Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,300 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Every IT leader has felt this tension: your organization has invested in AI, automation and digital operations, and yet outcomes still fall short of expectations. Even with the right tools and intent, you won’t be able to fully realize the value of your AI investments if they’re built on an unsteady foundation. The data confirms this challenge. Ivanti’s 2025 AITSM research found that 89% of organizations say siloed data negatively impacts IT operations, and 44% cite security and compliance conce
The difference between a standard cloud test and a subscription takeover? Finding the right secrets. In this blog, we introduce two open-source tools for hunting Azure secrets that probably shouldn't be there.
Discover how Kentik and Infoblox combine network observability, authoritative network data and AI-driven operations to simplify hybrid multi-cloud infrastructure.
SANTA CLARA, Calif., August 6, 2026 – Recently, the global research and advisory firm Forrester has released its first report on Agentic Development Security (ADS) tools, “The Agentic Development Security Tools Landscape, Q2 2026[1]”. NSFOCUS has been recognized among representative vendors in the report, marking international acknowledgment of the company’s technical capabilities in AI supply chain […] The post NSFOCUS Recognized in ADS Tools Report for Agentic Development Security C
Learn how Mythos-ready security and always-on VulnOps help CISOs respond faster to AI-accelerated vulnerabilities, exploit chains, and cyber risk at scale.
MCP's 2026-07-28 revision drops sessions and the initialize handshake in favour of per-request metadata and server-minted handles. Owl Browser 1.3.2 ships it on a dual-era endpoint, adds browser_do and browser_rows for multi-step agent work, and fixes the quiet omissions that made agents give confident wrong answers.
Traditional SCA flags every CVE whose version range matches your lockfile, even when the vulnerable code never runs. ZeroPath's AI agent checks whether each dependency CVE is reachable and exploitable in your app, adds KEV and EPSS signal, and opens fix PRs.
When you build a detection model, the model is the easy half. The hard half is prepare training data from an adversary who refuses to give you any. Here's the data flywheel we built to do it.
Building the evaluation factory behind LogLM, TempoRange leverages three distinct engines to generate rich, accurately labeled datasets for security models. The Scripted Range executes reproducible kill chains across the full spectrum of MITRE ATT&CK techniques with guaranteed 100% label accuracy. To capture real-world conditions, the Detonation Range safely runs live open-source malware inside a sealed environment with egress containment. Finally, the ARTEMIS Range utilizes Stanford’s autonomou
Inside a three-tier infrastructure of adaptive droppers and fileless C2 — a brute-force stager, an adaptive dropper, and a C2 hiding behind a real web server, tracked tier by tier from honeypot capture to payload teardown.
The EU Cyber Resilience Act compliance timeline explained: entry into force in December 2024, the September 11, 2026 vulnerability reporting deadline, and full conformity with CE marking by December 11, 2027, plus what to prioritize at each stage.
In this Q&A, John Espinosa, GDIT VP for Government Operations, shares how curiosity and mentorship guided his career, why citizen-facing missions are deeply personal, and how his team is working to bring practical, scalable innovation to some of government’s toughest challenges. https://washingtonexec.com/2026/08/john-espinosa-turned-an-unexpected-it-pivot-into-leading-gdits-civilian-operations/?mc_cid=3dd151606d&mc_eid=d47f712bf2
The new AI-assisted SDK toolkit for BlackBerry Dynamics automates the migration of existing native iOS and Android apps into the Dynamics secure container.
:AI: !ai! A hidden .mcp.json file lets attackers achieve remote code execution in Claude Code via a malicious pull request — no user action required. See the PoC.
Over the last few years, Databricks has grown from a managed Apache Spark platform into an end-to-end data and AI platform that serves technical and non-technical professionals alike. Its governance layer. Unity Catalog (UC), has made tremendous strides since going Generally Available in 2022, and handles the technical side of governance well, including access controls, lineage, and drift detection. What UC doesn’t set out to cover is the business side of governance: the shared definitions, data
Why centralizing operational data slows industrial AI at scale, and how a distributed intelligence model helps teams act on operational data in real time.
MCP 2026-07-28 removes the initialize handshake, sessions, and server-initiated requests. What changed at the wire level, and how to migrate a server or client.
CISA added Apache Tomcat `CVE-2026-34486` to KEV on 4 August 2026, but the important technical detail is smaller than the CVSS suggests: a regression moved `super.messageReceived(msg)` outside the `try` block in `EncryptInterceptor.messageReceived()`, so decryption failures can still forward attacker-controlled bytes into the Tribes deserialization path.
It's 6:30am and you hear the door of the nightclub you've spent the last 8 hours inside shriek as it closes behind you. You watch bleary-eyed as an overly bright sunrise illuminates the business-suited people as they glide effortlessly along the sidewalk, their obnoxiously well-rested faces talking about work on their fully charged phones. You wonder, "Where did all the fun people go? And what happened to my wallet?"This feeling is what many CFOs, CTOs, CEOs, and AI program managers will imminen
This article was updated September 16, 2026. See the recommendations section below.We studied what happens when Large Language Models (LLMs) generate vulnerability patches for recently disclosed, complex vulnerabilities. Our data shows that LLMs produce Fix-Like Artifacts with Embedded Defects (FLAWED) 53.9% of the time when complex patches are required. By sharing the results of our research, our goal is to provide defenders with the tooling and methodology necessary to improve vulnerability re
AI has changed the calculus of a credential attack. Before, finding and exploiting credentials in an enterprise environment required time, patience, and human judgment. An attacker had to decide which accounts were worth testing and which systems were worth reaching. Many credentials never made the list. By contrast, an autonomous system that gains a foothold in a victim’s systems has no need to be picky. It can sweep an environment in moments, scooping up API keys, service account tokens, OAuth
Agent inventories tell you what exists. Island shows what's running: which identity, which agent, which resource, right now, with just-in-time access at the gateway.
Learn why trusted context — not just powerful AI models — is the foundation for scaling agentic AI in financial services. Discover how unified data, observability, enterprise search, and governance enable trusted autonomous operations.
Discover how Fastly and Experian Agent Trust enable secure agentic commerce. Learn how to verify, authorize, and monetize AI agent traffic at the edge.
The EU AI Act is in force. By 2026 enterprises must meet strict requirements for GenAI systems including adversarial testing, guardrails, and continuous risk management.
Australia has set a minimum age of 16 for social media use. Learn why enforcement, age assurance, and content safety will determine whether this law truly protects teens.
For the last year, I’ve been watching security teams argue about AI as if it fits neatly into one of two buckets. Either it’s “just another application” and we can handle it with standard AppSec controls, or it’s some radically new category of risk that demands entirely new security theory. Having worked as both a pentester and a software engineer, I think both positions miss what’s happening. It’s not that AI breaks security. AI breaks a foundational assumption that most of our security practic
Originally published by Darktrace. Introduction To observe adversary behavior in real time, Darktrace operates a global honeypot network known as “CloudyPots”, designed to capture malicious activity across a wide range of services, protocols, and cloud platforms. These honeypots provide valuable insights into the techniques, tools, and malware actively targeting internet‑facing infrastructure. One example of software targeted within Darktrace’s honeypots is Hadoop, an open...
Every program gets the same question eventually. It arrives from a CFO, a board member, or a CISO three days out from a quarterly review, and it sounds deceptively simple: how do we know this is working? The reflex answer is a number. We took down 5,000 malicious sites last quarter. It fills the slide, […] The post Brand Protection Metrics: What to Measure Beyond Takedown Volume appeared first on Bolster AI.
Novee CEO and co-founder Ido Geffen on owning every layer of the AI pentesting stack, from the offensive reasoning model to the harness and the training gym behind it, and why that turns a generalist AI hacker into one built for your business. Most “AI offensive security” tools are built the same way: renting reasoning […] The post Watch: Model, Harness, Gym: Why Novee Owns the Full AI Pentesting Stack appeared first on Novee.
Data pipelines are rarely simple anymore. A typical enterprise pipeline might ingest data in AWS, process it in Azure, send a subset to a SaaS analytics platform, and store the results in Google Cloud. That useful flexibility also creates a security problem. Every stage that processes or transmits sensitive data needs a clear encryption and key management strategy. CSA’s new research on multi-cloud key management solutions (KMS) emphasizes that data pipelines process and transmit large v...
