Case Study: Saving Time and Costs with No-Downtime Virtual Patching
A global financial services company applies virtual patches without code changes while vulnerable applications continue to run in production.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,833 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Case Study: Healthcare Technology Company Thwarts Crypto-Miners Attacking Oracle ERP
A leading provider of IT and mobility applications for US hospitals and health systems stops an active WebLogic deserialization attack on its PeopleSoft environment — without code changes or downtime.
The SOAR Era Is Over: Why Playbook Automation Can't Catch an Autonomous Attacker
In 2025, the average eCrime breakout time, the gap between an attacker’s first foothold and their first move to a second system, fell to 29 minutes. That’s according to CrowdStrike’s 2026 Global Threat Report, and it’s a 65 percent jump in speed over the year before. The fastest breakout the report recorded took 27 seconds. In one intrusion, the attacker was pulling data out four minutes after getting in. If your incident response plan assumes there’s time for an al
Retail’s Next Mile: Managing Risk as Fulfillment Moves Inside the Home
Riskonnect CEO Jim Wetekamp explains in Retail Touchpoints how retailers can close the gap between risk management and operations for better performance. The post Retail’s Next Mile: Managing Risk as Fulfillment Moves Inside the Home appeared first on Riskonnect.
Ransomware Group Wallstreet Hits: TGM Manufacturing, Inc
Summary In the latest cybersecurity news, TGM Manufacturing, Inc — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group Wallstreet Hits: TGM Manufacturing, Inc appeared first on HookPhish.
French Fridges Heated by Hackers, Slamming Supermarkets and Outing OT Vulnerabilities
What happened, why it worked, and what to do before your IoT and OT feed the next headline. When news first broke from France, the […] Source
How Does Security Awareness Training Reduce Employee Security Mistakes?
Have you ever learned an important lesson, whether at work, in school, or in life in general, only to forget it a few months later? At the time, you truly believe you’ve learned it by heart. But if you don’t use the knowledge, it tends to fade. This is a common scenario in the workplace, […] The post How Does Security Awareness Training Reduce Employee Security Mistakes? appeared first on CorKat Data.
TacitRed: How Identity and External Threat Intelligence Surfaces Compromised Credentials Before They Become Incidents
A compromised credential sitting in a dark-web dump right now may already belong to one of your users. The question is whether your security team finds it... The post TacitRed: How Identity and External Threat Intelligence Surfaces Compromised Credentials Before They Become Incidents appeared first on Data443.
Tired of The Complexity Tied to Traditional Day 0 Network Rollouts?
The post Tired of The Complexity Tied to Traditional Day 0 Network Rollouts? appeared first on Nile.
Detection Versioning: The evolution of logic and intent
Diffs and rollbacks show what changed in a detection, not why. Nebulock Detection Versioning keeps the journal, impact assessment, and full state per save.
Reduce Abandonment in Identity Verification: Top Causes and Effective Solutions
Abandoned identity verification flows are treated as UX footnotes when they should be P&L line items. Every dropout represents acquisition spend that converted interest but not a customer. The four fixable causes are document capture failures, intrusive... The post Reduce Abandonment in Identity Verification: Top Causes and Effective Solutions appeared first on Daon.
Vaikora Guard MCP Is MIT-Licensed: What the Codebase Gives You and What You Still Need to Build
MIT licensing means you can read exactly what runs between your AI agent and every tool it calls. That is worth more than documentation, because... The post Vaikora Guard MCP Is MIT-Licensed: What the Codebase Gives You and What You Still Need to Build appeared first on Data443.
Horizon3 Promotes Keith Poyser to General Manager, EMEA Following More Than 260% Regional Revenue Growth
Horizon3 has promoted Keith Poyser to General Manager, EMEA, following more than 260% regional revenue growth in the last fiscal year. Poyser grew the regional team from eight to more than 110 employees and will lead the company's next phase of expansion across Europe, the Middle East and Africa.
Horizon3 Promotes Ellen Sundra to Chief Customer Officer to Advance Customer Success and Security Outcomes
Horizon3 has promoted Ellen Sundra to Chief Customer Officer, expanding her leadership across Sales Engineering, Customer Success, Support, Enablement, Renewals and Field CTOs. Her appointment strengthens the company's focus on customer adoption, long-term partnerships and measurable security outcomes with NodeZero.
Shadow AI Detection: 6 Approaches, and What Each One Cannot See
Six ways enterprises detect shadow AI, from network logs to browser extensions, and the blind spot each one cannot engineer away. The post Shadow AI Detection: 6 Approaches, and What Each One Cannot See appeared first on Olakai.
Why financial institutions keep their EDI platform until they can’t
A bank’s integration layer carries payment instructions, settlement files, and account data, all day, every day. Nobody outside IT thinks about it when it’s running well. The moment it isn’t, regulators are usually the first to ask why. That reality …
Devin Oncall and Dynatrace: Bringing runtime intelligence to autonomous incident response
We’re seeing a new challenge emerge as AI-assisted software development becomes more common: autonomous agents can generate code, propose fixes, and even open pull requests, but they still need a reliable way to understand what’s happening in production. That’s where observability becomes essential. As a launch partner for Cognition’s Devin Oncall experience, Dynatrace brings runtime […] The post Devin Oncall and Dynatrace: Bringing runtime intelligence to autonomous inci
How our AI Research team uses AI Runtime
At Databricks, we continuously develop and evaluate new AI research techniques to...
Backup Software Comparison for Hybrid SMB Environments: How to Protect Servers, Cloud, and SaaS Without Tool Sprawl
Your servers are backed up. Your laptops are backed up. Microsoft 365 is probably covered by that add-on someone bought two years ago but nobody has logged into since. So why does “we’re protected” still feel more like a hunch than a fact? The post Backup Software Comparison for Hybrid SMB Environments: How to Protect Servers, Cloud, and SaaS Without Tool Sprawl appeared first on Veeam Software Official Blog.
Ransomware Group qilin Hits: Shield Wall Systems of Florida
Summary In the latest cybersecurity news, Shield Wall Systems of Florida — an organization based in US — has fallen victim to a ransomware… The post Ransomware Group qilin Hits: Shield Wall Systems of Florida appeared first on HookPhish.
Ransomware Group iah6477 Hits: hilmar-cheese
Summary In the latest cybersecurity news, hilmar-cheese — an organization based in US — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group iah6477 Hits: hilmar-cheese appeared first on HookPhish.
Stripe Data Pipeline now syncs real-time Stripe data to Lakebase Postgres
If your business runs on Stripe, your application needs access to Stripe data at...
Reducing the noise: How Atlassian built an OCSF security lakehouse on Databricks
The challenge: Two decades of logging noise at global scaleAtlassian is a global...
Varonis is joining Proofpoint
Today, we announced a definitive agreement under which Varonis will be acquired by Proofpoint, a global leader in human and agent security. This is a testament to the incredible work of the Varonis team over two decades, and the start of a new chapter that will redefine how the industry protects people, data, and AI.
Q4 SolarWinds Database Webinars: From Hidden Problems to Clearer Answers.
10/15/26 Some database problems are easy to see. Others stay hidden beneath healthy-looking dashboards, growing instance counts, or an apparently routine workload. These practical webinars explore what it takes to find the signal, understand the cause, and respond with confidence. Across the series, you’ll learn ... The post Q4 SolarWinds Database Webinars: From Hidden Problems to Clearer Answers. appeared first on SolarWinds Blog.
October Database Webinars: From Hidden Problems to Clearer Answers
10/15/26 Some database problems are easy to see. Others stay hidden beneath healthy-looking dashboards, growing instance counts, or an apparently routine workload. This October, four practical webinars explore what it takes to find the signal, understand the cause, and respond with confidence. Across the series, ... The post October Database Webinars: From Hidden Problems to Clearer Answers appeared first on SolarWinds Blog.
Microsoft Fixes Windows 11 Always On VPN Bug Caused by September Updates
Microsoft has fixed a Windows 11 bug that disrupted Always On VPN connections after its September 2026 security updates. The issue affected VPN profiles that used automatic protocol selection or switched protocols after a failed connection. Microsoft released the fix on October 13 through its monthly security updates. KB5127648 covers Windows 11 versions 24H2, 25H2, […] The post Microsoft Fixes Windows 11 Always On VPN Bug Caused by September Updates appeared first on PrivacySavvy.
PPP / pppd is now FIPS 140-3 Tested & Available with wolfCrypt FIPS
PPP / pppd provides Point-to-Point Protocol connectivity for establishing and managing network connections between systems. FIPS 140-3 support is available for PPP / pppd with wolfCrypt FIPS, tested for use with PPP / pppd environments. wolfCrypt FIPS provides a lightweight cryptographic module for security focused deployments. This helps organizations secure authentication and communications for point-to-point […]
How Strike Graph Helps Simplify CMMC Level 2 Compliance
Quick summary: Strike Graph's AI-native platform transforms CMMC Level 2 compliance by replacing manual data entry with an automated, continuous process. Key features include complete NIST 800-171 control mapping, cross-framework mapping, and a guided CMMC self-assessment that produces SPRS scores. The system automatically creates and keeps your System Security Plan (SSP) and Plan of Action and Milestones (POA&M) up to date using current data. Verify AI provides continuous evidence validatio
How to Create a CMMC Vendor Compliance Program for SCRM
Quick summary: CMMC vendor compliance obligations flow down from federal contracting rules like DFARS 252.204-7012, 252.204-7021, and 32 CFR 170.23, not from a single NIST SP 800-171 control. Prime contractors must pass CUI protection requirements to every subcontractor that touches the data, matching each to the right level: FCI-only vendors need Level 1, CUI vendors need Level 2. Because Affirming Officials attest in SPRS under False Claims Act exposure, self-attested questionnaires won't hold
Android gets AI defenses against messaging scams, fake calls
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
SUSE Linux security advisory (AV26-1053)
DireWolf Ransomware Activity Intensifies
DireWolf is a ransomware operation that first appeared in May 2025. After remaining relatively quiet for an extended period, DireWolf significantly increased its activity in August 2026, when it added 43 new victims to its leak site.
How Multi-Campus Universities can Build a more Connected Security Program
Parts 1 and 2 of this series looked at two pressures facing higher education security teams. First, the threat landscape: universities are dealing with more frequent attacks across complex, distributed environments, while campus-by-campus security can make it harder to share intelligence and coordinate response. Second, the compliance burden: overlapping requirements across FERPA, GLBA, HIPAA, and CMMC make it difficult to establish what data was affected, which reporting obligations apply, and
Security Advisory: Weekly Advisory October 14th, 2026
In this week’s Security Advisory **Updated** SonicWall Warns of Maximum-Severity SSRF Vulnerability in SMA1000 Gateways Citrix Patches Critical NetScaler Remote Code Execution Vulnerability Critical GitLab Remote Code Execution Vulnerability Ivanti Connect Secure Vulnerability Actively Exploited Fortinet Patches Multiple Vulnerabilities Cisco Patches Critical Nexus Switch Vulnerabilities Microsoft Patches 1,413 Vulnerabilities in October Patch Cycle **Updated** SonicWall […] The post Secur
[Control systems] Schneider Electric security advisory (AV26-1051)
Continuous DDoS Validation: Definition, How It Works, and How It Differs From Point-in-Time Red Team Testing
Continuous DDoS validation defined: how the evidence loop works, why independence matters, and how it differs from point-in-time red team testing. The post Continuous DDoS Validation: Definition, How It Works, and How It Differs From Point-in-Time Red Team Testing appeared first on MazeBolt.
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories. The rest gets interesting in different ways. A small permission can lead to a big theft. A trusted login can hide the wrong person. Old bugs are finding new victims, familiar tools are being put to strange uses, and
The 2026 AI Security Landscape
AI security tools vary in what they can see and protect. This blog highlights three approaches to the market and the questions to ask before choosing a platform for your teams. The post The 2026 AI Security Landscape appeared first on Aurascape, Inc..
What HIPAA actually requires for security awareness training
What does the HIPAA Security Rule require? The HIPAA Security Rule establishes administrative, physical, and technical safeguards for electronic protected health information (PHI). Its administrative safeguards include the security awareness and training standard under 45 CFR § 164.308(a)(5).