Shadow AI: how to discover, govern, and secure AI apps
Blocking AI tools doesn't stop employees from using AI — it stops you seeing how they use it. The solution: make the governed path easier than the workaround.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,309 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Research Worth Reading - Week 32, 2026
AI as a research partner, not a replacement. 🧩 Can AI do novel security research? 👍 1 This is probably the most interesting look I have seen at what AI-assisted security research can actually become. James Kettle does not simply ask a model to find bugs: he breaks his own research process into ideation, evaluation, weaponization and cascading follow-up research, then looks carefully at which parts benefit from AI and which are better handled by deterministic code or a human researcher.
Octagon: A New Android Bot Targeting Crypto Wallets and Banking Apps
A previously undocumented Android on-device fraud bot, advertised as malware-as-a-service since June 2026, with overlays for crypto wallets and banking apps.
Connect: Building a real-time data backbone for data accessibility
See how a real-time data backbone built on MQTT connects plant floor and enterprise systems, giving agentic AI the operational visibility it needs to act.
What is Account Takeover (ATO)? Definition, Attack Patterns, and Prevention
What is ATO? Account takeover (ATO) is one of the most common online fraud vectors. Understand what ATO is, the attack patterns behind it, and how to stop it at the browser layer.
How to Detect Anthropic Computer Use on Your Website
Anthropic's Computer Use agent controls a real browser to complete tasks. Detect the signature at the browser layer before the agent transacts on your site.
Browser Fingerprinting for Fraud Prevention: How It Works and Why It Matters
Browser fingerprinting produces a stable identifier from dozens of browser properties. Understand how it works, how it differs from device fingerprinting, and where it fits.
Fighting AI-Generated Malware with AI: BitNinja’s Binary Malware Analysis
AI is making it easier to create and modify malware at scale. Discover how BitNinja is developing AI-powered Binary Malware Analysis to detect suspicious executables, identify new Linux malware variants, and strengthen server protection against emerging threats.
Cognition's Jeff Wang on demoting the IDE, with Richard Liu from Anthropic
How AI coding agents are changing software developmentZero-Shot Learning is a podcast about how AI gets built, secured, and deployed. Hosted by Nancy Wang, 1Password CTO, and Dev Tagare, Senior Director of Engineering at Google, it’s a builder’s view of the architecture and the complex decisions it takes to ship with AI. This episode features guest co-host Richard Liu, Head of API Products at Anthropic, who sits in for Dev.The IDE has been the center of software development for decades, but Jeff
The most hyped CVEs of July 2026: what made noise, what's being exploited
If you haven't reviewed your external perimeter updates from earlier this month, here is what trended across the security community, & what entered CISA's KEV catalog.
Advanced vs. Qualified Electronic Signatures Explained - Blog | Wultra
Not all electronic signatures provide the same level of assurance. Under the eIDAS Regulation, advanced electronic signatures (AES) and qualified electronic signatures (QES) each serve different purposes and have different legal characteristics. This article explains the differences, how each works, and why the distinction matters.
No REST for the weary
GreyNoise Welcomes New SVP of Adversary Operations
Former Google Threat Intelligence leader joins GreyNoise as SVP of Adversary Operations to advance proactive discovery and disruption of cyber threats.
Shadow AI: A Visibility Problem, Not a Blocking One
Blocking shadow AI only hides it. See why AI use is a visibility problem and how governing at the browser, desktop, and network lets security say yes safely.
What Is an Autonomous SOC? Definition and Proof
An autonomous SOC runs AI agents that investigate and respond to every alert end-to-end, with analysts holding the approval gate. What the term means, how it beats SOAR, and how to measure it.
Security Automation Tools: The Capability Map That Outlasts Any Top-10 List
Every 'best security automation tools' list ranks its own product first. Skip the ranking: a vendor-neutral capability map of seven jobs and three tool types.
Automated Security Remediation: Reason First, Then Fix
Automated security remediation covers two very different things: fire-on-trigger playbooks and AI that reasons before it acts. Here's which one earns trust.
Elastic achieves Defence Cyber Certification Level 0 in the UK
Elastic has achieved Defence Cyber Certification (DCC) Level 0 — the UK Ministry of Defence's baseline cyber assurance standard for the defence supply chain. Here's what it means and why it matters.
Elastic community newsletter — August 2026
In this newsletter, we cover version 9.5 of Elasticsearch, the latest blogs and videos, and upcoming events.
The Invisible Stadium
See how AI, edge routing, and expert teams manage massive traffic spikes during the World Cup, ensuring a seamless, high-performance viewing experience.
Smashing Security podcast #480: This is the AI service you should never sign up to
Would you like access to Anthropic's Claude at 90% off the normal price? All you have to do is redirect your traffic to a mysterious service called "Poison Claude". Only problem is that it's run by fraudsters... Meanwhile, a phishing-as-a-service platform called "Greatness" has come up with something rather nasty: a phishing attack that doesn't need a fake website, a suspicious URL, or your password. Just a real Microsoft login page and a moment of misplaced trust - and the attackers walk off wi
QuSecure Featured in SecurityBrief: QuProtect R3 Added to Carahsoft’s GSA Schedule
SecurityBrief recently highlighted the addition of QuSecure’s QuProtect R3 platform to Carahsoft’s GSA Schedule contract. The agreement expands access to QuSecure’s post-quantum cryptography solutions for U.S. Government agencies, providing a streamlined procurement path for organizations preparing for federal quantum security requirements. QuProtect R3 enables agencies to implement post-quantum cryptography while maintaining operational continuity through crypto […] The
What Does Preemptive Cyber Defense Look Like Inside an AI SOC?
Silent Push preemptive cyber defense covers the agentic enrichment gap by feeding AI SOCs earlier data, making them faster and right more often. The post What Does Preemptive Cyber Defense Look Like Inside an AI SOC? appeared first on Silent Push.
Remote and hybrid work security: How to protect collaboration from anywhere
Remote work security used to be about getting employees safely connected to company systems. VPNs, managed laptops, endpoint protection, and home Wi-Fi guidance were the center of the conversation. That is no longer enough. As remote work has become part of a broader hybrid work model where employees switch between offices, homes, travel locations, coworking spaces, and external collaboration environments, and AI tools, the shift changes the security challenge.
What happens when employees paste customer data into ChatGPT?
Imagine what happens when your employees use ChatGPT to:Copy customer emails to draft clearer responsesUpload revenue data into Google Gemini to analyze growth trendsPaste customer chat transcripts into Claude to summarize issues quicklyUse GitHub Copilot to generate complex code snippetsEach task will be completed in seconds, efficiently, and the... The post What happens when employees paste customer data into ChatGPT? appeared first on ManageEngine Blog.
6 Things I Took Away From Black Hat
I went to Black Hat expecting to spend the week arguing about agents, but the number I came home thinking about was 26%. 1Password’s Off-by-1 Labs tested 6,080 AI-generated patches against six recently disclosed CVEs. Only 26% fully fixed the flaw without changing how the application behaved. Another 53.9% were what [...]
7 Ways to Improve Your Cybersecurity Tabletop Exercises
Tabletop exercises should do more than review your incident response plan or ask participants what they would do. Rather, they should demonstrate whether your organization can establish command, coordinate across functions, make defensible decisions, and execute under pressure. That standard is increasingly important as offensive AI increases the speed, scale, and complexity of attacks. Security […] The post 7 Ways to Improve Your Cybersecurity Tabletop Exercises appeared first on BreachRx
California Delete Act: What the New DROP System Means for Compliance
Data privacy laws used to move slowly. Then California decided consumers should be able to delete their data everywhere… with one request. That is the reasoning behind the California Delete Act. And if your business touches consumer data in any indirect way, this policy deserves attention. What Is the California Delete Act? The California Delete ... The post California Delete Act: What the New DROP System Means for Compliance appeared first on Concentric AI.
Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs
Why npm malware keeps reaching for Bun: how attackers abuse install-time scripts, why Bun helps them evade Node-based defenses, and the controls that actually reduce risk.
Put a Price Tag on AI Risk – and Raise the Bar on Governance Fidelity
"Insurance brokers are becoming an increasingly important part of our business, and working with a firm of Unison's caliber reflects that trend," said Scott Kannry, Co-Founder and CEO of Axio. "Unison's employee-owned culture and strong client relationships align well with our approach to helping organizations better understand digital risk. The industries they serve further highlight the value of integrating risk quantification into conversations about insurance and risk management." Read More
LABYRINTH Named Best Cybersecurity Innovation Europe at Cybersec Europe 2026
LABYRINTH has been named Best Cybersecurity Innovation Europe at Cybersec Europe 2026. The award recognizes LABYRINTH’s approach to Advanced Deception and Preemptive Security, helping organizations detect attacker activity earlier, validate attack paths, and respond with contextual evidence.
Introducing Cyera Agent Guardian: Secure Everything AI Can See and Do
Businesses are adopting agents faster than security can review them, and every agent inherits its owner's permissions the moment it's deployed. That is why Cyera approaches agent security from the data layer up. Today, that approach becomes a reality. Cyera Agent Guardian makes every agent as visible and accountable as a human employee, with every decision anchored in what the data actually is.
The Black Hat 2026 Diaries: Part Two | Do You Know Where Your Agents Are?
Explore the thrilling world of AI at Black Hat! From agentic runtimes to security challenges, let's unravel the complexities together in this tech adventure.
Microsoft Defender Patch Bypass: High Severity Zero-Day Privilege Escalation (CVE-2026-50656/RoguePlanet, ShieldBreak)
Threat Summary A critical zero-day vulnerability (CVE-2026-50656/“RoguePlanet”) in Microsoft Defender’s Malware Protection Engine (mpengine.dll) enables local users, including standard, low-privilege accounts, to escalate privileges to NT AUTHORITY\SYSTEM using a race condition and improper link resolution. Microsoft initially issued a patch (Engine v1.1.26060.3008) in July 2026. However, on August 12, 2026, a new exploit chain, “ShieldBreak,” ... Microsoft Defender Patch Bypas
Back to school: Is your tech really ready for the classroom?
You spent the summer getting devices enrolled, updated and compliant. That's the baseline, not the finish line. Learn what it takes to make sure devices are optimized for learning.
AI Is Moving at 5,000 MPH. Can Governance Keep Up?
Explore key takeaways from Ai4 2026 on closing the AI governance gap, defining AI incidents, and building a culture that empowers employees to report risk. The post AI Is Moving at 5,000 MPH. Can Governance Keep Up? appeared first on RadarFirst.
Where to Start Your AI Journey: Strategies Built for AEC
Where to Start Your AI Journey: Strategies Built for AEC bcollins Wed, 08/12/2026 - 14:03 Practical AI use cases for AEC firms: where to start, quick wins to achieve, and how to achieve ROI. Event Category Webinars Event Date Time Thu, 09/03/2026 - 08:00 Event Image Image Event URL Register Now Feature Event Off Event start date Thu, 09/03/2026 - 12:00 Event Time 8 am PT / 11 pm ET Industry AEC
Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost
  Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost   Most Kubernetes Cost overruns don’t come from one singularly bad decision. They come from dozens of reasonable ones — made independently, by different teams, at different times — that... The post Nirmata’s Cloud Agents Audited a 40-Cluster Kubernetes Fleet, and recovered 40% of the Cost first appeared on Nirmata.
The Attack Loop Is Compressing. The SOC Is Not.
AI does not need to invent a new class of cyberattack. It only needs to make attacker iteration cheap. Why the attack loop is compressing faster than the defensive loop, and where decision latency really hides.
Faces of Optery: Paul Mander
Faces of Optery is a series highlighting the people behind Optery’s mission to help individuals, families, and businesses take back control over exposed personal data. Bringing an Engineer’s Mindset to Commercial Leadership: Meet Optery’s Chief Commercial Officer In this story, Chief Commercial Officer and General Manager of Optery for Business Paul Mander shares how hisContinue reading "Faces of Optery: Paul Mander" The post Faces of Optery: Paul Mander appeared first on Optery.