Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,306 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Most organizations running VMware ESX and vCenter have foundational controls in place: patching, restricted administrative access, credential protections, segmentation, and backups. But those controls do not answer the most important operational question: can your team detect and contain malicious activity at the hypervisor layer? The danger is not simply that an attacker reaches another system. At the hypervisor layer, one […] The post Your ESX Environment May Be More Exposed Than You Thi
Black Hat USA 2026 highlighted how cybersecurity has fundamentally changed. Here's a peek into what the Jamf team was up to, what we learned, and what we showed at the conference.
Skyhawk Security is listed as a Sample Vendor in the Intelligent Simulation profile of the Gartner Hype Cycle for Emerging Technologies, 2026. The Category Is the Story Skyhawk is a cloud security company. We could reasonably have expected to appear on a security Hype Cycle, next to other security vendors, in a category defined by […] The post Skyhawk Security Named a Sample Vendor for Intelligent Simulation in the Gartner® Hype Cycle for Emerging Technologies, 2026 appeared first on Skyha
A manager noticed it was dark outside their teammate’s window. It was the middle of the afternoon where that teammate was supposed to be sitting. That one small detail unraveled the whole thing. I have been having a lot of conversations with security leaders lately, and this is the one that keeps coming up. Every […] The post The Fake Employee Problem Hiding in Regulated Environments appeared first on Reveal.
A manager noticed it was dark outside their teammate’s window. It was the middle of the afternoon where that teammate was supposed to be sitting. That one small detail unraveled the whole thing. I have been having a lot of conversations with security leaders lately, and this is the one that keeps coming up. Every […] The post The Fake Employee Problem Hiding in Regulated Environments appeared first on Reveal.
There is a framework for thinking about what you know and don't know about the security state of your environment that I find consistently useful. It comes from intelligence practice: known knowns, known unknowns, and unknown unknowns.
Classification tells you where sensitive data lives. Without enforcement, that knowledge never becomes protection. The post Classification Without Enforcement Is Just Documentation appeared first on ALTR | Automated Data Access Governance and Security.
The SSO enrollment phishing kit hosts no branded content of its own. It asks Microsoft for your organization's genuine tenant branding at the moment a victim types their address, so every Microsoft 365 tenant with custom branding is a target at no extra cost to the attacker. Nothing brand-specific reaches a certificate log, and the same page broadcasts every credential it steals to everyone who loads it.
AI’s Speed to Market Comes at a Price: Governance If you are part of the data protection world, one of the most valuable sources of information is happy hour. This is where you hear all the stories that were not big enough to trigger a broader news story (but still just as eye-popping), and in […] The post Act. React. Regret. The Cost of Ignoring AI Governance appeared first on archTIS.
See how Fidelis XDR detects and responds to threats targeting AI infrastructure across network, endpoint, and deception layers with full visibility. The post How Fidelis XDR Supports AI Risk Management Across Network, Endpoint, and Deception Layers appeared first on Fidelis Security.
OpenAI, Anthropic, Meta, Moonshot, AISI: five disclosures show AI agents chaining mundane weaknesses into real compromise. Credentials set the blast radius.
Private-equity firms are among the latest targets of a financially motivated threat cluster tracked by Google Threat Intelligence Group (GTIG) as UNC6671. The operators previously used the BlackFile name and now present themselves as REDACT. REDACT relies heavily on voice phishing, credential theft and access to cloud services. For private-equity firms, where a compromised identity may expose information spanning multiple […] The post BlackFile Becomes REDACT: Private Equity Firms Face Dat
Social media management has come a long way from simply publishing posts.Today, marketers are expected to create content, manage multiple social networks, maintain a consistent publishing schedule, monitor engagement, collaborate with teams, report on performance, and connect social efforts to business outcomes. At the same time, AI assistants are...
By Sarah Riggins and Dr. Denis Gopan The Memory Safety Reckoning: Part 3 of 4 The post Why Rewriting Everything Isn’t Realistic appeared first on GrammaTech.
Learn how large organizations scale Privacy Impact Assessments with standardized workflows, risk-based reviews, and audit-ready documentation. The post How Large Organizations Scale Privacy Impact Assessments appeared first on RadarFirst.
MCP revision 2026-07-28 improves two of the three identities behind every agent action: the agent making the call and the account whose permissions it uses. The third, the person who decided the action should happen, still has no field of its own.
TL;DR Sonatype Research Labs identified six npm packages delivering the same malicious payload: three hijacked legitimate packages and three additional malicious packages, tracked as sonatype-2026-005899 and sonatype-2026-005901. The malware uses the same Ethereum wallet address identified by OpenSourceMalware in activity attributed to the DPRK-linked Contagious Interview campaign, using the "NullReceiver" technique to locate infrastructure hosting additional JavaScript payloads. Organizati
Adding post-quantum algorithms to a FIPS module requires more than adding new algorithms. It changes the module boundary, RNG testing, integrity checks, entropy validation, and operational testing. Join this webinar for an early look at wolfCrypt v7.0.0 and the engineering work required to bring NIST-standardized post-quantum algorithms inside the FIPS 140-3 boundary. This webinar will […]
Meta's new Glimmer model runs agentic workloads on a single consumer GPU. Why that makes authorization, not intelligence, the next infrastructure layer.
If your engineering team is building software at scale, you already know the problem. Finding vulnerabilities is no longer the hard part. The market is flooded with tools that can scan a codebase, check dependencies against a CVE database, and flag a thousand potential issues before lunch. The hard part is figuring out what to do next.
Threat detection remains essential, but EDR alone cannot stop every attack. Learn why security teams are adding threat containment to reduce risk, alert fatigue, and attacker freedom.
Sovereign cloud is the cloud industry’s fastest-growing promise and its most frequently broken one. A sovereign cloud is a cloud environment designed so the data and workloads inside it stay fully subject to the laws and control of a single jurisdiction, and beyond the legal reach of any foreign government. That is the sovereign cloud... The post What Is Sovereign Cloud – and Why Most Providers Fall Short appeared first on Duality Technologies.
Understand Network Forensics and discover how it enhances cybersecurity through intrusion detection, evidence gathering, and incident response strategies. The post The Role of Network Forensics in Identifying Threats appeared first on Fidelis Security.
Palqee is pleased to announce that we have been accepted into the Fintech Sandbox Data Access Residency, a program that supports high‑potential fintech companies by providing access to premium, governed datasets from leading global providers. For us, this marks an important milestone in the evolution of Prisma, the industry’s first Guardian Agent for Enterprise AI & Human Workflows.
Contributor: Francesco Berardi
Mentors: Matteo Lodi
An analyst opens IntelOwl, types “is job #40 malicious?”, and gets back:

Job #40 is classified as malicious with a reliability score of 7 out of 10. The verdict was
supported by 2 analyzers and contradicted by 1 analyzer, while the remaining 3 analyzers did not
provide an opinion (silent).

No API key. No token bill. No byte of that observable ever left the machine.
That is what I built for Googl
In Skyhawk’s view, the recognition reflects growing role of intelligent simulations across enterprise and industrial environments Skyhawk Security, a pioneer in AI-based red team cloud security, has been named a Sample Vendor for Intelligent Simulation in eight 2026 Gartner® Hype Cycle™ reports. Skyhawk believes this recognition underscores a cross-industry shift from static security playbooks to […] The post Skyhawk Security Named a Sample Vendor in Eight 2026 Gartner® Hype Cycle™ Reports
A 2024 Team8 survey focusing on Fortune-2000 enterprises, showed that just a third of enterprises “have a mostly current inventory of applications that they can access.” Why then this huge gap of knowledge and how can we overcome it?
We’ve released a new set of features for Lunar Essential, giving security teams more ways to investigate incidents, automate response, and connect Lunar to the tools they already use. Just as importantly, Lunar is built to be easy to adopt. It’s a self-service solution: you can start with the Community tier, see the threats Lunar […] The post Lunar Essential Adds New Incident Response, Automation, and Integration Capabilities appeared first on Lunar Cyber.
How legal teams can protect confidential file exchanges Legal teams handle information that can shape the outcome of a dispute, transaction, investigation, or client relationship. Contracts, case strategies, and due diligence materials are not ordinary business files. If they are shared with the wrong person or left accessible after a matter closes, the consequences can be legal, financial, and reputational. Secure document sharing is therefore not just about sending files quickly. It is about b
