ISO 27001 und Datenschutz: DSGVO und SOC 2 im Abgleich 2026
ISO 27001 und Datenschutz im Abgleich: welche Controls Art. 32 DSGVO erfüllen, was SOC 2 zusätzlich verlangt und in welcher Reihenfolge Sie vorgehen.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,875 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
DSGVO: Der komplette Leitfaden für Unternehmen | Kertos
DSGVO erklärt: was die Verordnung verlangt, welche Pflichten Unternehmen treffen, wer in Deutschland prüft und wie hoch die Bußgelder wirklich ausfallen.
GreedyBear: Modularizing the Dashboard
I spent this summer as a GSoC contributor on GreedyBear under the mentorship of Tim Leonhard, refactoring its hardcoded dashboard into a configuration-driven widget system with a drag-and-drop admin editor and backend persistence.
Mentor: Tim Leonhard
Organization: The Honeynet Project
Project: GreedyBear: Dashboard Modularization
GSoC Proposal
The goal of my project was to modularize the GreedyBear dashboard.
Before this project, every widget - its type, data source, pos
Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every two weeks — see what identity-first reachability would have stopped. The post Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks appeared first on NetFoundry.
Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks
NetFoundry's Reachability Watch tracks new network CVEs and actively exploited KEVs every two weeks — see what identity-first reachability would have stopped. The post Reachability Watch: A Metabase Zero-Day and 738 New CVEs in Two Weeks appeared first on NetFoundry.
Theodosian vs Virtru: When Email Encryption Isn't Enough for File Security
Virtru protects files in email. What happens to that data once it’s in SharePoint, on an endpoint, or downloaded by a contractor?
Infoblox Supports the Next Generation of Cyber Talent at Cyber Battle Australia
As cyberthreats continue to evolve, so does the need to inspire and equip the next generation of cybersecurity professionals. At Cyber Battle Australia, students did more than compete, they stepped into a real-world cybersecurity environment designed to challenge their thinking, sharpen their skills and open doors to future careers. The Capture the Flag (CTF) style […] The post Infoblox Supports the Next Generation of Cyber Talent at Cyber Battle Australia appeared first on Infoblox Blog.
Three Questions That Matter As Much As Price When Choosing a Healthcare IT Provider
When healthcare practices are evaluating potential IT provider partners, they ask similar questions: comparing pricing, healthcare experience, and references are all reasonable places to start. But how will you know how they will perform under pressure, when the system goes down or you’re facing a possible data breach?
Securing the future of European connected devices: the Cyber Resilience Act (CRA)
The regulatory landscape for connected devices in Europe is undergoing a massive shift. The EU Cyber Resilience Act (CRA) is at the center of the transition. It mandates legally-binding obligations to manufacturers, developers and hardware vendors, ensuring the security of products with digital components, and it specifies milestones for compliance that are about to comeRead More The post Securing the future of European connected devices: the Cyber Resilience Act (CRA) appeared first on PQShield
Making CMMC Affordable – with PreVeil
Explore the factors driving CMMC compliance costs and practical ways defense contractors can approach scoping, technology, partner selection, and implementation trade-offs. The post Making CMMC Affordable – with PreVeil appeared first on ControlCase.
Internal Audit Checklist: Free Excel Template, Examples & Best Practices
Download the Free Internal Audit Checklist Excel Template Internal Audit Checklist Excel Template Includes audit planning, checklist testing, findings, remediation, evidence, validation, and automatic dashboard reporting Download Template → What Is an Internal Audit Checklist? An internal audit checklist is a structured list of audit areas, control requirements, questions, testing procedures, and evidence requirements used... The post Internal Audit Checklist: Free Excel Template, Examples &
Assessment-Led vs. Price-Led: How MSPs Sell Security in 2027
Picture the moment a prospect makes the decision. Two proposals are open on the desk. Both describe managed security services, both list broadly similar coverage, both are written in the same industry vocabulary by people who are equally confident. One is $2,900 a month and the other is $2,400. There is only one variable that […] The post Assessment-Led vs. Price-Led: How MSPs Sell Security in 2027 appeared first on Cynomi.
How to restore your backups on Proxmox VE (AMBaaS version)
How to restore your backups on Proxmox VE (AMBaaS version) laurice.alas@a… Fri, 14/08/2026 - 18:29 { "@context": "https://schema.org", "@type": "VideoObject", "name": "How to restore your backups on Proxmox VE AMBaaS version", "description": "How to restore your backups on Proxmox VE AMBaaS version", "thumbnailUrl": [ "https://img.youtube.com/vi/wt41ZVW-1-w/hqdefault.jpg" ], "uploadDate": "2026-08-14T22:00:00+08:00", "duration": "PT04M36S", "contentUrl": "https://www.youtube.com/watch?v=wt41ZVW-
Why Penetration Testing needs to keep pace with the businesses it protects
The gap between how fast organisations move and how often they test their security is quickly becoming one of the most significant risk factors for UK businesses.
Persbericht: NIS2 raakt veel meer bedrijven dan gedacht: tot 1,5 miljoen organisaties krijgen te maken met nieuwe cyberveiligheidseisen
Centric en IT-beveiligingsspecialist NFIR slaan de handen ineen om gemeenten te ondersteunen met dienstverlening op het gebied van cybersecurity. De samenwerking tussen Centric en NFIR richt zich op het leveren van innovatieve diensten om de digitale weerbaarheid van lokale overheden te versterken.
Create histogram metrics at ingest with OpenPipeline
Histogram metrics preserve the full distribution of your observability data, enabling accurate percentile analysis and service-level objective (SLO) measurement. Dynatrace now extracts histogram metrics from spans and logs during ingestion with OpenPipeline, so you can capture latency distributions and other high-value metrics without re-instrumenting your services. This post explains how histogram metrics work, why they […] The post Create histogram metrics at ingest with OpenPipeline app
Large Organization HRM Software for Security Leaders
Human Cyber Risk Reporting Software: Board-Ready Risk Data
End-to-end observability at scale starts with knowing what you’re running
Dynatrace Fleet Management gives administrators a single app to monitor, manage, and install OneAgent and ActiveGate components across large environments. The post End-to-end observability at scale starts with knowing what you’re running appeared first on Dynatrace news.
Network Security Monitoring
Modern organizations depend on networks to connect employees, applications, cloud services, customers, devices, data centers, and business-critical systems. As these environments become increasingly distributed, securing the network perimeter alone is no longer enough. Cybercriminals can exploit stolen credentials, vulnerable devices, malicious applications, misconfigured cloud resources, phishing attacks, malware, and compromised endpoints to gain access to The post Network Security Monitoring
Roblox, Minecraft, and Game-Cheat Stealers: How Fake Executors Turn Gamers Into High-Value Identity Profiles
Search for a Roblox executor, Minecraft mod, or game cheat and the security story appears familiar. A player downloads a fake tool, malware runs, and the attacker steals a Discord account, browser cookies, passwords, or cryptocurrency. Recent campaigns reveal a more interesting system underneath that sequence. The newest game-focused stealers increasingly inspect the victim after […] The post Roblox, Minecraft, and Game-Cheat Stealers: How Fake Executors Turn Gamers Into High-Value Identit
Gartner Report: Why AI-Ready Data Requires Data Discovery
Key Takeaways AI performance depends on the quality, accessibility, and organization of the enterprise data it can access. Dark data becomes a greater risk as AI systems make hidden information easy to discover. Access controls cannot identify sensitive information hidden inside documents that users and AI systems can access. Sensitive data discovery, context-aware classification, and remediation should be part of ... Read More The post Gartner Report: Why AI-Ready Data Requires Data Discovery a
John Wilkinson on why mobile identity verification depends on data the networks won’t share
Mobile identity verification uses the signals attached to a person’s phone number and device to work out whether they are who they claim to be: how long the number has been active, whether it was recently ported or swapped, whether the account behind it matches the person presenting it. It works because the phone stopped […] The post John Wilkinson on why mobile identity verification depends on data the networks won’t share appeared first on Liminal.co.
Are AI-Driven VM Platforms Secure Enough for Enterprise Use?
We know VM platforms are a must for ensuring continuous monitoring and security. With every development in security comes a series of ‘buts’ and ‘ifs’ that, if left unaddressed, could become a gateway to major cyberattacks. One such question is: ‘Are AI-Driven VM Platforms Secure Enough for Enterprise Use?’ The answer is both ‘Yes’ and […] The post Are AI-Driven VM Platforms Secure Enough for Enterprise Use? appeared first on Kratikal Blogs.
Perform a test backup on Proxmox VE (AMBaaS version)
Perform a test backup on Proxmox VE (AMBaaS version) laurice.alas@a… Fri, 14/08/2026 - 17:40 { "@context": "https://schema.org", "@type": "VideoObject", "name": "Perform a test backup on Proxmox VE AMBaaS version", "description": "Perform a test backup on Proxmox VE AMBaaS version", "thumbnailUrl": [ "https://img.youtube.com/vi/ghUqI3iEos8/hqdefault.jpg" ], "uploadDate": "2026-07-12T22:00:00+08:00", "duration": "PT10M31S", "contentUrl": "https://www.youtube.com/watch?v=ghUqI3iEos8" } var picSrcS
The end of SharePoint OTP: What the transition to Microsoft Entra B2B means for organizations
Microsoft has been moving external access to shared SharePoint and OneDrive content away from SharePoint Online’s One-Time Passcode (SPO OTP) authentication and toward Microsoft Entra B2B. The transition is already changing how external recipients are identified and managed when they access shared files.
Reply vs Reply All: Etiquette and Security Risks
Key Takeaways Reply sends to the sender only. Reply All sends to the sender plus everyone in the To and Cc fields, which is where most accidental disclosure begins. Reply All does not include BCC recipients, but it does expose the visible recipient list to everyone on the thread. Every extra recipient is another inbox […]
OT Security Frameworks Explained: IEC 62443, NIST, and NERC CIP
Operational Technology (OT) environments are at the core of critical infrastructure, including energy, manufacturing, utilities, transportation, and industrial systems. As these environments become increasingly connected to IT networks and cloud platforms, they are facing unprecedented cybersecurity risks. Unlike traditional IT systems, OT environments prioritize safety, availability, and reliability. However, this operational focus often results in […]
Xygeni Malicious Code Digest 83
Explore the latest supply chain security threats with Xygeni's Malicious Code Digest. Stay ahead of malicious code attacks. The post Xygeni Malicious Code Digest 83 appeared first on Xygeni AI-Powered AppSec Platform.
What Is AI Threat Hunting and How Does It Work? | Prophet Security
A practitioner's guide to AI threat hunting: what an AI threat hunter does, which hunts run and why, and what changes for a team that hunts continuously.
Top 6 SOAR Platforms of 2026 | Prophet Security
Stop maintaining playbooks. We rank the Top SOAR Platforms of 2026 and how to start looking beyond legacy SOAR to Agentic AI.
isMalicious vs IPQualityScore: Fraud Scoring and Threat Intelligence Are Different Jobs
IPQS scores whether a signup is fraudulent. isMalicious scores whether infrastructure is malicious. The two get compared constantly because both return a number about an IP address — and they answer different questions.
Ethics in GRC: What Aristotle, Aquinas, and the CyberAB All Agree On
Common temptations in compliance work, the philosophical roots of right and wrong, and why codes of conduct like the CyberAB's CoPC only work if something deeper backs them up. The post Ethics in GRC: What Aristotle, Aquinas, and the CyberAB All Agree On appeared first on IntelliGRC.
How to get employees to engage with security training
Employees engage with security training when it is short, relevant to their actual role, delivered regularly rather than annually and free of blame. Engagement improves further when leadership takes part visibly, when feedback arrives at the moment of a mistake and when the content is useful in their personal life as well as at work. […]
Network Detection and Response
Modern cyberattacks rarely remain confined to a single endpoint or application. Attackers increasingly move through networks, abuse legitimate credentials, communicate with command-and-control infrastructure, exploit vulnerabilities, and attempt lateral movement toward high-value systems. As organizations adopt cloud services, remote work, IoT, operational technology (OT), SaaS applications, and hybrid infrastructures, the network has become more distributed—and harder The post Network Detection
Shared vs. 1-to-1 mobile devices: Which model reduces the IT support burden?
For healthcare IT teams, the choice between shared and 1-to-1 mobile devices affects much more than hardware costs.
What Are Email Feedback Loops and How Do They Work?
Originally published at What Are Email Feedback Loops and How Do They Work? by Ruben Khachatryan. Getting your emails delivered is only part of ... The post What Are Email Feedback Loops and How Do They Work? appeared first on EasyDMARC.
Looking Beyond Lakera? 6 Alternatives That Made Our Shortlist in 2026
Lakera Overview (Now Part of Check Point) Lakera helped establish the market for dedicated security controls around generative AI applications. Its evolution under Check Point now gives security teams a broader platform context, but it also changes how buyers should assess architectural fit. As an independent platform, Lakera focused on protecting generative AI applications through ... Read more The post Looking Beyond Lakera? 6 Alternatives That Made Our Shortlist in 2026 appeared first on Rein
Coin-Sized Implant Exposes a Physical Cybersecurity Blind Spot in Boeing 737 Avionics
A coin-sized device costing less than $100 has exposed a significant blind spot in how the aviation industry approaches aircraft cybersecurity: the risk created by brief, unauthorized physical access to an aircraft.   Researchers from the University of California San Diego and Oberlin College developed a small programmable implant that can be inserted into a […] The post Coin-Sized Implant Exposes a Physical Cybersecurity Blind Spot in Boeing 737 Avionics appeared first on CYVIATION.
Digital Sovereignty Trends 2026
Digital sovereignty is becoming a practical IT infrastructure consideration, not just a policy discussion. For businesses, it raises important questions about where data lives, who can access it, and how much control they have over the infrastructure that keeps critical applications running. As regulatory requirements, cyber threats, and geopolitical uncertainty, and our unpredictable world [...] The post Digital Sovereignty Trends 2026 appeared first on StorMagic.