Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

23,874 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

How Can Enterprise Buyers Get Comprehensive MCP Security Coverage?

Summary MCP introduces unique risks because agents dynamically call tools instead of following static API paths. Traditional perimeter defenses like WAFs cannot inspect the intent behind agentic tool execution. LangGuard provides the definitive runtime governance layer for enterprise-grade MCP security. Enterprises must transition from static security policies to deterministic, real-time enforcement of agent actions.

Announcement

What Is Web Tracking? How Websites Identify and Follow Visitors

Web tracking is the collection of data about visitors' behavior across websites, using cookies, pixels, fingerprinting, and session-replay scripts. This guide explains how each technique works, who is doing the tracking, what the law requires, and how site owners can see what their own pages are collecting.

Announcement

What Is That Tracker? A Field Guide to the Domains in Your Network Tab

You open DevTools and see requests to doubleclick.net, adnxs.com, clarity.ms, scorecardresearch.com, domains you never added. This guide explains what the most common tracker domains actually are, who operates them, what data they touch, and when an unknown domain in your network tab is a real problem.

Announcement

Weekly Briefing - 18-08-2026

Corgea's weekly briefing for 12-18 August 2026 covers the StubMaker RubyGems typosquat wave, LiteLLM's August blast-radius disclosure, and the JupyterLab PyPI extension-manager bypasses.

Announcement

StubMaker: RubyGems `extconf.rb` typosquats delivered a Windows infostealer

Fresh 15-18 August reporting on the StubMaker campaign shows how RubyGems typosquats such as `brumdler` and `brundlef` abused `extconf.rb` to fake a successful native-extension build, beacon over plain HTTP, fetch a Rust loader from GitHub Releases, and unpack an in-memory Go stealer that targeted Chromium secrets, wallet material, and Telegram data.

Announcement

Ransomware Group incransom Hits: Lansing Urgent Care

Summary In the latest cybersecurity news, Lansing Urgent Care — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group incransom Hits: Lansing Urgent Care appeared first on HookPhish.

Announcement

A Blueprint for Securing the Full Agent Workflow

Security leaders already know AI agents expand risk. The exposure comes from assuming the controls you own have it covered. Ahead of our August 25 webinar, here is the case for securing the full agent workflow. The post A Blueprint for Securing the Full Agent Workflow appeared first on Aurascape, Inc..

Announcement

Ransomware Group xpl0itrs Hits: BMW Group

Summary In the latest cybersecurity news, BMW Group — an organization based in DE — has fallen victim to a ransomware attack conducted by… The post Ransomware Group xpl0itrs Hits: BMW Group appeared first on HookPhish.

Announcement

Can previewing an attachment expose a user to malware?

Healthcare workers frequently preview attachments to determine whether they can trust an email. The practice can be safer than downloading a file and then opening it in its native application; however, it still presents some risk.

Announcement

Identity Icons Awards 2026: Nominate your Identity Security heroes

If you ask me for my customer story of the year, I’d start with the team that stopped Mythos inside a Project Glasswing member’s environment. AI is everywhere—from the headlines to the boardroom. Organizations know they need to secure AI agents and defend against AI-powered attacks. What’s less clear is how to do it effectively. Early successes are beginning to emerge, and I’m eager to […]The post Identity Icons Awards 2026: Nominate your Identity Security heroes appeared first on Si

Announcement

Ransomware Group Global Secret Group Hits: The Rubber Group

Summary In the latest cybersecurity news, The Rubber Group — an organization based in US — has fallen victim to a ransomware attack conducted… The post Ransomware Group Global Secret Group Hits: The Rubber Group appeared first on HookPhish.

Announcement

Industry groups push CISA to narrow cyber incident reporting rule

During recent town halls, industry groups told the Cybersecurity and Infrastructure Security Agency (CISA) that they want the pending CIRCIA cyber incident reporting rule to cover fewer companies, require fewer reported incidents, and demand less information per report.

Announcement

How to Stop Account Takeover and Post-Login Abuse

Account takeover (ATO) attack volumes actually dropped 7% last quarter, but don’t let that fool you into a false sense of security.  Sift’s latest network data reveals a much more dangerous shift: fraudsters are abandoning sloppy, mass-volume login attacks and turning to highly targeted, surgical strikes. While login attempts fell, successful breaches caused downstream fraudulent […] The post How to Stop Account Takeover and Post-Login Abuse appeared first on Sift.

Announcement

NSAuditor AI 0.2.43 / Enterprise 0.38.0 — Evidence-Pack Authorship, Proven Against Published Bytes

Enterprise Edition 0.38.0 adds two commands for evidence-pack authorship: compliance sign-pack signs the chain-of-custody envelope at an approval station with an operator-held Ed25519 key, covering one framework envelope and the artifacts it enumerates, and compliance verify-pack establishes authorship from it. PROVEN against published bytes: the three-part gate ran on the registry build - sign and verify clean, a length-preserving one-byte edit to a covered report caught while the signature its

Announcement

Tackling AI Containment – Is It Already Too Late?

The tech world experienced a collective freakout over the recent Hugging Face incident. In a first-of-its-kind breach, an autonomous Open AI agent ‘escaped’ a testing sandbox, connected to the internet and hacked into the Hugging Face environment to access data it needed to cheat on a cybersecurity benchmark test. While this was certainly surprising, the Open AI agent actually did what it was instructed to do by the testers – just using a path they hadn’t anticipated. The week... View Article Th

Announcement

Why Service Providers Who Skip Business Impact Analysis Leave Money on the Table

If I asked you right now to name the three business processes that generate 80% of your largest client’s revenue, could you do it? Not their infrastructure, their software stack, or their endpoint count, but what they actually do to make money.  If you hesitated, you’re not alone. Most service providers can recite a client’s entire technology environment from […] The post Why Service Providers Who Skip Business Impact Analysis Leave Money on the Table appeared firs

Announcement

NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era

It comes as no surprise that the Mythos era continues to put pressure on security teams: it’s never been easier for attackers to find and weaponize vulnerabilities at scale, and comparable capability is only becoming more available. The gap between a CVE’s disclosure and its exploitation is compressing fast, while patches still take days to... The post NEW! WAF Posture Management: Building Stronger WAF Programs for the Mythos Era appeared first on IONIX.

Announcement

DTLS 1.3: Securing UDP Connections

UDP moves data with low overhead, but it does not provide encryption. A device’s network address can also change during a session. DTLS 1.3 protects the connection with fewer handshake round trips, explicit acknowledgments, and support for maintaining the session when an endpoint’s address changes. This webinar compares DTLS 1.3 with DTLS 1.2 and follows […]

Announcement

Why social media literacy matters for healthcare staff

Healthcare staff can use social media to educate patients, share public health information, and network with professional groups. However, staff also need to understand the impact of public postings on patient privacy and organizational security.

Announcement

Commercially Available Personal Data Remains a National Security Risk for U.S. Government and Military Personnel

Personal data about U.S. government employees, military personnel, veterans, and their families is widely available through commercial data brokers and people-search sites.  Research, intelligence and policy documents, congressional findings, and federal court decisions have identified foreign-adversary access to Americans’ sensitive personal data as a national-security risk. This information can support intelligence gathering, surveillance, profiling, spearphishing,Continue reading "Commer

Announcement

Autonomous Red Teaming Is the Warm-Up. The Real Test Is the Operating Model

Three wake-up calls in four months. The industry is testing the attacker. It also needs to rethink the defender. Faced with autonomous attackers, the cybersecurity industry has largely converged on the same response: more testing. In April 2026, Anthropic disclosed that Mythos, restricted from public release, had autonomously discovered and exploited thousands of zero-day vulnerabilities […] The post Autonomous Red Teaming Is the Warm-Up. The Real Test Is the Operating Model appeared first