Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

25,291 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Tax Season, Open Season: Phishing and Malware Campaigns Targeting Indian Taxpayers

A tax-season malware campaign is impersonating the Income Tax Department, sending fake penalty notices over WhatsApp. Victims who tap "Download Documents" install malware capable of harvesting OTPs and banking credentials. The advisory also covers a wider ecosystem of refund SMS fraud, cloned e-Filing portals, and fake e-PAN emails targeting Indian taxpayers this season. Authors : Shobhit Mishra

Announcement

The 1Password Environments MCP Server is now on Cursor Marketplace

AI agents are doing more than just generating code. Increasingly, they are working autonomously on complex coding challenges, touching production APIs, databases, and infrastructure across development environments, often without thorough human review. To perform these operations and access multiple systems, agents rely on developer secrets and non-human identities (NHI). But often, developers lack a secure way to share these secrets, leading to overprivileged, invisible access. The growth in aut

Announcement

Scaling security reviews at 1Password: Solving the context and nondeterminism problems

In our last post, we shared how we began to scale our security code review process with SAGE. We discussed how we gathered historical Product Security (ProdSec) review records to create a 1Password-specific ruleset, the three-stage Finder/Critic/Judge pipeline, and the limitations of our v1 implementation. Above all, human ProdSec reviewers still had to bring full context to the findings: where the trust boundaries lie, which directories are sensitive, and whether mitigations exist elsewhere in

Announcement

Breaking MCP at the Identity Layer

Part 1 attacked the MCP server itself. This part assumes all of that is patched and breaks in through the identity layer instead — where nothing is a bug you can close, and the server does exactly what it was told by the wrong person. We walk the 2026-07-28 authorization spec and the RFCs behind it, the confused-deputy attack that comes from getting consent wrong, how EMA and ID-JAG move consent to the IdP — and the four gaps that remain open afterwards, where every token is valid and nothing in

Announcement

Kimi K3 for Cybersecurity: #1 on Web, #7 on Defense

Moonshot's new open-weight flagship is #1 on WebDev Arena, beating Claude Fable 5 and GPT 5.6 Sol Max in blind human votes. On the Cyber Defense Benchmark it lands #7 of 22 at 33% coverage — the best Kimi yet, but behind open-weight leader GLM 5.2 on coverage, cost, and speed. Why general capability doesn't transfer to defense, and what would close the gap.

Announcement

The Attacker Never Sleeps, Neither Can Your Testing

AI is accelerating software development and giving attackers machine-speed capabilities. Security teams must continuously test AI-built code, govern agents, and independently validate every finding.

New capability

Introducing the SysQL Skill: Ask your security graph anything.

The SysQL Skill brings Sysdig's security graph into Claude Code, so you can ask any question in plain language and get back a validated query, real blast-radius data, and a prioritized fix decision. No query language, no console, no waiting on a report. Just a fix, all in one conversation.

Announcement

Why is Leadership the Biggest AI Risk in Financial Services?

Financial services businesses are embracing AI at a rapid pace. However, while AI is the greatest opportunity the industry has ever seen, it is also the greatest risk. And this risk has very little to do with the technology itself. The real danger is leadership expectation. The less leaders understand AI, the more they expect from it. That gap, between belief and reality, is where systems break, teams burn out, and resilience collapses. This is the stress fracture running through financial servi

Announcement

Netcraft Alternatives: 6 Strong Competitors to Weigh in 2026

Netcraft built its name on one thing done exceptionally well: finding phishing sites and getting them taken down. Decades of registrar relationships and a 33-minute median takedown time back that reputation up. So why do teams search for Netcraft alternatives at all? Usually because their problem outgrew the tool. Phishing is no longer a standalone […] The post Netcraft Alternatives: 6 Strong Competitors to Weigh in 2026 appeared first on Bolster AI.

Announcement

Wie Europa den KI-Wettlauf in regulierten Branchen gewinnen kann

Industrial AI entwickelt sich zur Grundlage einer neuen Generation intelligenter und regulierungskonformer Lieferketten. In Kombination mit vertrauenswürdigen digitalen Identitäten und dem Digitalen Produktpass (DPP) entstehen automatisierte Prozesse, die Produktdaten sicher, nachvollziehbar und über den gesamten Lebenszyklus hinweg nutzbar machen.

Announcement

Understanding the AI Agent Security Ecosystem: Roles, Responsibilities, and Where Runtime Authority Fits

As enterprises deploy AI agents, an entirely new security ecosystem is emerging. AI discovery platforms, MCP gateways, workforce AI governance platforms, automation platforms, and runtime authorization solutions all promise to secure AI agents—but they solve fundamentally different problems. Understanding where each category fits is becoming just as important as choosing the right products. The post Understanding the AI Agent Security Ecosystem: Roles, Responsibilities, and Where Runtime Authori

Announcement

Assess vs Answer: Which Side of Vendor Risk Are You On?

If you work in security, compliance, or procurement, you’ve probably lived on both sides of the vendor risk table without even labeling it that way. Some days, you’re evaluating a vendor before signing a contract. On other days, you’re the one being evaluated, filling out a security questionnaire because a customer wants proof you can be trusted. These are two different jobs. Most platforms ... Read more The post Assess vs Answer: Which Side of Vendor Risk Are You On? appeared

Announcement

Stopping the Fairlife Playbook on ESXi

This datasheet illustrates how ZeroLock blocks attacks like the one against Fairlife's Nutanix systems. The post Stopping the Fairlife Playbook on ESXi appeared first on Vali Cyber.

Announcement

AI Governance Best Practices: 12 Steps to Reduce AI Risk

What Is AI Governance?  AI governance best practices require a comprehensive framework focused on accountability, transparency, risk management, and human oversight. Organizations should build centralized standards with federated execution, classifying models by risk, requiring human-in-the-loop interventions for sensitive decisions, and continuously auditing systems for bias, security vulnerabilities, and data privacy compliance. Effective AI governance requires […] The post AI Gover