Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

3,235 matching stories — release — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Release

Changelog - September 24, 2026

This week's Corgea changelog adds file include rules, guided pentest target setup, and on-demand CycloneDX SBOM downloads.

Release

SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released

SAP OVERPASS (CVE-2026-44756) remains an urgent patching priority for SAP solutions. As reported in our advisory earlier this month, the vulnerability affects the processing of SAP Extended Passport (EPP) data in shared SAP Kernel code. It can enable attackers to execute arbitrary operating system commands with SAP service account privileges by triggering memory corruption through […] The post SAP OVERPASS Update: New Attack Paths Identified and Public Exploit Toolkit Released appeared fir

Release

Polaris release update: Bringing AI security findings, scan governance, and remediation together

As development teams adopt AI-generated code and manage security across more repositories and workflows, keeping everything connected can become increasingly challenging. Scan configurations can drift over time, dependency risk can change between scans, and security activities often span multiple tools and environments. The latest Black Duck Polaris™ Platform release helps bring AI-powered analysis, scan governance, […] The post Polaris release update: Bringing AI security findings, scan g

Release

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

A use-after-free in the Linux kernel's AF_UNIX socket subsystem can be used to escape a container and gain root on the host, security firm DepthFirst said in research published September 22. The flaw, tracked as CVE-2026-80521 (CVSS score: 7.8), was fixed upstream on August 6, but Ubuntu has not shipped the patch for its 26.04, 24.04, or 22.04 LTS releases. DepthFirst