Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,308 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft’s August 2026 Patch Tuesday addresses hundreds of security vulnerabilities, but one issue stands out because attackers were already exploiting it before a fix became available. CVE-2026-68820 is a high-severity elevation-of-privilege vulnerability in the Windows Ancillary Function Driver for WinSock, or AFD.sys, that can allow a local attacker to escalate privileges to SYSTEM. The flaw […] The post CVE-2026-68820: Actively Exploited Windows AFD.sys Zero-Day Enables SYSTEM Privile
AI agents are moving out of the lab and into production. They research, write code, call applications, complete transactions, and chain together multi-step tasks with little human oversight. That shift creates an AI agent identity problem most organizations haven't planned for, because the systems now being asked to govern agents were never designed with them [...]
Summary Compliance pentesting for multiple frameworks is inefficient when teams run separate tests per regulation, duplicating cost and effort. A unified scope, a control mapping matrix, and risk-based prioritization let one engagement satisfy several frameworks at once. Autonomous penetration testing and PTaaS support the continuous validation that SOC 2, ISO 27001, PCI DSS, and NIS2 … Continued The post Compliance Pentesting for Multiple Frameworks: How to Align One Engagement with SOC 2
Thales TopSky – America, a modern, cloud-based, air traffic management platform, is Ready for Take Off prezly Wed, 08/12/2026 - 13:00 Americas United States Share options Facebook X Whatsapp Linkedin Email URL copied to clipboard 12 Aug 2026 Thales announced TopSky – America, an advanced air traffic control automation system built specifically for the U.S. National Airspace System.Built on more than 40 years of proven air traffic management experience, TopSky – America is tailored for the FAA to
A lot of MSPs have had the same thought at some point: "Our users report absolutely everything." A marketing newsletter. A calendar invite. An email from Microsoft. A legitimate DocuSign request. If it lands in an inbox, there's a good chance someone will click the "Report Phishing" button just to be safe.
Enterprise AI stalls because the most valuable data is also the most regulated. Why shadow AI is a supply problem, what Article 10 of the EU AI Act actually requires, and the five questions that show where your time is going.
For over two decades, the NIST National Vulnerability Database (NVD) has served as the U.S. government repository for standards-based vulnerability management data and as a foundational resource for cybersecurity risk analysis, vulnerability management, compliance automation, and software security. New Opportunities for the NVD via Automation Our cybersecurity landscape is changing dramatically and is being reconfigured by artificial intelligence (AI) in unique, exciting, and yes, sometimes chal
Verizon’s 2026 DBIR shows attackers often enter through vulnerabilities, then move with credentials. This post explains why identity governance, non-human identities, phishing-resistant MFA, and access visibility still determine blast radius.
During its recent hackathon, NowSecure’s research and engineering teams built working prototypes of AI-powered tools spanning the mobile app security lifecycle: agentic reverse engineering and finding validation, real-device exploit confirmation, AI-generated mobile device management (MDM) policy guidance and dramatically expanded vulnerability database coverage. Each prototype built on NowSecure’s research, specialized mobile application security testing tooling […] The post H
SAP Commerce Cloud CVE-2026-58231 Requires Urgent Patching SAP has addressed CVE-2026-58231, a maximum-severity improper authorization vulnerability in the Data Hub Adapter for SAP Commerce Cloud. The flaw carries a CVSS
Microsoft SharePoint is deeply embedded in enterprise collaboration, document management, and internal business workflows. Because SharePoint servers can store sensitive information and connect to other enterprise systems, a vulnerability that enables remote code execution can quickly become more than an application-level security issue. According to Cybersecurity News, Microsoft disclosed a high-severity vulnerability in SharePoint Server, The post Microsoft SharePoint Server RCE Vulnerability
Before you type your name, email, phone number, payment details, address, or résumé into a website, take a minute to ask one important question: Do I trust this company with my information? Cybercriminals often build fake stores, fake service websites, fake job portals, fake subscription offers, and fake support pages that look professional enough to […] The post Do business with credible companies to protect your privacy online first appeared on Total Defense.
Learn how cloud-managed reboot-to-restore keeps every shared endpoint at the same defined baseline, without relying on on-site infrastructure. The post Maintaining a Consistent Baseline on Shared Endpoints with Cloud-Managed Reboot-to-Restore appeared first on Faronics.
Identity, AI, software supply chains, and interconnected cloud ecosystems displace traditional infrastructure as top security concerns SEATTLE – Aug. 13, 2026 – Security practitioners are increasingly concerned about the impact of AI on cloud security, according to the findings of the Top Threats to Cloud Computing Survey Report 2026. The latest installation in the Top Threats to Cloud Computing series from the Cloud Security Alliance (CSA), the world's leading not-for-profit organiza...
As organizations continue to expose authentication and account-recovery flows directly to the public internet, these flows remain some of the highest-value, least-forgiving attack surfaces on the web. A single unparameterized query can turn a login form into a full database read primitive. During a recent bug bounty assessment, this finding was surfaced by FireCompass’s Agentic… Read More »How FireCompass AI Agent Discovered a Critical SQL Injection in an Authentication and
New survey data reveals why 69% of security leaders are least confident securing machine workloads, nearly 10x the concern for human users. See what's driving the gap. The post Machine Workloads Are Your Biggest AI Security Blind Spot appeared first on NetFoundry.
AI security covers how attackers break ML systems and how defenders stop them. Your cyber skills still apply. The post AI Security Fundamentals: A Practical Guide for Security Professionals appeared first on Practical DevSecOps.
How do you start? That’s the question that a lot of IT leaders ask when it comes to quantum-safe security, and it’s a critical question to answer. In a recent article in ComputerWeekly.com, our Chief Strategy Officer, Ben Packman outlines some simple, practical guidance that helps organizations today, without having to wait for a massive,Read More The post How IT leaders can start the shift to quantum-safe security: ComputingWeekly.com appeared first on PQShield.
Im Juli 2026 tauchten zahlreiche neue Risiken für IT-Sicherheitsverantwortliche in Unternehmen auf. Anfang Juli haben wir in unserem Blog über neue Probleme berichtet, wie beispielsweise die aktive Ausnutzung von Schwachstellen im WordPress-Core [2], Adobe ColdFusion [3] sowie Check Point SmartConsole [4]; neue Schwachstellen mit kritischem Schweregrad in Cisco-Produkten [5], BeyondTrust RS und PRA [6] sowie […]
Im Juli 2026 tauchten zahlreiche neue Risiken für IT-Sicherheitsverantwortliche in Unternehmen auf. Anfang Juli haben wir in unserem Blog über neue Probleme berichtet, wie beispielsweise die aktive Ausnutzung von Schwachstellen im WordPress-Core [2], Adobe ColdFusion [3] sowie Check Point SmartConsole [4]; neue Schwachstellen mit kritischem Schweregrad in Cisco-Produkten [5], BeyondTrust RS und PRA [6] sowie […]
Security teams running containerized workloads across EKS, GKE, and AKS clusters face a persistent coverage problem. Agents protect the hosts they’re installed on, but ephemeral containers, auto-scaled nodes, and serverless functions routinely spin up and terminate without ever registering with an agent. That gap leaves real vulnerabilities undetected in production. This article breaks down what […] The post Tools to Scan Workloads and Containers: Detecting Threats Agents Miss appear
| EU AI Act Digital Omnibus | The high-risk deadline was pushed back. Transparency obligations weren’t. Here’s exactly what applies today,what was deferred, and to whom. At a Glance QUICK ANSWER On 2 August 2026, the EU AI Act’s high-risk system obligations for standalone Annex III systems (employment, education, credit scoring, law enforcement, critical infrastructure, […]
Modern web applications often expose numerous server-side components that invoke operating system utilities to process user requests. While these utilities simplify functionality, they also expand the attack surface when user-controlled input is passed into shell commands or embedded scripting engines without proper validation. During a recent private bug bounty engagement, FireCompass AI Agent autonomously identified… Read More »From Discovery to Initial Access: How FireCompass
Most stakeholders treat a domain as a security boundary. It is not. The forest is. This walkthrough traces a single attack chain that started with domain-admin access already held in a child domain and ended with every credential in the environment dumped from the forest root. The pivot that made it possible was one forged… Read More »Attack chain walkthrough: Forest root domain compromise via golden ticket with SID history The post Attack chain walkthrough: Forest root domain co
Cisco ASA and FTD CVE-2026-20349 Exploited Cisco has confirmed active exploitation of CVE-2026-20349 , a High-severity denial-of-service (DoS) vulnerability affecting the Remote Access SSL VPN service in Cisco Secure Fir
Log into ZeroFox analytics and you’ll find dashboards waiting. But you don’t work by org chart. You work by intent: what am I trying to get done right now? That’s how the Essentials suite is built. That’s how the Essentials suite is built. Every dashboard is tagged to an intent, a job, not a department. […]
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident. The post Vibe Coding Security: What Happens When “It Works” Replaces “I Reviewed It” appeared first on Xygeni AI-Powered AppSec Platform.
Autonomous vehicle safety depends on a growing ecosystem of standards, frameworks, and regulations. This guide explains the most important ones, from ISO 26262 and SOTIF to the ISO 3450X family, ASAM standards, UL 4600, ISO 8800, and UNECE regulations, and shows how they connect across scenario generation, testing, validation, safety cases, and certification. The post Making Sense of the Standards in AV appeared first on Foretellix.
Compare the best Thoropass alternatives for compliance automation, including key strengths, limitations, and which platform best fits your needs. The post Top 5 Thoropass Alternatives appeared first on Scytale.
Last updated: August 2026 If you are trying to outsource some or all of your security, you will run into two options that sound similar but work differently: MDR and an MSSP. Choosing the wrong one is expensive, because a managed security service provider and a managed detection and response service solve different problems. This […] The post MDR vs MSSP: What’s the Difference and Which Do You Need? appeared first on Defendify.
How to restore your backups on Google Workspace (AMBaaS version) laurice.alas@a… Wed, 12/08/2026 - 18:14 { "@context": "https://schema.org", "@type": "VideoObject", "name": "How to restore your backups on Google Workspace AMBaaS version", "description": "How to restore your backups on Google Workspace AMBaaS version", "thumbnailUrl": [ "https://img.youtube.com/vi/BUqOlNE1baQ/hqdefault.jpg" ], "uploadDate": "2026-07-29T22:00:00+08:00", "duration": "PT04M23S", "contentUrl": "https://www.youtube.co
How to restore your backups on Microsoft 365 (AMBaaS version) laurice.alas@a… Wed, 12/08/2026 - 18:12 { "@context": "https://schema.org", "@type": "VideoObject", "name": "How to restore your backups on Microsoft 365 AMBaaS version", "description": "How to restore your backups on Microsoft 365 AMBaaS version", "thumbnailUrl": [ "https://img.youtube.com/vi/vV1c3AdZsfM/hqdefault.jpg" ], "uploadDate": "2026-07-27T22:00:00+08:00", "duration": "PT03M48S", "contentUrl": "https://www.youtube.com/watch?v
This guide covers how Qilin operates, what its attacks look like from initial access to data leak, and what security teams need to detect it early. What is Qilin ransomware? Qilin, also known as Agenda ransomware, is a cybercriminal group that operates under a ransomware-as-a-service model. It launched as Agenda in August 2022 and rebranded […] The post Qilin Ransomware: Attack Methods and 2026 Status appeared first on CybelAngel.
