on Clearwater.
Faces of Optery: Chen Atlas
Faces of Optery is a series highlighting the people behind Optery’s mission to help individuals, families, and businesses take back control over exposed personal data. Building Reliable, Scalable, and Secure Technology: Meet Optery’s CTO and Co-Founder  In this story, CTO and Co-Founder Chen Atlas shares why he helped create Optery, how customer experiences reinforce theContinue reading "Faces of Optery: Chen Atlas" The post Faces of Optery: Chen Atlas appeared first on Optery.