Guide to Cloud Application Security: Must-Knows and No-No’s | Huntress
Cloud application security keeps threat actors away from your data. We share practical ways to protect your apps and why it matters for your team today.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,948 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Tool Sprawl Is Dead: But Did Consolidation Actually Fix Anything?
TL;DR Platform consolidation reduces vendor management overhead and simplifies dashboards, but it doesn't solve the fundamental visibility problem. Security teams consolidating SAST, DAST, SCA and WAF into a unified application security platform still miss application-layer attacks because these tools don't see inside running applications. The math proves it: organizations face 17.5 new vulnerabilities per application monthly while remediating only 6 per application. Runtime intelligence provide
Knossos: Procedurally Generated Decoy Environments
How we built a procedural engine that learns your real cloud environment, generates decoy environments indistinguishable from production, and converts every attacker interaction into signal. In the myth, Daedalus built the Labyrinth of Knossos so well that he nearly couldn’t escape it himself. The corridors looked real. The paths felt purposeful. And the deeper you […] The post Knossos: Procedurally Generated Decoy Environments appeared first on Praetorian.
Why DMARC Belongs in Your 2027 Budget
For years, organisations have recognised the importance of email authentication. DMARC has appeared on risk registers, surfaced during audits, and discussed after phishing incidents. Yet it often remains stuck as “something we should get around to.”
OWASP MAScon Vienna Showed the Future of Mobile Application Security
What Happened at OWASP MAScon Vienna? The inaugural OWASP MAScon in Vienna, Austria, demonstrated what many in the mobile application security community already suspected: demand for a dedicated, deeply technical mobile AppSec conference is strong. Held as part of OWASP Global AppSec EU 2026 at the Austria Center Vienna, MAScon brought together mobile security researchers, […] The post OWASP MAScon Vienna Showed the Future of Mobile Application Security appeared first on NowSecure.
AI Governance Is Making Headlines, and It’s Just the Beginning.
Artificial intelligence is extending just changing how software is built to changing how cyber conflict, critical infrastructure, and enterprise risk are being discussed at the highest levels. A recent article in The Independent by Anthony Cuthberson (which has since been syndicated across major publications including Yahoo, AOL, and MSN, proving the urgency of this topic), examines what an AI-driven cyber conflict could look like as increasingly capable AI systems begin discovering vulnerabi
Axiado Recognized with 2026 Pinnacle Award for Zero Trust Innovation
As AI systems become larger, faster, and more distributed, trust can no longer begin with software alone. Increasingly, it needs to begin in the hardware, and that's exactly what the Trusted Control/Compute Unit was built to do. The post Axiado Recognized with 2026 Pinnacle Award for Zero Trust Innovation appeared first on Axiado Corporation.
SIEM Log Management With a Security Data Pipeline
SIEM log management works best before the SIEM. Normalize, filter, protect, and route logs in a security data pipeline so only high-value data reaches your SIEM. The post SIEM Log Management With a Security Data Pipeline appeared first on Realm Security.
Cyber Insurance Requirements Small Business: Compliance Guide
For many small businesses, the cyber insurance application is their first real compliance assessment. Insurers now ask specific, technical questions about MFA deployment, encryption coverage, patch management cadence, backup testing, and incident response planning—and they deny or restrict coverage when the answers fall short.
Threat Intelligence Snapshot: Week 27, 2026
Browser-Native Ransomware Abuse Path in DeepSeek-Attributed Sample | Iran and US Trade Attacks, Tanker Struck in Hormuz The post Threat Intelligence Snapshot: Week 27, 2026 appeared first on QuoIntelligence.
Your Security Platform Should Give You Confidence, Not More Questions
Security teams already operate in an environment filled with uncertainty. New vulnerabilities emerge daily. Threat actors constantly evolve their tactics. Compliance requirements change. Leadership expects clear answers about cyber risk, often with limited time and resources available to respond. The last thing a security team needs is uncertainty from the platform they’re relying on to […] The post Your Security Platform Should Give You Confidence, Not More Questions appeared first
Why The Hong Kong Securities and Futures Commission's AI Cyberattack Warning Demands Architectural Change
Why The Hong Kong Securities and Futures Commission's AI Cyberattack Warning Demands Architectural Change andrew.gertz@t… Thu, 07/02/2026 - 16:23 Learn why the Hong Kong SFC’s AI cyberattack warning signals a shift in cybersecurity, and how firms can strengthen identity, data, and application-layer controls. Compliance Application Encryption Richard Chiu | Sales Engineering Manager for Hong Kong More About This Author > In view of the increasing number of incidents involving AI models, the Ho
How to prevent ransomware: a practical guide for organisations
The post How to prevent ransomware: a practical guide for organisations appeared first on Guardey.
What is vishing? How voice phishing works and how to protect your organisation
The post What is vishing? How voice phishing works and how to protect your organisation appeared first on Guardey.
A Note from Chris
Hi everyone, The way we interact with software is changing. Over the past several months we’ve watched a growing number of security professionals spend less…
Hardware vs Software Encryption in Secure USBs and SSDs: What Is the Difference?
Compare hardware‑ and software‑based encryption in secure USB flash drives and SSDs, and understand the differences in security, performance, and use cases.
What is an audit? The complete guide for organisations
The post What is an audit? The complete guide for organisations appeared first on Guardey.
Your Risk Strategy Is Broken Without Resilience
Corporate performance depends on how well disruptions are managed. And these disruptions are more frequent, severe, and harder than ever to predict. The most effective business continuity plans are deeply intertwined with governance, risk, and compliance, where the disciplines work together for better decision-making, faster response, and synchronized priorities. Achieving that level of coordination, however, [...] The post Your Risk Strategy Is Broken Without Resilience appeared first on Riskon
CMMC Is No Longer a Solo Effort: Securing CUI Across the Supply Chain
A defense contractor can secure every system inside its own walls and still be exposed the moment it shares Controlled Unclassified Information (CUI) with a subcontractor that is not ready to protect it. CMMC was never only about your own compliance. It is about every company that handles the same sensitive data. That makes securing […] The post CMMC Is No Longer a Solo Effort: Securing CUI Across the Supply Chain appeared first on PreVeil.
Comment l’IA facilite la vie des acteurs de la menace
Du phishing à l’intrusion pilotée par IA : un glissement critique L’intégration des Large Language […] L’article Comment l’IA facilite la vie des acteurs de la menace est apparu en premier sur INTRINSEC.
How PlexTrac Helps MSSPs Build Recurring Revenue
Selling one-time pentests is hard to grow on. The market is crowded, the work is commoditized, and every engagement ends with a PDF and a quiet client until the next sale. The providers growing predictable revenue are shifting clients to continuous threat exposure management (CTEM), the operating model Gartner has made the reference point for... The post How PlexTrac Helps MSSPs Build Recurring Revenue appeared first on PlexTrac.
Ariège Pyrenees Healthcare Group
Ariège Pyrenees Healthcare Group Deployment of the new European eIDAS-compliant professional smart card, significantly strengthening security while enhancing the user experience. Get a demo Contact Us Given this context, cyberelements evolution allows us to guarantee compliance without compromising on user experience or the productivity of healthcare professionals. Security cannot undermine the practice of healthcare delivery. […] The post Ariège Pyrenees Healthcare Group appeared first on
Bièvre Isère Regional Authority
Bièvre Isere Regional Authority Secure identity management to accelerate employee onboarding Get a Demo Contact Us Challenges: > Streamline and simplify new employee onboarding processes> Maintain strict and secure access control for applications Solution : > cyberelements Identity Benefits: > Accelerated new employee onboarding> Significant time savings for the IT department> Strengthened security standards With […] The post Bièvre Isère Regional Authority appeared
Metz Jury Public Mental Health Service
Metz Jury Public Mental Health Service Elevating access management security while optimizing user experience Get a Demo Contact Us Challenges: > Address the challenges of the ambulatory care shift with secure remote access to electronic patient records> Reduce IT security exposure by implementing a Zero Trust strategy> Optimize user experience while simplifying IT operations for […] The post Metz Jury Public Mental Health Service appeared first on cyberelements.
Securing Android Apps: A Developer’s Complete Guide
Application security is not something you can bolt on at the end of development. It has to be designed, implemented, and reinforced across the software development lifecycle. That includes secure coding, testing, release controls, and protections that help defend shipped applications against reverse engineering, tampering, and runtime abuse. For many teams, that means combining development-time […]
How to Be a Smarter Token Manager: Model Routing, Explained
Two weeks of writing about AI token economics kept leading to the same corner: you cannot control what the vendors charge, only how wisely you […] The post How to Be a Smarter Token Manager: Model Routing, Explained appeared first on Olakai.
This Report from Gartner Defines the Software Supply Chain Security Market
Explore the new Gartner® Magic Quadrant™ for software supply chain security and learn why ReversingLabs is recognized.
The LMS Effect: What Identity Maturity Looks Like After a Breach
The Canvas incident is over. The question it raised is not. Every institution that experienced the disruption, or watched a peer navigate it, now has the same frame of reference: this is what the gap costs.
Maze Code found a Langfuse SSO bug. Are you affected? Find out how to fix it.
Langfuse has a setting called SSO enforcement, and it has one goal. Turn it on and nobody at your domain can log in except through your identity provider. Revoke a user in Okta at offboarding, and every other door closes. That sounds airtight. But it only holds on the login paths that enforce it. And […] The post Maze Code found a Langfuse SSO bug. Are you affected? Find out how to fix it. appeared first on Maze.
Decentralised Identity for Mega-Events: A New Model for World Cup Trust
The FIFA World Cup is more than a sporting competition. It is a temporary global economy built around identity, mobility, payments, access and trust. The 2026 tournament makes that economy more complex than ever: 48 teams, 104 matches and 16 host cities across Canada, Mexico and the United States. For organisers, that creates an extraordinary… The post Decentralised Identity for Mega-Events: A New Model for World Cup Trust appeared first on Ditto.
Your EMR Vendor May Be Your Biggest Security Blind Spot
Modern EMRs rely on an expanding network of vendors, cloud providers, and integrations, making ongoing vendor oversight just as important as securing your own environment. The post Your EMR Vendor May Be Your Biggest Security Blind Spot appeared first on Omega Systems.
DORA Threat-Led Penetration Testing: What article 26 actually requires
Annual penetration testing does not satisfy DORA's testing mandate. Here's what Article 26 actually requires, who it applies to, and what a real TLPT exercise looks like in practice. The post DORA Threat-Led Penetration Testing: What article 26 actually requires appeared first on CovertSwarm.
How to Explain Cyber Resilience to Management
Table of Contents Summary When critical services go offline, the impact goes well beyond IT. Revenue stops, customers lose confidence, and executives are forced to respond before the technical team has finished diagnosing the problem. This guide helps security teams translate DDoS risk into language management understands, starting with business exposure rather than technology, and [...] Read More... from How to Explain Cyber Resilience to Management The post How to Explain Cyber Resilience to M
Designing AI Workflows That Actually Work
Many AI Visionaries have found that successful AI implementations come down to some surprisingly grounded fundamentals: start small, define success, ask clear questions, and invest in your people as much as your tools.
Defending against the RoguePlanet vulnerability with Wazuh
Microsoft Defender is one of the most widely deployed security solutions, shipping out of the box with Windows 10, Windows 11, and Windows Server releases. A newly disclosed zero-day vulnerability, known as RoguePlanet (tracked as CVE-2026-50656), affects how Microsoft Defender handles specific file operations during malware remediation. Successful exploitation can allow an attacker with access […] The post Defending against the RoguePlanet vulnerability with Wazuh appeared first on Wazuh.
Top Agentic AI security resources — July 2026
July 2026's agentic AI security roundup: agentic zero trust whitepapers, AutoJack & other new exploits, and the newest agent defenses.
AWS Just Made Console Access Part of the Security Perimeter. Now Teams Need a Safe Way to Manage It
AWS Sign-In now enforces network-based console access. What changed, and how to enforce it safely across the organization without locking anyone out. The post AWS Just Made Console Access Part of the Security Perimeter. Now Teams Need a Safe Way to Manage It appeared first on Blast Security Preemptive Cloud Defense.
AI Governance for Small Business: Why Shadow AI Is Already in Your Workflows
BLOG ARTICLE Table of Contents AI governance for small business starts with knowing which AI tools your team uses and what sensitive data goes into them. But is that all there is to building a reliable governance plan? We look deeper in this guide, so keep reading. It’s not uncommon […] The post AI Governance for Small Business: Why Shadow AI Is Already in Your Workflows appeared first on Netrix Global.
Post-quantum cryptography: what it means for your credentials
The data your organisation encrypts today can be stolen today and decrypted later. It is an uncomfortable idea, and it is the reason post-quantum cryptography belongs on your plans now rather than later. Asymmetric cryptography, the RSA and elliptic curve (ECC) maths behind digital certificates, passkeys and the secure channels protecting your traffic, is safe […] The post Post-quantum cryptography: what it means for your credentials appeared first on Intercede.
EN 40000 Explained: The Technical Blueprint Behind the EU Cyber Resilience Act
The CRA sets the legal rules for product cybersecurity — EN 40000 is the technical blueprint for meeting them. Here's how the four-part standard works and why it matters for your compliance strategy.