Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
24,042 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Frontier AI on the Defender’s Side of the Application Cybersecurity has always been an asymmetric fight. Attackers only need one successful entry point, while defenders must secure everything. AI is accelerating that imbalance. The same frontier models that can help identify vulnerabilities, analyze malware, reason through attack paths, and generate exploit strategies are now available to both attackers and defenders. The reality is that attackers are already experimenting with these capabilitie
Executive summary: Scaling a third-party risk management (TPRM) program requires more than adding tools or headcount. It involves strengthening core elements such as governance, repeatable workflows, and reassessment models, then redesigning intake, tiering, assessment paths, and decision authority to support higher volumes. As third-party counts grow, assessment capacity must increase without sacrificing oversight. Organizations use proportional scoping, federated ownership, standardized framew
In today’s automotive landscape, a vehicle isn’t just a product—it’s a software platform. With dozens of models, regional configurations, evolving feature sets, and constantly emerging compliance requirements, managing software for a modern fleet has become a problem of scale, speed, and precision. For global OEMs, this challenge comes to a head in variant management: how to efficiently develop and maintain software across hundreds of configurations, without fragmenting teams, slowing down...
Reveal Life Science — a world-renowned molecular cancer detection platform — claims top honors on Europe’s largest tech stage, its sovereign data infrastructure secured by Qohash, a Canadian champion in sensitive data protection at the source. PARIS — June 17, 2026 — Reveal Life Science, a Canadian medical technology company whose artificial intelligence platform detects […]
Executive summary:AI-powered vendor risk management (VRM) replaces slow, manual third-party reviews with structured, data-driven analysis. By combining natural language processing, machine learning, and continuous monitoring, organizations can automate questionnaire reviews, flag control gaps, and update risk scores quickly. Successful implementation requires clear risk definitions, clean vendor data, controlled pilot testing, and strong human oversight. With the right integration into procureme
More than 73,000 FortiGate VPN devices have reportedly been linked to credentials exposed in the recently disclosed FortiBleed dataset. Security teams are understandably focused on the leaked credentials. They should be equally focused on what happens next. A compromised VPN credential doesn’t create a breach on its own. A breach happens when an attacker uses [...] The post Active FortiBleed Campaign Underway: Can Attackers Reach Your Critical Assets? appeared first on RedSeal.
Dive into this real-world social engineering assessment where a fake anonymous tip and an adversary-in-the-middle framework tested the limits of an organization's security policies. The post I’m Just Asking Questions: Social Engineering as a Reporter appeared first on NetSPI.
Your team adopted AI coding agents. Now what? Learn why process redesign, context infrastructure, and code review matter more than raw AI-generated output.
What does it take to lead a security team effectively? Todyl's Director of MXDR shares his thoughts and gives the 5 key takeaways he's learned in balancing the art and science of SOC leadership.
Most vulnerability management platforms can find vulnerabilities. That is no longer the challenge. Today’s security teams are responsible for managing growing attack surfaces, supporting compliance initiatives, reporting on risk, and coordinating remediation across multiple departments. The real question is not whether a platform can identify vulnerabilities. It’s whether it helps teams act on them efficiently. […] The post What Security Teams Need from a Vulnerability Manageme
After Ditto’s “Art of Digital Identity” live experience, we explore how selective disclosure, EUDI and interoperable digital identity are reshaping trust. The Art of Digital Identity  At the recent Identity Week event, we asked delegates to do something simple: selectively disclose who they were. Not everything. Not the full picture. Just the details they wanted… The post The Art of Digital Identity appeared first on Ditto.
Generative AI and modern messaging platforms did not create a browser problem. They created a network security problem. ChatGPT, Microsoft... The post A Different Approach: Why the Answer to Browser Security Is Not a New Browser appeared first on Skyhigh Security.
Overview Earlier this year, a team at Praetorian was building Constantine, our automated 0-day discovery engine. I wanted to find techniques worth folding into it, so on the side I started poking at the FreeBSD kernel with Claude Code, running on Opus 4.6, which was the latest Opus model at the time. A few days […] The post FreeBSoD: Leveraging Language Models to Find and Exploit Kernel Bugs (Part 1 of 2) appeared first on Praetorian.
The short version: Event-based security looks at one action at a time and asks whether that single action is good or bad, which is the wrong question for AI agents that authenticate as real human employees and act at machine speed. The accurate way to catch a rogue agent is sequence-based anomaly detection, which learns […] The post We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us. appeared first on Reveal.
The short version: Event-based security looks at one action at a time and asks whether that single action is good or bad, which is the wrong question for AI agents that authenticate as real human employees and act at machine speed. The accurate way to catch a rogue agent is sequence-based anomaly detection, which learns […] The post We Spent Years Convincing People That Sequences Matter. Agents Ended the Argument for Us. appeared first on Reveal.
Most device management workflows still depend on tribal knowledge. An admin makes a change, documents it somewhere (maybe), and hopes the next person understands why it was done. At small scale, that’s manageable. At enterprise scale, it’s a risk.
One thing that has stood out to me over the years working around identity and security operations is how disconnected the two functions still are. IAM teams and SOC teams are often solving pieces of the same problem, but from completely different angles. IAM focuses on access, governance, policy, and lifecycle management. The SOC focuses […] The post Operationalizing Identity: SOC vs IAM appeared first on Reveal.
Attack simulation has become a familiar part of modern cybersecurity programs. For application security leaders and security architects, it offers a practical way to test assumptions, validate controls, and see... The post Why Attack Simulations Miss Business Logic Threats appeared first on VerSprite, Threat Modeling and Pentesting Services.
The Carolina Hurricanes know that success comes from preparation, teamwork, and strong defense. The same applies when it comes to protecting your business’ IT environment.   In today’s digital world, cyber threats are constantly evolving, making proactive cybersecurity more important than ever. One of the simplest yet most effective ways to stay protected is through […] The post The Best Defense Isn’t Just on the Ice appeared first on Blue Line Technologies, Inc..
Microsoft 365 retention policies tell you what to keep. They do not tell you where aging data should live, how to reduce primary storage costs, or how to recover inactive data quickly when the business needs it. That distinction matters as Microsoft 365 becomes the default repository for modern work. SharePoint, OneDrive, Exchange, and Teams […]
The security and compliance problem of disposable AI-generated code, and why validation must keep pace with autonomous generation. With Contributions from Claudionor Coelho (former Chief AI Officer at Zscaler) and […] The post Disposable Code, Durable Side Effects appeared first on Ridge Security.
Explore why intelligence is foundational to ACP decisioning to evaluate risk, establish trust, and surface unexpected outcomes in autonomous environments. The post How Intelligence Informs ACP Decisioning appeared first on zvelo.
A CMMC certificate proves you keep CUI confidential, not that you can recover it after ransomware. See the recovery evidence the standard never asks for.
Every faith-based organization is guided by a greater purpose than its buildings, programs, or operations.  Whether serving a local congregation, operating multiple… The post Protecting the mission starts with protecting the people appeared first on Everbridge.
Protopia AI's SafeCLAW makes inference safe for sensitive data, so the work that was previously paying the isolation tax can route to the multi-tenant factory like everything else. The post Useful Agentic AI Has Arrived appeared first on Protopia.
Map a ransomware recovery program to NIST CSF 2.0 across all six functions, and prove each one with evidence you can produce on demand, not just backups.
Before you can close compliance gaps, you need to find them. A compliance gap analysis—systematic, thorough, and documented—is the foundation of every successful compliance engagement. It identifies where a client's current security posture falls short of regulatory requirements, prioritizes the gaps by risk and effort, and produces a roadmap that makes remediation manageable.
On June 9, Anthropic launched its shiniest model yet. On June 12, the US government made them switch it off. For everyone. Worldwide.If you build security products for a living, that three-day arc should ruin your week, not just Anthropic's. The post When Someone Pulls the AI Plug appeared first on Pentera.
If you walked out of yesterday’s keynotes with your mind spinning about autonomous profile agents, CustomerLake, and real-time compute engines, you weren’t alone. Securing the Agentic Era: Inside Databricks Summit 2026 was on everyone’s mind as Databricks just officially kicked down the door to the “agentic era.” But let’s be real. When you hear about […] The post Securing the Agentic Era: Inside Databricks Summit 2026 appeared first on Trust3 AI.
If you walked out of yesterday’s keynotes with your mind spinning about autonomous profile agents, CustomerLake, and real-time compute engines, you weren’t alone. Securing the Agentic Era: Inside Databricks Summit 2026 was on everyone’s mind as Databricks just officially kicked down the door to the “agentic era.” But let’s be real. When you hear about […] The post Securing the Agentic Era: Inside Databricks Summit 2026 appeared first on Trust3 AI.
Security and vulnerability management teams are under pressure from two directions at once. AI is expanding the attack surface faster than most teams can track […] Source
