Security Ratings vs Supply Chain Intelligence: What Is the Difference?
Security ratings score how an organization looks from outside. Supply chain intelligence maps what is actually connected to you, and why it matters.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
23,874 matching stories — announcement — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
TGA0894 – Proximity Initiation Mechanism for Geran-2 Warheads, Ukraine
Over the past year, increasing documentation has emerged of Geran-2 loitering munitions fitted with rangefinders apparently incorporated into their warhead initiation mechanisms. The growing number of documented examples suggests Russia is exploring proximity initiation as an alternative to conventional impact...
A Vault With No Treasure - CMMC Level 2 Compliance for Subcontractors With No CUI
This blog post should not exist, but it does. In this blog, we detail the improper CMMC Level 2 flow-down problem and the most cost-effective path to compliance if pushing back isn't an option.
CopyEscape: Taking Over Docker Hosts with docker cp
Imperva Red Team uncovered CVE-2026-17106, a container-to-host arbitrary file-write vulnerability in Docker’s docker cp command. Docker later confirmed that the same CVE also affected sbx cp when copying files out of Docker Sandboxes. A malicious container or sandbox could exploit the copy process to create or overwrite files outside the destination selected by the user, […] The post CopyEscape: Taking Over Docker Hosts with docker cp appeared first on Blog.
What Data Should Employees Keep Out of AI Tools?
Tom Coffey, VP, Information Security “Paying for a subscription does not automatically prevent the provider from storing company information or using it to train its models. “ Key Takeaways Employees use standalone AI assistants, coding copilots, and AI features built into everyday workplace tools to draft, summarize, analyze, and troubleshoot. A single prompt or upload containing customer records, […] The post What Data Should Employees Keep Out of AI Tools? app
How to Migrate Email from Bluehost to Office 365? Quick Solution
To migrate email from Bluehost to Office 365, you have three ways. Via desktop email clients, using the Admin Center import mechanism, or a … The post How to Migrate Email from Bluehost to Office 365? Quick Solution appeared first on SysTools Tech Blog.
Every AI Agent Needs a Baby Gate
Picture an infant standing at the top of a long, steep staircase. She’s curious, mobile, and has absolutely no concept of what happens if she takes one more step forward. She isn’t malicious. She isn’t even careless, really — she just doesn’t yet have the judgment to know where the danger is. So we install […] The post Every AI Agent Needs a Baby Gate appeared first on NetFoundry.
ECB Cyber Resilience AI Deadline: The Complete Guide
"ECB cyber resilience AI deadline" hides three EU instruments with different deadlines. Letter SSM-2026-0301, CRA Article 14, and the EU AI Act, untangled.
Branch61G Weekly: Teachings from the Thickets (Notes from Building an Open Source AI SOC)
Branch61G Weekly for August 11, 2026: SonicWall SMA1000 moving from zero day to ransomware KEV with custom Java implants, a Progress Kemp LoadMaster command injection under mass probing, Head Mare turning TrueConf servers into trojanized update points, and a Metabase SQL injection used for customer data theft. The theme is the enterprise edge, where trust is thickest and visibility thinnest.
Island Integrates with Claude's New Inference Hooks for Inline AI Security
Island connects to Anthropic's Inference Hooks, letting its Enterprise Agentic Control Plane inspect every Claude prompt and tool result at runtime, before inference runs.
[remote] PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
PraisonAI praisonaiagents 1.6.77 - Remote Code Execution
[webapps] Blocksy Companion 2.1.46 - RCE
Blocksy Companion 2.1.46 - RCE
[webapps] Apache Gravitino 1.2.1 - SSRF
Apache Gravitino 1.2.1 - SSRF
A New Era Of Social Engineering: The Device Code Phishing Boom
Learn how threat actors abuse Microsoft’s OAuth feature to exploit security blindspots and bypass MFA — plus how Wirespeed can respond before attacks escalate.
When the Phones Go Down: The Coordination Gap Nobody Plans For
Isolation alone is not enough. Learn the three fallback-layer design requirements for communications continuity after network isolation and run a one-hour tabletop exercise to verify your readiness.
Productiv Deleted Your Data. Here’s How to Rebuild Your SaaS Estate From Zero.
Productiv permanently deleted all customer data. Here's what's actually gone, what you can rebuild, and a four-source plan to reconstruct your SaaS estate in 30 days.
How to run an agentic pentesting POC
A 10-day testing playbook to evaluate agentic pentesting vendors: what to test each day, the red flags to watch for, and a scorecard that works with any vendor.
Functional models and agentic AI data requirements in UNS
Agentic AI data requirements go beyond telemetry. See how functional models in a Unified Namespace ground safe, accurate reasoning for industrial AI agents.
Investigate account-level churn risk with Product Analytics account segments
Learn how Product Analytics account segments combine business context and product behavior to identify accounts that may be at risk of churn.
How we improved APM Java startup by encoding a prefix trie as a JVM constant
Learn how the Datadog APM team improved Java startup performance by encoding a prefix trie as a JVM string constant.
What is CTEM? Continuous Threat Exposure Management explained
CTEM is a continuous security framework for discovering, prioritizing, and validating exposures across your attack surface, including the browser layer.
What are device-bound sessions? How they stop session hijacking
Device-bound sessions tie an authenticated session to the device that created it, so a stolen token replayed from another device is rejected.
Transaction and Payment Fraud Detection Software: The Checkout Evidence Gap
Payment fraud detection software has to capture browser session evidence at checkout, not after, so merchants can win chargeback disputes later.
Weekly Briefing - 11-08-2026
Corgea's weekly briefing for 5-11 August 2026 covers PyPI's 9-10 August malware pulse, Apache Tomcat's fail-open `EncryptInterceptor` KEV path, Linux SCTP's SCTPhantom root and container-escape chain, and the week's NLTK downloader poisoning research.
PyPI's 9-10 August malware pulse hit fake ChainTest, fake CubeSat tooling, and import-time wallet stealers
Newly cataloged PyPI packages `chaintest`, `cubesat-upstream-driver`, `kotanku`, `btcflip`, `btcflx`, and `kotoraka` mixed dependency-confusion lures with import-time wallet theft, secret harvesting, and developer-host compromise during 9-10 August 2026.
LiteLLM Supply Chain Attack: 2,500+ Companies Exposed in the Largest AI Supply Chain Breach of 2026
CloudSEK's research on the LiteLLM supply chain attack, the largest AI supply chain breach of 2026, names the organizations potentially exposed: 2,500+ companies and 434,000 CI/CD pipelines worldwide. The LiteLLM breach began with a compromised Trivy build and cascaded through PyPI into automated CI/CD pipelines, putting cloud credentials, source code repositories, Kubernetes environments and AI infrastructure at risk. Check whether your domain appears in the exposure dataset. Authors :
Zero-Day-Schwachstelle in internen Tools: Was der Metabase-Vorfall auslöst
Ein kritischer Zero-Day in Metabase traf Framework und Tally. Was ein exponiertes internes Werkzeug an DSGVO-Pflichten und Nachweisanforderungen auslöst.
CaptiveCrunch: Wie kompromittierte Hotel-WLANs Microsoft-365-Konten übernehmen
So schützen Sie Ihre Microsoft-365-Konten vor CaptiveCrunch-Angriffen im Hotel-WLAN und unterbrechen die Angriffskette mit einem vollen VPN-Tunnel.
How To Detect When A Financial AI Agent Is Behaving Anomalously
Learn AI agent anomaly detection for financial services: baseline agent behavior with span-level telemetry, evaluate every span, and enforce inline.
Verified loops: Building AI agent trust and accountability
AI agents have crossed an important line from making suggestions to taking actions. They can read a repository, call internal systems, change code, open a pull request, and keep working while the human moves on.In this world, it is no longer enough to ask whether a model is capable. We have to ask: Who is acting, a person or their agent? What authority did they receive? Which systems could they reach? What evidence did the run produce? What permission should that evidence earn? And who remains a
1Password’s back-to-school tips for the digital world
It happened again. We blinked, and suddenly summer’s over and it’s time to register for classes. The horror!While the start of a new school year has always been a stressful time for parents and students, the growing number of accounts, apps, and devices students have been responsible for in recent years has made it even more complicated.To help manage the stress, 1Password is sharing our favorite back-to-school security tips for parents and students of all ages, so you can start the 2026 school
2026 Cloud Security Index: How risk differs across AWS, Azure, and Google Cloud
Top cloud misconfigurations, provider comparisons, and remediation times based on data from 3,000 organizations.
Where AI Security Breaks Down
A new Cyber Tribe report documents how 455 cybersecurity leaders expect agentic AI and governance gaps to reshape enterprise security strategy in 2026.
Vulnerability response in the AI-discovery era: A four-part plan
Abuse of alternative runtime environments Deno-tes defender headaches
Attack TTPs combine fileless execution, wide LOLBin use
ClickFix campaign abuses Deno runtime for infostealer delivery
Lures on compromised WordPress sites led to installation of Deno and a Python-based infostealer
Turn off file sharing when not needed to protect your private files on any network
File sharing is useful when you want to open a document from a laptop on your desktop, move photos between devices, or access a shared family folder at home. But when file sharing stays enabled everywhere, your device may expose more than you intended, especially on public Wi-Fi, shared apartment networks, hotels, airports, schools, coworking […] The post Turn off file sharing when not needed to protect your private files on any network first appeared on Total Defense.
Survey Report: 2026 State of Secure AI Access
100% of CISOs and CTOs Say AI Is Expanding Their Attack Surface — and Securing Machine-to-Machine Connectivity Is Now Their Biggest Blind Spot, New Survey Finds The 2026 State of Secure AI Access report reveals security leaders are under near-universal pressure to deploy AI, yet just 15% are confident their current tools can protect it […] The post Survey Report: 2026 State of Secure AI Access appeared first on NetFoundry.
One Kit, Two Industries: Inside a Fake Shop Platform
We started with six domains and a simple question: are these the same thing? They didn’t look like it. Three were selling boots, three were selling sleepwear, and one rendered in German. One had prices two orders of magnitude too high. Two didn’t carry a brand name in the hostname at all. Sixteen characters answered […] The post One Kit, Two Industries: Inside a Fake Shop Platform appeared first on Bolster AI.
Unified Matter Management Demo | On-Demand Session
Learn how a connected matter management approach reduces fragmentation and improves oversight in this on-demand demo. The post Unified Matter Management Demo | On-Demand Session appeared first on Mitratech.