Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,871 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Human Risk Management Program: 7 Core Components Guide
Software supply chain security requires decisions rather than defaults
Most software runs on decisions nobody made. We talk about why gating, pinning, backporting, and SBOM upkeep only work if someone actually owns them. Category: News
Not every authorization decision is allow or deny
Not every authorization decision is allow or deny. Some denials are conditional, and the policy can return what would unblock them. Covers Cerbos policy outputs, the conditionNotMet trigger, the AuthZEN ARAP draft profile for requestable denials, and why an approval is an input to a new decision.
Aikido Security achieves ISO 42001:2023 certification for AI governance
Aikido Security has achieved ISO 42001 certification, the global standard for AI governance, covering AI pentesting, Code Security Audit, and Deep PR Review. Category: Compliance
Why Organizations Switch to CERT-In Empanelled Security Partners After Audit Failures?
A failed security audit can delay compliance projects, customer onboarding, product launches, and business growth. In many cases, the problem is not the organization’s security program alone, it is also the quality and depth of the security assessment. An incomplete security audit can leave important risks undiscovered and create additional work later. In this blog, we’ll discuss the common reasons security […]
How Can CASB Security Control the SaaS Apps Connected to Your Data?
An approved SaaS app is not automatically a safe SaaS app. If an OAuth connection or trusted integration is compromised, attackers may be able to use permissions your organisation has already granted. CASB security helps mid-market IT and security teams discover cloud-app use and control risky actions, turning SaaS access from a one-time approval into an ongoing control. CASB security provides visibility and policy control across cloud applications. It helps organisations identify sanctioned and
[Aug 2026] What’s New at Dashlane: Domain-Based Vault Enforcement, Integrations, and More
Discover what's new at Dashlane in August 2026, including vault login enforcement out now and AI Advisor starting GA soon. The post [Aug 2026] What’s New at Dashlane: Domain-Based Vault Enforcement, Integrations, and More appeared first on Dashlane Blog
What is the CIA Triad?
In this blog series, we explain and simplify some of the most commonly used terms. In this edition, we dive into the CIA Triad. The post What is the CIA Triad? appeared first on DarkOwl, LLC.
Scytale Earns G2 Leader Status in GRC, Security Compliance, Audit Management, and More for Fall 2026
Scytale earns multiple G2 Fall 2026 Leader badges in GRC, Security Compliance, and Audit Management. The post Scytale Earns G2 Leader Status in GRC, Security Compliance, Audit Management, and More for Fall 2026 appeared first on Scytale.
AI SOC vs SOAR: Where Each One Actually Fits
SOAR runs the workflow you specified. An AI SOC forms the verdict. Where each one fits, what to keep, and how to run both without rebuilding what already works.
The Regulators Already Assume You Have an AI Inventory. Do You?
The regulators are done with “Trust as policy”.   That chain used to be an internal maturity problem, something a security program could work on over time:  A developer trusts AI-generated code because it compiles. A reviewer trusts an AI-generated summary because it reads plausibly. A security team trusts scanner output because the pipeline shows […]
Lutte contre le Phishing : comment Intrinsec et GLIMPS automatisent le traitement des signalements utilisateurs
Malgré des solutions de filtrage de plus en plus performantes, des e-mails malveillants continuent d’atteindre […] L’article Lutte contre le Phishing : comment Intrinsec et GLIMPS automatisent le traitement des signalements utilisateurs est apparu en premier sur INTRINSEC.
How to Migrate SOC Platforms Without Losing Detection Coverage
A cutover runbook for SOC and SIEM migrations: how to baseline coverage before you move, the six ways it disappears quietly, and the phase gates that prove it came back.
What Microsoft Copilot Does to Your SharePoint Files — and Where Purview's Protection Ends
Copilot surfaces every file a user can reach in SharePoint. Learn what this means for CUI and where Purview's protection ends.
Open Source Security Tools: A 2026 Guide
A 2026 guide to open source security tools: the core categories, how to choose and deploy them, correlation rules, compliance mapping and a migration plan.
Tool Sprawl Explained: Why Too Many Security and IT Tools Create More Risk Than They Remove
Tool sprawl starts with good intentions. As we add more tools, it often becomes difficult to know who is responsible for each tool and what their purposes are.
AI SOC Platforms Compared: A 2026 Evaluation Checklist
How AI SOC platforms actually differ, the three platform models side by side, and an eight-point scoring checklist to run before you shortlist a vendor.
Most CLAUDE.md Security Rules Have No Built-In Control That Matches Them
A preprint posted to arXiv on August 24, 2026 read 481 public CLAUDE.md files and found that only 4.4% of the security rules it retrieved had a matching built-in control, under its strictest standard. The file gives a developer no sign of which rules anything enforces.
Hack The Box Report Finds AI Agents Used by 68% of Top 25 Cybersecurity Teams
Three-year benchmark finds median solve times dropped by more than 12 hours, while full-board completions surged from two teams in 2024 to 15 in 2026
AI Data Privacy Risks and How to Mitigate Them in 2026
Generative AI is becoming a powerful business tool, but every prompt, document, and interaction can introduce new data privacy risks. From employees unknowingly sharing sensitive information to AI systems accessing confidential business data, enterprises need stronger controls around how AI is used. In 2026, protecting AI data requires visibility, governance, security, and clear policies that work alongside innovation.
AI Security Explained: Definition, Risks, and How to Implement It
Companies rush AI, skip security. That gap grows faster than most teams can track. The post AI Security Explained: Definition, Risks, and How to Implement It appeared first on Practical DevSecOps.
HyperTPRM: A Data-First Remedy for Today’s Third-Party Risk Management Bottlenecks
Today’s third-party ecosystems are larger, more connected, and more dynamic than ever. Yet many TPRM programs still rely on manual assessments built for simpler times, resulting in onboarding delays, assessment fatigue, and fragmented visibility into vendor risk. This one-pager explores a different approach to modern vendor management: HyperTPRM, a data-first, lifecycle-driven operating model for managing […] The post HyperTPRM: A Data-First Remedy for Today’s Third-Party Risk Management B
ISO 27001 Audit: So läuft die ISMS-Zertifizierung ab (2026)
ISO 27001 Audit: Stufe 1 und Stufe 2 im Detail, welche Audit-Arten es gibt, wie Nichtkonformitäten eingestuft werden und welche Fristen gelten.
i-Sprint and ITSDI Forge Strategic Partnership in the Philippines
NEWS: i-Sprint Innovations and ITSDI Announce Strategic Partnership to Strengthen Cybersecurity and Identity Management in the Philippines MANILA, PHILIPPINES – August 25, 2026 – i-Sprint Innovations Private Limited (i-Sprint), a global leader in Identity and Access Management (IAM) and Mobile App Protection, today announced a strategic distribution partnership with Information Technology Security Distribution, [...]
Privacy by Design: The 7 Principles and How Regulated Industries Implement Them
Privacy by design is an approach that builds data protection into systems and processes from the start, instead of adding it after a product ships. The seven principles behind it are easy to recite and, for most organizations, difficult to implement. Every privacy team can name them. Far fewer can point to a system where... The post Privacy by Design: The 7 Principles and How Regulated Industries Implement Them appeared first on Duality Technologies.
Experimental DKIM2 Signing and Verification | Halon
Key Takeaways Halon has released experimental DKIM2 signing and verification through an open-source extras module for Halon Engage and Halon Protect DKIM2 remains an active IETF Internet Draft and not a final RFC Operators can run DKIM2 alongside existing DKIM and DMARC processing to gather operational experience Current DKIM2 support focuses on core signing and verification workflows, with parts of the draft intentionally not implemented yet. Halon Engage and Halon Protect now inc
Making Cyber Security Awareness Month A Success in 2026
The post Making Cyber Security Awareness Month A Success in 2026 appeared first on MetaCompliance.
Is your technology working for your business? Regular reviews help you find out
Staying competitive as a small or mid-size business increasingly means getting technology decisions right, not just at the point of purchase, but on an ongoing basis as tools evolve, business needs shift, and the threat landscape changes. A regular technology business review is the mechanism that keeps those decisions grounded in current reality rather than […] The post Is your technology working for your business? Regular reviews help you find out appeared first on Ubisec Systems.
Elcomsoft System Recovery 8.38: Built-In BitLocker TPM Exploit Library, Browser Artefact Extraction, and Imaging Checksums
Elcomsoft System Recovery, a bootable digital triage tool, now offers to build you a second USB flash drive for a BitLocker exploit during installation. Version 8.38 supports two exploits this way, YellowKey and GreatXML. The release also adds checksum logging for disk images and updates the imaging library.
5 underrated features in Devolutions Remote Desktop Manager
Remote Desktop Manager has hundreds of features, and some of the most useful ones quietly fly under the radar. Whether you’re a longtime user or just getting started, these five capabilities are worth a closer look.
Beware of fake Indeed interview apps used to install spyware
Scammers are posing as employers on Indeed to trick job seekers into installing fake Android interview apps that deliver malware.
Frictionless & Secure: Balancing User Experience and Protection with CIAM
In 2026, businesses no longer need to choose between robust security and a seamless user journey. Historically, extra security controls created friction. Consequently, users became frustrated, abandoned transactions, and contacted support more often. Today, modern customer identity and access management (CIAM) removes this compromise. The post Frictionless & Secure: Balancing User Experience and Protection with CIAM appeared first on Sennovate.
DataGuard expands its G2 presence in Fall 2026 reports further with recognition across privacy, governance, and compliance categories
DataGuard, a leading security and compliance provider, today announced its results in G2's Fall 2026 Reports. The latest rankings reinforce the company's leadership in Data Privacy Management and Privacy Impact Assessment while highlighting growing customer recognition across a broader range of privacy, governance, and compliance use cases.
Digitale Souveränität: Warum sie jetzt Chefsache ist
Enginsight im Expertengespräch mit Michael Mattis, CEO, Silicon Valley Europe Sabine Kuch: Herr Mattis, ich möchte mit einem politischen Zitat einsteigen. Bundeskanzler Friedrich Merz hat gesagt: „Digitale Souveränität Europas ist zentral, für unsere Wettbewerbsfähigkeit, für unsere Sicherheit und für unsere Verteidigung.“ Ganz ehrlich, viele Unternehmen denken dabei wahrscheinlich: schöne Worte, aber weit weg vom Alltag. […] Der
Cloud Infrastructure Security Assessment: Scope & Limits
Security is the second-biggest cloud challenge organizations report, behind only … The post Cloud Infrastructure Security Assessment: Scope & Limits appeared first on Tufin.
Eight AI Agents Breach Asian Government Systems
Eight AI Agents Breach Asian Government Systems An attack utilizing open-source AI frameworks Hermes and […] The post Eight AI Agents Breach Asian Government Systems appeared first on Penta Security Inc..
Mobius report 60/2026 – Expansion of Turbojet Engine Use in Loitering Munitions
The use of turbojet engines in loitering munitions is expanding, with documentation showing their integration into a growing number of platforms, particularly in the Russian-Ukrainian theater and within Iran and its Axis of Resistance proxy network. Russia has integrated turbojet...
Darknet Search Engine: ToledoZoo.org Data Leak Claim Examined
Darknet search engine investigations are increasingly used by security teams to monitor claims of newly advertised data leaks across criminal forums and underground marketplaces. One recent example involves an alleged ToledoZoo.org data leak that was posted on the PwnForums cybercrime forum by a user known as “seraphims.” At the time of writing, these claims have […]
Monitor, Assess and Act on Insider Risk with Agentic Support
Insider risk has moved from an occasional HR escalation to a constant operational challenge. Employees exfiltrate large volumes of data with ease, and contractors with privileged access rarely appear on HR-managed leaver lists. According to the Ponemon Institute’s 2026 Cost of Insider Risks Global Report, insider incidents now cost the average organization $19.5 million a […]