Over-Refusal: When Your AI Agent Blocks Real Customers
Most red teaming asks if your agent can be broken. Over-refusal testing asks the opposite: how often it blocks a legitimate customer who did nothing wrong.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,873 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
ManageEngine Listed on the UK Government's G-Cloud 15 Framework
For public sector organisations, digital change is rarely just a question of new tech. It is also about finding solutions that are secure, effective, sustainable, and just as importantly, straightforward to procure. That is why we are delighted to announce that ManageEngine has been awarded a place on the UK Government’s G-Cloud 15... The post ManageEngine Listed on the UK Government's G-Cloud 15 Framework appeared first on ManageEngine Blog.
OneAuth + iOS 27: Login Smart With The Latest Foundation Model
We're used to doing certain things the same way every day.If a sign-in request arrives, we automatically approve or deny. We open the app and scroll through notifications to catch up on what happened. When we want to take an action in the app, we navigate through menus or help guides to figure out how to get it done.With foundation model and new...
Daily OT Security News: September 16, 2026
The latest IoT, OT, CPS, and ICS cybersecurity news, vulnerabilities, and key takeaways for September 16, 2026. The post Daily OT Security News: September 16, 2026 appeared first on Viakoo, Inc.
Crypto AML compliance: why Datos Insights named Unit21 the category winner
Datos Insights named Unit21 winner of the 2026 Impact Award for crypto/digital asset AML innovation. What was evaluated, what was cited, why it qualified.
Fraud and AML convergence: why Datos Insights recognized Unit21 in AI-Driven Innovation
Datos Insights recognized Unit21 for AI-driven innovation across fraud and AML. What was evaluated, what was cited, and why each capability qualified.
"Regex for Rows": Simplifying Pattern Detection in SQL with MATCH_RECOGNIZE
Imagine you work in cybersecurity and you have a table that tracks login attempts...
Google security advisory (AV26-926)
How to Scope an Enterprise Penetration Test: Free Scope-of-Work Template
A penetration testing scope defines the assurance an enterprise needs, not just the assets a vendor will touch. Start with the business or compliance objective, then map the system boundary before counting assets. List applications, APIs, infrastructure, roles and integrations separately, specify authenticated and unauthenticated testing, and clarify whether production, staging or both will be […] The post How to Scope an Enterprise Penetration Test: Free Scope-of-Work Template appeared fi
It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?
It is not always possible to patch vulnerabilities as quickly as hackers exploit them, but recent figures show just how much this gap has widened. FortiGuard Labs estimates that the time between the disclosure of a critical vulnerability and its active exploitation has dropped sharply to between 24 and 48 hours. By contrast, Verizon’s 2026 Data Breach Investigations Report shows that organizations take a median of 43 days to complete vulnerability remediation. As many leaders in the global finan
Memory-safe programming goes from advocacy to adoption
The coding languages shift — fueled by Microsoft, Google, and Amazon and enabled by AI coding — is driven by the quest for secure software.
CTEM Technology Evaluation Scorecard
Use the CTEM Technology Evaluation Scorecard to assess technologies across the CTEM operating model, score capabilities based on demonstrated evidence, and identify critical validation and verification gaps.
CISO’s CTEM Evaluation Checklist
Use the CISO’s CTEM Evaluation Checklist to assess whether technologies supporting your CTEM program can prove exploitability, demonstrate attack impact, verify remediation, and show measurable exposure reduction.
Meet Vector: Autonomous Red Teaming That Doesn't Stop at Exposed | Tuskira
Vector is Tuskira's autonomous red team agent. It probes your external attack surface the way an attacker would, then validates every finding against your deployed controls.
You Don't Have to Build Your Own AI to Get the Benefits of BYOAI
We've talked before about how Brinqa's API and MCP server let you bring your own AI into the platform. Point Claude, Copilot, or any MCP-compatible client at your Brinqa data, and perform many tasks. You can query your risk data, generate BQL from a natural language question, and
Why 12 European countries put their trust in Everbridge for public warning
Everbridge Public Warning brings modern and traditional channels together in one platform. Authorities can combine Cell Broadcast, location-based SMS and address-based SMS with television, radio, sirens, email, voice calls, social media, warning apps and digital signage. This multi-channel approach matters because no single method is universal. The post Why 12 European countries put their trust in Everbridge for public warning appeared first on Everbridge.
BTS #82 - Firmware Analysis, Linux Malware, Future of AI
Below the Surface episode 82 was recorded on September 10, 2026, with host Paul Asadoorian joined by Vlad Babkin and Chase Snyder. The conversation moves across several current security stories, but its center of gravity is clear: modern infrastructure depends on trust mechanisms that are useful, fragile, and often difficult to verify from the outside. […] The post BTS #82 - Firmware Analysis, Linux Malware, Future of AI appeared first on Eclypsium.
Quantum World Congress 2026, 23-25 September, College Park
Quantum World Congress runs 23 to 25 September at the University of Maryland in College Park, in a region now central to quantum benchmarking and deployment. IonQ is on site with a large delegation, including the quantum security and quantum networking team from IDQ. The post Quantum World Congress 2026, 23-25 September, College Park appeared first on ID Quantique.
Beyond model guardrails, part 1: containing the agent
AI agents have legitimate access to your systems and the ability to act on them. Learn how to keep your data protected with four AI controls.
Nobody Reviews Delete Permissions. That's How Clouds Get Erased.
Ask a security team which identities can read their most sensitive data and most will have an answer. Ask which identities can delete it, and the room goes quiet. That isn’t negligence. It’s how permissions get built. Access is granted around what a role needs to do, and the ability to destroy tends to arrive […]
QIDIS 2026, 13 October, Zurich
ID Quantique is proud to co-organize and participate in the Quantum Industry Day in Switzerland 2026, taking place on 13 October 2026 in Zurich. Held as part of Swiss Quantum Week, this event brings together academic and industrial leaders to accelerate real-world quantum innovation. The post QIDIS 2026, 13 October, Zurich appeared first on ID Quantique.
Streaming français depuis l'étranger : comment bien choisir son serveur CyberGhost VPN
Accéder à vos plateformes de streaming habituellement visionnées en France depuis l’étranger est possible. Pour cela, il vous faut finement paramétrer votre VPN. CyberGhost est une solution taillée pour répondre à ce besoin.
AI Agent Error Recovery: How to Detect, Protect, and Undo AI Agent Actions
Traditional software fails by producing the wrong answer. An AI agent fails by taking the wrong action. And, by the time anyone notices, the records are deleted, the permissions are revoked, and the change is live in production. The post AI Agent Error Recovery: How to Detect, Protect, and Undo AI Agent Actions appeared first on Veeam Software Official Blog.
What to Do First in an Incident Response Investigation
Learn the first steps of an Incident Response Investigation, from alert validation and threat analysis to timelines, scope of assessment, and response automation. The post What to Do First in an Incident Response Investigation appeared first on Fidelis Security.
From Encrypted Mobile Traffic to Payment Manipulation
How KomodoSec’s AigentX Penetration Tester reverse engineered client-side encryption, turned the bypass into reusable Burp tooling, and used that access to validate a real business-logic flaw in a production mobile application. Client-side secrecy failed. Server-side trust became the real vulnerability. THE CHALLENGE A mobile app with TLS, certificate pinning, and a second encryption layer. AigentX was used during an authorized assessment of an Android self-service application that enabled...
Best Dark Web Monitoring Services for Business | UpGuard
Discover the best dark web monitoring services for business. Compare top vendors against UpGuard and catch stolen credentials before attackers do.
Post-Quantum Benchmarks on the NXP i.MX95 and Toradex SMARC
We benchmarked wolfSSL’s post-quantum algorithms against OpenSSL on a Toradex SMARC iMX95 Hexa 8GB module running Torizon OS 7.7.0. Both stacks ran on the same silicon, one Cortex-A55 core, governor pinned at 1800 MHz, one second per measurement. Torizon ships OpenSSL 3.5.7, which has native ML-KEM and ML-DSA, so this compares two builds you can […]
The future of AI operations teams
Your agents produce more traces and eval results than your team can read. SallyAnn DeLucia on how engineering teams are restructuring around managed agents, and which work stays human. The post The future of AI operations teams appeared first on Arize AI.
You Can’t Govern What You Can’t Turn Off: The Kill-Switch Test Every AI Agent Should Pass
Nick Rowe Chief Executive Officer, Simeio September 16, 2026 As Chief Executive Officer (CEO), Nick Rowe is responsible for driving the overall vision and strategy for Simeio. Rowe brings over 20 years of experience in the information technology and cybersecurity industry to the company. Throughout his career, he has built and managed operations driving growth, […] The post You Can’t Govern What You Can’t Turn Off: The Kill-Switch Test Every AI Agent Should Pass appeared first
Oracle’s September patches put Fusion Middleware back in the hot seat
Oracle’s September 2026 Critical Security Patch Update has arrived with 673 new security patches spanning 17 Oracle product families, with Oracle E-Business Suite accounting for the largest share at 159 patches, followed by Fusion Middleware with 153. Of these, 19 E-Business Suite vulnerabilities and 78 Fusion Middleware vulnerabilities can be remotely exploited without authentication. Other product categories with 50 or more issues fixed in the rollout include Oracle Database Server, Oracle Com
AI agent authorization risks remain a gap in new NIST-CISA token security guidance
AI agents’ actions are out of scope for new guidance from US authorities on securing identity and access tokens, but there is still plenty enterprises can do to protect their systems from rogue humans and AI agents alike. “Protecting Tokens and Assertions from Forgery, Theft, and Misuse,” a new report from the National Institute of Standards and Technology (NIST) with help from the Cybersecurity and Infrastructure Security Agency (CISA), offers guidance for operators of systems that use digitall
Nobody built MCP servers to hold identity. They do anyway.
The identity plane your agents run on is whatever the last MCP server someone installed decided it should be. That is not the layer to leave to chance. The post Nobody built MCP servers to hold identity. They do anyway. appeared first on P0 Security.
NIST AI RMF 1.0: The AI Risk Management Framework | UpGuard
Master the NIST AI RMF 1.0 framework: Learn how to govern, map, measure, and manage AI risks to deploy trustworthy, safe, and responsible AI systems today.
Todyl Ranked #1 in SIEM, Cloud Edge Security, and Cloud Access Security Broker in G2's Fall 2026 Reports | Todyl
Todyl ranked #1 in 12 G2 Fall 2026 reports across SIEM, Cloud Edge Security, and CASB, part of 46 badges earned across 125 reports.
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity vendor said it has identified attacks mounted by NightEagle (aka APT-Q-95), a threat actor known to be active since at least 2023, that involve new techniques for persistence and lateral movement.
GovRAMP Expansion: Lazarus Alliance State Cloud Audits
GovRAMP Cloud Security Assessments and Verification GovRAMP provides a standardized, NIST-aligned framework for evaluating cloud products used by state, local, tribal, territorial, and educational organizations. The program helps public-sector organizations make risk-based procurement decisions using independently assessed security information. It also gives cloud service providers a reusable way to demonstrate their security posture across participating […] The post GovRAMP Expansion: Laz
ISO 42001 AI Governance with Continuum GRC Compliance Services
ISO 42001 establishes the first dedicated management system standard for artificial intelligence, enabling organizations to embed governance directly into AI development and deployment lifecycles. Continuum GRC delivers targeted compliance assessments that align ISO 42001 requirements with existing frameworks such as ISO 27001, NIST SP 800-53, and CMMC 2.0, helping CISOs and compliance officers reduce risk […] The post ISO 42001 AI Governance with Continuum GRC Compliance Services appeared
Shadow AI: The Employee Tools Quietly Handing Attackers Your Training Data
In April 2023, Samsung’s semiconductor division discovered that its own engineers had leaked confidential company data to ChatGPT three separate times in less than 20 days. One engineer pasted proprietary source code into the chatbot to ask it to find and fix a bug. A second uploaded confidential chip test sequences closely guarded because optimizing ... Shadow AI: The Employee Tools Quietly Handing Attackers Your Training Data The post Shadow AI: The Employee Tools Quietly Handing Attacke
Two Six Technologies Featured in Breaking Defense on the Future of Information Warfare
Information warfare is evolving rapidly as social media and artificial intelligence enable adversaries to create and distribute disinformation at unprecedented speed. In a new sponsored article published by Breaking Defense, Bobby Muscara, Associate Director for Europe at Two Six Technologies, examines how AI is reshaping the information environment and what it takes to respond effectively. […] The post Two Six Technologies Featured in Breaking Defense on the Future of Information Warfare
The Air-Gap Myth: A Hidden Vulnerability in Offshore Operations
Floating Production Storage and Offloading vessels (FPSOs) were once thought to be secure by default: physically isolated from external threats. But in today’s interconnected world, that assumption is not only outdated, it’s dangerous. A legacy belief that no longer holds The belief that offshore operational systems are “air-gapped” (cut off from the internet and secure […] The post The Air-Gap Myth: A Hidden Vulnerability in Offshore Operations appeared first on SIGA.