Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,873 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1
Jamf recognized in Endpoint Management Tools Voice of the Customer: Gartner Peer Insights™ Customers’ Choice 2026
Jamf is named a Customers’ Choice in Gartner Peer Insights™ 2026 Voice of the Customer for Endpoint Management Tools.
NIST AI 600-1: Generative AI Profile
As enterprises race to adopt generative AI, boards, regulators, and auditors are asking a harder question about how to prove the technology is being used safely. NIST AI 600-1, the Generative AI Profile, has become the reference point many enterprises reach for first, offering a shared vocabulary and a structured set of actions for managing... Read more » The post NIST AI 600-1: Generative AI Profile appeared first on WitnessAI.
Jason Haddix: Stop fearing AI pentesting
Jason Haddix on why manual pentesting can't keep up, what disappears first, and why human methodology is what makes AI pentesting work Category: Guides & Best Practices
The AI-Powered GP, Part Two: Building an Operating Model That Enables Growth
The AI-Powered GP, Part Two: Building an Operating Model That Enables Growth Off owen.dudley Tue, 09/08/2026 - 18:43 AI can help GPs build more scalable operations, leverage institutional knowledge and stay focused on delivering returns. Alternative Investments Off Blog Capital Raising Global Read more Read Time 0 Video Popup Content Off Hide Read Time Off Industry Alternative Investments
AI data retention in 2026: ChatGPT, Claude, and Gemini
AI data retention windows now run from zero to five years. The window that applies depends on the vendor, the product tier, the endpoint, and whether the user opted in. ChatGPT, Claude, and Gemini all rewrote their rules between 2025 and 2026, and Anthropic did it twice. Every one of them stores the prompts your... Read more » The post AI data retention in 2026: ChatGPT, Claude, and Gemini appeared first on WitnessAI.
Neeve Speaking at PropTech Connect Europe 2026 in London
The Neeve team is at PropTech Connect Europe 2026, taking place at the InterContinental London – The O2. As Europe’s largest real estate technology event, PropTech Connect brings together industry leaders, asset managers, and technology innovators to explore the future of smart buildings, operational AI, and enterprise cyber protection.
The September 2026 Security Update Review
Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an extended break from your regularly scheduled activities as we take a look at the latest security patches from Adobe and Microsoft. If you’d rather watch the full video recap covering the entire release, you can check it out here: Adobe Patches for September 2026For the first pa
AI Agent Access Control Belongs at the Data Layer, Not the System Prompt
A system prompt telling your AI agent to show users only the data they’re cleared to see is not a security control. It’s a suggestion, written in English, sitting in the same context window as every other piece of text the agent processes, and suggestions get bypassed. That is not a provocative claim anymore. It Read more...
Your AI Agent Knows the Rules. That Doesn’t Mean It Will Follow Them
AI agents are being given more responsibility inside business environments. They can interact with applications, access data, call APIs, use tools, and complete multistep tasks with limited human involvement. Every additional capability creates another decision an organization must make about what the agent should be allowed to do. Recent research shows why those decisions need […] The post Your AI Agent Knows the Rules. That Doesn’t Mean It Will Follow Them appeared first on Carson
Skyhawk Security mentioned in Gartner® Research: Emerging Tech: AI Vendor Race — Avoid the Intelligent Simulation Tech Trap With Targeted Business Outcomes
Skyhawk Security has been named a Sample Vendor in Gartner® research, Emerging Tech: AI Vendor Race — Avoid the Intelligent Simulation Tech Trap With Targeted Business Outcomes. The company offers Intelligent Simulation capabilities, the technology at the heart of our mission to help organizations prevent cloud breaches. The problem: a clean dashboard is not a […] The post Skyhawk Security mentioned in Gartner® Research: Emerging Tech: AI Vendor Race — Avoid the Intelligent Simulation Tech
SAP Security Notes, September 2026
SAP Security Note 3747649 addresses CVE-2026-44756, a critical vulnerability known as OVERPASS, affecting SAP Extended Passport (EPP) Processing within the SAP kernel. Extended Passport is a tracing mechanism used by SAP applications and infrastructure components to track requests across distributed SAP landscapes. The vulnerability arises from insufficient boundary validation during the processing of EPP data, […] The post SAP Security Notes, September 2026 appeared first on Layer Seven S
Alert Prioritization in Security Operations: How Fidelis Helps Focus on the Threats That Matter
Learn alert prioritization best practices and see how Fidelis Elevate XDR and Fidelis Network NDR help SOCs cut alert fatigue and focus on real threats. The post Alert Prioritization in Security Operations: How Fidelis Helps Focus on the Threats That Matter appeared first on Fidelis Security.
7 privacy tools experts actually use
Explore privacy tools that privacy experts use for everyda, from GrapheneOS and Organic Maps to Qubes OS, F-Droid, Cape, Tor, and VPNs.
AppSec Overflow 2026: the numbers behind a broken model
For twenty years, application security has run on the recipe: Find the vulnerabilities, decide which ones matter, and fix them before someone exploits them. It has mostly worked up until now, but it doesn’t anymore, and AI is the reason.
AuthMind Extends Real-Time Agentic AI and Non-Human Identity Protection with IBM Vault, Deepening Value for Joint Customers
BETHESDA, Md. — September 8, 2026 — AuthMind, the leader in identity observability-driven Agentic AI, NHI and user threat protection, today announced new capabilities within its Identity Observability & Protection Platform that extend governance, risk detection and real-time remediation to agentic AI and non-human identities (NHIs) operating alongside IBM Vault. Agentic AI is multiplying the number of non-human identities, and the secrets they rely on, creating security challenges that no...
Who—or What—Changed That File? File Change Monitoring for Modern Security
File change monitoring can tell organizations much more than whether an important file was modified. Modern file integrity monitoring (FIM) can provide valuable event data about what changed, when and where it happened, and who or what was responsible. Combined with real-time monitoring and other security telemetry, this information can help security, IT, OT, and […] The post Who—or What—Changed That File? File Change Monitoring for Modern Security appeared first on Atomicorp -- Own Your S
Optery Joins Surfshark Group to Accelerate Personal Data Protection, Remains Standalone Company
Optery is officially joining the Surfshark Group – uniting an ecosystem of privacy and security brands such as Incogni, Ironwall, HeyPolo, and now Optery. This marks an exciting new chapter in our mission to put individuals, families, and businesses in control of their data. As part of an established cybersecurity ecosystem, we plan to accelerateContinue reading "Optery Joins Surfshark Group to Accelerate Personal Data Protection, Remains Standalone Company" The post Optery Joins Surfshark
Claude Mythos 5 is coming to Tenable One, powering the new “Adversary View”
Tenable is bringing Anthropic’s Claude Mythos 5 into our enterprise security offerings. Adding frontier adversarial reasoning to the Tenable One Exposure Management Platform will help customers better anticipate how attackers could breach their environments and stay ahead of AI-fueled risk. Tenable One Adversary View, the first innovation planned from this work, will debut in the coming weeks.Key takeawaysClaude Mythos 5 is coming to Tenable One. In addition to using Claude Mythos 5 for research
Agentic IAM Day 2026 | Virtual Summit
The post Agentic IAM Day 2026 | Virtual Summit appeared first on PlainID.
Tenable to Bring Claude Mythos 5 into the Tenable One Exposure Management Platform
Tenable® Holdings, Inc. (NASDAQ: TENB), the exposure management company, today announced it is bringing Anthropic’s Claude Mythos 5 directly into the Tenable One Exposure Management Platform. As adversaries use AI to move faster and operate at greater scale, defenders need equally advanced capabilities to stay ahead. This integration between Tenable and Mythos 5 will bring frontier cyber reasoning into Tenable One, enabling a new generation of AI-powered capabilities across exposure management.T
2026 State of the Internet: The Exposure Notification Gap in ICS Devices
70% of Internet-Exposed ICS Hosts Are on Consumer and Mobile Networks Approximately 70% of the roughly 134,000 Internet-exposed ICS hosts Censys observes globally sit on consumer and mobile networks.  This creates a security problem that goes beyond exposure. When industrial control systems (ICS) are connected through mobile networks, registration data often points to the telecommunications […] The post 2026 State of the Internet: The Exposure Notification Gap in ICS Devices appeared
The BYOD Middle Ground: Enforcing AI Policy Without Managing the Endpoint
Enforce corporate AI policy on unmanaged BYOD laptops without device enrollment, endpoint agents, or trust-based policy. Here’s the architecture that works. Key takeaways By Yaniv Levi, Solution Architect, Red Access The AI tool is approved. The policy is written. And now someone has opened the corporate ChatGPT account from a laptop the company has never […] The post The BYOD Middle Ground: Enforcing AI Policy Without Managing the Endpoint appeared first on RedAccess.
Claude didn’t go rogue. Permissions did.
The PocketOS incident is being told as a story about a coding agent that went off the rails, but that is not the true extent of the tale. It is a story about a long-lived API token with no scoping, no expiry, no approval gate, and no separation between production and backup, sitting where any sufficiently curious actor could find it. The post Claude didn’t go rogue. Permissions did. appeared first on P0 Security.
Cloud Transformation Strategy, Benefits & Best Practices
Key Takeaways Cloud transformation is the change an organization makes to how it builds, runs, and funds software once its workloads live in cloud computing environments. It covers the move itself and what the move was meant to enable. Deployment practices change, capacity decisions change, and so does ownership of what breaks at 2 am. […] The post Cloud Transformation Strategy, Benefits & Best Practices appeared first on Orca Security.
EDR Stock: Navigating the Future of Entertainment & Media Investments
With cyberattacks making headlines almost weekly and enterprise security budgets climbing every year, it’s no surprise that investors are increasingly searching for the right EDR stock to add to their portfolio. Endpoint Detection and Response has become one of the fastest-growing categories within cybersecurity, and the publicly traded companies building these tools have drawn significant […]
Opsin named in 2026 Gartner® Emerging Tech: Provider Strategy Trends Advancing Agentic AI Security Adoption
News
What is Cloud Security?
Forecasts predict the global cloud security market will grow from an estimated $46.16 billion in 2026 to approximately $133.39 billion by 2035. At a time when cloud computing represents a requirement for competitive advantage, understanding cloud security is paramount to any organization and tech leader. Cloud security encompasses the technologies and practices that protect your […] The post What is Cloud Security? appeared first on Orca Security.
AI Investment Is Outpacing AI Governance: Why Organizations Need AI Incident Readiness
Learn how AI incident readiness helps organizations assess, investigate, respond to, and document AI risks beyond traditional governance programs. The post AI Investment Is Outpacing AI Governance: Why Organizations Need AI Incident Readiness appeared first on RadarFirst.
NetNTLMv1 Is Dead. Long Live NetNTLMv1.
Fitting lossless rainbow tables on a 4 TB disk and cracking NetNTLMv1 with WebGPU and ntlmrain. Google’s release of the NetNTLMv1 rainbow tables made it much more practical to recover an NT hash from a NetNTLMv1 response captured with the fixed challenge 1122334455667788, further reducing the needed compute power. NetNTLMv1 cracking is a problem I’ve kept returning to over the past several years. The recent table release prompted me to explore whether the process could be made cheape
Compromised Flutter package on pub.dev contains XCSSET malware
We detected XCSSET malware inside a compromised Flutter package on pub.dev. Here is a full breakdown of the infection chain, propagation modules, and stealer logic we found inside. Category: Vulnerabilities & Threats
Session Theft Is Evolving Into Session Operation
Session hijacking is evolving. Attackers now operate the session where it renders – same device, same IP, same user. Here’s why the old detections miss it. Key takeaways The model we’ve been defending against For most of the last decade, “session hijacking” meant a specific mechanic. Malware or a malicious extension lifted a cookie off […] The post Session Theft Is Evolving Into Session Operation appeared first on RedAccess.
GPUThor: an evolution of the Rowhammer idea
Canadian researchers have demonstrated GPUThor — a Rowhammer attack that in theory can bypass the ECC memory protection.
How I cut coding agent costs with model and harness routing
By routing planning, exploration, implementation, and review to different models, I reduced one recurring coding-agent workflow from roughly $100 to $15-$20 per run. The post How I cut coding agent costs with model and harness routing appeared first on Arize AI.
DefCon 2026: The Sandbox Is a Suggestion: Breaking Claude Code, Gemini CLI, and Codex Sandboxes
How we broke the default sandboxes in Claude Code, Gemini CLI, and Codex — leaking credentials from all three, including a CVSS 10.0 chain. DefCon 2026 research. The post DefCon 2026: The Sandbox Is a Suggestion: Breaking Claude Code, Gemini CLI, and Codex Sandboxes appeared first on Novee.
MCP Governance: What the OWASP Framework Requires, and Where Enforcement Has to Live
Most enterprises did not decide to adopt the Model Context Protocol. Engineers did, one mcp.json file at a time. The result is a class of asset that reads internal wikis, opens pull requests, queries production databases, and posts to Slack — at machine speed, often without a human seeing the intermediate steps. MCP governance is the discipline of answering one question before that happens: should this MCP server be allowed in our environment, and under what controls? In 2026, that question fina
Grok Bot Is Powerful, Not Enterprise-Ready
Grok Bot can do anything your account can do, with no enforced policy and no trusted record. Why that fails an enterprise review, and what vendors owe agents.
DefCon 2026: No Prompt Required: Pre-Task RCE in Google Gemini CLI
How a CVSS 10.0 pre-task RCE in Google Gemini CLI ran attacker code before the sandbox started. No prompt injection required. Full DefCon 2026 research. The post DefCon 2026: No Prompt Required: Pre-Task RCE in Google Gemini CLI appeared first on Novee.
How Physical AI Challenges Traditional Security Assumptions for Autonomous Systems
Physical AI changes OT security assumptions, making behavioral verification essential when an air gap is not practical and response time is limited.