Cyber Insurance Requirements 2026: How ZTNA and MFA Cut Your Premium
What insurers demand in 2026: universal MFA, EDR, backups — and no legacy VPN (73% of ransomware intrusions). The checklist, traps and premium effects.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,299 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Always On VPN Alternative: Why Microsoft’s DirectAccess Successor Is Already Legacy
AOVPN is supported but frozen: no new investment, 14 RRAS CVEs since 2024, and Microsoft pushing Entra. The three exits compared, with costs and steps.
QuSecure Featured in Federal News Network: The Quantum Imperative for Federal Cybersecurity
Federal News Network recently featured QuSecure’s perspective on why federal agencies cannot afford to delay preparations for quantum-era cybersecurity. The article explains that while cryptographically relevant quantum computers are still emerging. Organizations must act now because sensitive data stolen today could be decrypted in the future through “harvest now, decrypt later” attacks. Preparing for the […] The post QuSecure Featured in Federal News Network: The Quantu
Online scams What is a scam and how can you defend yourself?
The internet is vast— and, we’re sad to say, so too are the number of scams waiting for careless users. There are many different types of online scams, and they employ all sorts of tricks and techniques. Whether you’re shopping online, chatting in messaging apps, browsing dating, property, or job platforms, or scrolling through social
Wie MSPs nach der neuen britischen Gesetzgebung zu einem „kritischen Lieferanten“ werden könnten
Even if MSPs are not directly regulated, there’s a second way The UK’s Cyber Security and Resilience Bill may affect them  In part one of The post How MSPs could become a ‘critical supplier’ under new UK legislation appeared first on Kaseya.
Scaling Smart: Lessons from the 2026 Framework Adoption Trends
The compliance landscape continues to shift fast, and if you feel like you are constantly chasing the next framework, you’re not alone. Hyperproof’s 2026 IT Risk and Compliance Benchmark Report looked at the frameworks your peers are using, how they handle regional variance, and their ongoing battle against spreadsheet sprawl.  Whether you’re leaning into common... The post Scaling Smart: Lessons from the 2026 Framework Adoption Trends appeared first on Hyperproof.
Know Your Worker: Badges Don’t Prove Identity or Authorization. Digital Workforce Credentials Do
The System of Authority: Why MSPs Need More Than Documentation
Most MSPs run on documentation. A wiki someone updated after the last big project. A spreadsheet that was accurate when it was built back in 2022. A PSA record that reflects whatever the last tech remembered to enter. All of that documentation describes a moment from the past. Which is fine, until you need to […] The post The System of Authority: Why MSPs Need More Than Documentation appeared first on Liongard.
US AI leaders turn to Chinese open-weight models, challenging closed-source safety claims
More American titans of artificial intelligence are describing Chinese open-weight models as better for AI safety and security than closed-source models, challenging the long-standing claim by US closed-source AI model developers such as Anthropic that open-source models present a threat to society. “From what I’m seeing, I think open-weight models seem safer to me than closed-weight models,” AI pioneer Andrew Ng, the former head of Google Brain and former chief scientist at Baidu, said at the..
5 Reasons Why Developers Still Download Malicious Packages
Engineering organizations deploy dependency scanners, train developers, secure endpoints, and establish policies for open source components. Yet malicious packages still reach developer workstations, build systems, and CI/CD environments.
Liminal Expanded Search: Full Command Depth in Every Query
Search a topic and get ten object types in a confidence-ranked list of results across Command Your product team needs to benchmark a competitor. The company profile is in one place, its products in another, recent market signals in the Monitor, and the research covering it in the reports library. Finding anything required knowing where […] The post Liminal Expanded Search: Full Command Depth in Every Query appeared first on Liminal.co.
Axiado Named Finalist of the Coveted Top Infosec Innovator Awards 2026
During BlackHat USA 2026, we have been named a finalist the Top InfoSec Innovator Awards 2026 by Cyber Defense Magazine (CDM), the industry’s leading electronic information security magazine. The post Axiado Named Finalist of the Coveted Top Infosec Innovator Awards 2026 appeared first on Axiado Corporation.
Old Policies, New Technology: Is Your Insurance Actually Ready for AI?
Most business owners have never read their commercial insurance policies front to back. They renew, file the paperwork, and trust that if something goes wrong, they're covered. For years, that quiet trust extended to artificial intelligence too, even though the word “AI” appeared nowhere in the policy. That era is ending, and it's ending faster than most leadership teams realize.
Announcing Santa and Workshop 2026.7
Santa and Workshop 2026.7 add rule packs for every rule type, richer Signals, package inventory scanning, redesigned Commands, and more
Arcade.dev Is Live in the Cisco Duo Marketplace
Arcade.dev is now in the Cisco Duo marketplace, enforcing your existing Duo access policies on every action your AI agents take.
Internal Coding Agent Monitoring: What the AI Gateway Sees and What It Misses
Internal coding agent monitoring goes beyond the AI gateway. See what gateway telemetry misses and how to correlate it with agent traces.
Automated Code Remediation via AI Agents
Security teams are drowning in technical debt while engineering ships code faster than ever. Traditional scanning tools are great at detecting flaws, but finding a vulnerability is only the first step. The real bottleneck is fixing it.
Veracode vs Checkmarx vs Amplify Security (2026 Comparison)
If you have spent any time working in app security, you already know the routine. You plug a scanner into your pipeline and run a test. Then, you receive a massive report with thousands of critical vulnerabilities. Security throws the report over the fence to the engineering team. Engineering looks at the sheer volume of alerts. They realize half are false positives or lack context, and push back right away.
CodeRelay: 12 VS Code Extensions Disguised as Developer Tools
CodeRelay: a coordinated campaign of 13 malicious VSIX packages across 12 VS Code extensions disguised as developer tools. Analysis, IOCs, and defenses.
How to prevent autonomous agents from breaching corporate infrastructure
Launching AI-driven cyberattacks on businesses no longer requires advanced OpenAI models. We analyze a recent breach to build an effective defense strategy against AI-driven attacks.
What 20 Fortune 500 IAM Leadership Titles Reveal About the Agent Authorization Gap
Identity and access management has grown up inside the Fortune 500. The function now reports… The post What 20 Fortune 500 IAM Leadership Titles Reveal About the Agent Authorization Gap appeared first on PlainID.
Inside PDIQ: Exploring the Foundation Beneath the Product
In the first post of this blog series, I covered a shift we’re seeing across convenience retail: software that goes beyond reporting and analysis into systems that can help operators take action. That shift raises an obvious question: What has to exist underneath a product like PDIQ for it to consistently act in a reliable way? The answer involves much more than a foundation model. When […]
Raw Logs Get AI Triage Wrong. Every Time. – Axoflow
We gave a security agent raw, unnormalized vendor logs and asked it to triage a real attack scenario. Nine runs, zero correct. Here's why raw logs break AI triage — and what changes once the data is normalized and enriched.
Contact
NIS2 and DORA Compliance for Security Teams
A plain-English guide to NIS2 and DORA for security teams. See what each regulation requires, where they overlap, and how to cover them together, whether you secure one organization in-house or a whole portfolio of clients as an MSSP. The post NIS2 and DORA Compliance for Security Teams appeared first on Zynap.
NVIDIA Alpamayo 2 Super Raises the Bar for Autonomous Driving — and for AV Validation
NVIDIA has released Alpamayo 2 Super, NVIDIA’s most powerful open driving foundation model to date The post NVIDIA Alpamayo 2 Super Raises the Bar for Autonomous Driving — and for AV Validation appeared first on Foretellix.
HIMSS DFW Meet the Board Summer Social: Building Relationships That Drive Healthcare Cybersecurity Forward
Celerium’s Senior Enterprise Account Executive, Kevin Harding recently attended the HIMSS DFW Meet the Board Summer Social, an opportunity to connect with healthcare technology leaders from across North Texas and discuss the evolving cybersecurity challenges facing healthcare organizations.
Full Guide: VPN Scams and How to Spot Fake VPNs
Table of contents What Is a VPN Scam? Common VPN Scams and How to Recognize Them What to Do If You Download a Scam VPN How to Pick a Legitimate VPN Provider Steer Clear of VPN Scams FAQ Let’s say you want to install a VPN before traveling to a place where you’ll have to depend on unsecured public Wi-Fi. You search, click the first result, and end up on a site offering a “lifetime VPN” for the price of a matcha latte. The page looks polished, the reviews are glowing, and the download button is fr
When Every Day is Zero Day
See how AI agents are changing zero-day vulnerability discovery, cyberattack economics, and incident response—and why security teams need continuous assessment, faster remediation, and locally hosted AI capabilities. The post When Every Day is Zero Day appeared first on Protegrity.
How to free up space on your Windows PC and Mac
Even though computers and laptops now come with ever greater amounts of storage, at some point or another you’ll find you’ve run out of space and your device is getting slower and slower. But thankfully, help is at hand! Read on for a step-by-step guide on what you need to do to beat the bloat
Augmentt Update: Fix a Check Across Every Failing Tenant, and AI Risk Report Goes GA
This Augmentt release lets you remediate a failing compliance check across every affected tenant from one screen, takes the AI Risk Report out of beta, adds Purview DLP policy templating, and brings break-glass accounts and SharePoint into the Compliance Audit.
How to Recognize and Avoid Downloading Malicious Code: Signs & Useful Tips
Table of contents What Is Malicious Code? How to Avoid Malicious Code Is Your System Affected by Malicious Code? Preventing and Guarding Against Malicious Code Is the Best Defense FAQ Malicious code typically only works when someone interacts with it, either by opening a file, allowing an unknown program to install, or clicking on a seemingly innocuous link. But this also means that many malicious code infections are preventable if you know what to look for. Though it’s impossible for this guide
Cynomi and SPECTRA Team Up to Turn Security Delivery Into Provable, Warranty-Backed Business Value
Every partner delivering security services runs into the same wall: clients, prospects, and insurers have no easy way to trust that the work behind the scenes is actually good. Cynomi’s new strategic partnership with SPECTRA solves that by giving partners a direct, in-platform path to SPECTRA Certification. The security services partners already build and manage become an independently validated credential, one that […] The post Cynomi and SPECTRA T
ValidSoft Unveils The Full AI Voice Trust Intelligence Stack to Secure Humans and AI Agents from Identity Verification to Execution
How Did Aqua Catch a Cryptomining Attack Hiding in Memory?
TLDR: The attacks most likely to go undetected are the ones that never touch disk. They leave no files, trigger no signatures and are specifically engineered to evade the scanners and sensors most organizations depend on. Aqua’s runtime behavioral detection engine identified a multistage fileless cryptojacking campaign in a customer environment and surfaced malicious activity …
Meet our 2026 Innovation Award Technology Nominees
It's clear that our community isn't just adopting AI; they're engineering everything around it to be accountable, efficient, and defensible. Take a peek at the nominees for each technology-focused category in this year's Innovation Awards.
The AI Meter Vs. The AI In The Price: Why Predictable Wins At Renewal
Usage-metered AI makes next quarter's cost the one number you can't see. Why token-inclusive pricing is what makes a clean budget swap possible. The post The AI Meter Vs. The AI In The Price: Why Predictable Wins At Renewal appeared first on D3 Security.
Why AI coding makes zero trust an AppSec requirement
Traditional SBOMs, signing, and provenance all have blind spots, making them no longer capable of assuring software security.
Fake CAPTCHA, Real Business: Traffic Distribution for Hire
A single PDF factory has stamped out more than 12,700 structurally similar FakeCaptcha documents and parked them on Webflow’s content delivery network, where Google indexes them as ordinary “upgrade guides.” Each document is a doorway into a traffic-distribution system (TDS) that sorts visitors and routes those that qualify to multiple buyers, malware distributors, and scam […]
Fake Zoom installer uses .NET downloader to deliver Overlord RAT on macOS
Jamf Threat Labs uncovers a macOS campaign using a fake Zoom installer to deploy Overlord RAT. Built with .NET, this cross-platform technique simultaneously targets Windows, joining Go- and Rust-based cross-platform malware.