Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,289 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
In our inherent risk series, we’ve explored what an inherent risk rating is and how to build an effective vendor risk tiering model. But once that baseline is established, a new question emerges: Which high-risk vendors require attention first? It’s a pressing question. ProcessUnity’s State of Third-Party Risk Assessments 2026 report found that organizations assess […] The post Vendor Risk Analysis: How to Prioritize High-Risk Vendors (Without the Guesswork) appeared first on ProcessUnity.
Third-party relationships can extend an organisation’s reach, improve efficiency and support growth. They can also create routes into systems, data and operations that are difficult to monitor directly.
BigID and Varonis, two of the larger companies in data security, have both shipped products in the last couple of months aimed at the same problem: AI agents getting to company data. BigID launched AgentIQ on September 21. It lets customers run their data security and compliance work from a prompt or an AI agent, […]
Blog Four Days to Pay: How Fast Ransomware Gangs Leaked Data in September 2026 September looked quieter than August on paper. ThreatMon counted 762 ransomware victims for the month, down from 1,067 the month before. That drop doesn’t mean much on its own, though. The month still brought attacks on a major Turkish conglomerate, an […] The post Four Days to Pay: How Fast Ransomware Gangs Leaked Data in September 2026 appeared first on ThreatMon.
CoreStack is pleased to announce our new partnership with Carahsoft Technology Corp., The Trusted Government IT Solutions Provider®, to bring our agentic governance OS to public sector agencies across the US. With more than 20 years of experience serving federal civilian, defense, and state, local, and education (SLED) agencies, Carahsoft helps expand our public sector... The post CoreStack Partners with Carahsoft to Expand Public Sector Reach appeared first on CoreStack.
Security teams face growing alert volumes, fragmented data and a persistent shortage of experienced analysts. These pressures can slow investigations and prevent organisations from gaining full value from their existing Microsoft security investments.
Are organisations becoming so reliant on third party space assets that they would face severe disruption if the assets were impacted by a cyber attack? When most people think of space technology, … The post The Blind Spot in Orbit: Why Space Could Be the Next Infrastructure Crisis appeared first on Palo Alto Networks Blog.
The countdown is on. Only 14 days until Altera Innovators Day 2026 in San Jose! We’re excited to join Altera and the FPGA community for a day of technical insights, live demos and conversations about what’s next in programmable computing. As an Altera Solution Acceleration Partner (ASAP), we’ll be showcasing Pepper, and demonstrating how we’re [...] The post Only 14 Days Away! Join Pantherun at Altera Innovators Day 2026 appeared first on Pantherun.
In the previous blog post on the topic, we explored how quantum computers threaten today’s security protocols and how post-quantum cryptography (PQC) provides a new foundation for protecting digital systems. The publication of PQC standards is an important milestone. But it does not mean that organizations can simply select a new algorithm, update a configuration file, and consider themselves quantum resilient. In this post, we examine why transitioning to PQC is much more than replacing one cry
Group-IB researchers analyze KGB RAT, a Windows Remote Access Trojan advertised on underground forums as being fully undetectable, featuring a built-in crypter, HVNC, credential theft, ransomware, and an unusual set of psychological harassment capabilities.
Following the money can reveal how a criminal operation works. Understanding who is behind it requires a broader view. In cryptocurrency investigations, blockchain intelligence helps analysts trace transactions, examine relationships between wallets, and understand the movement of funds. TRM Labs provides tools that support this work, helping investigators make sense of complex transaction networks. But […]
Certes receives Frost & Sullivan's 2026 PQC leadership recognition for quantum-safe data protection, crypto-agility, and securing data without infrastructure changes. The post Certes Receives Frost and Sullivan’s 2026 Global Post-Quantum Cryptography Enabling Technology Leadership Recognition appeared first on Certes.
Most security metrics tell you how your controls performed. Account takeover statistics don't. They tell you how somebody else's customers fared against somebody else's attackers, and then they get pasted onto a board slide as though they described your company. The post Account takeover fraud statistics, and the one number your program can actually move appeared first on Bolster AI.
Every conversation I have about AI agents eventually lands on the same question. Not “which model?” Not “what’s the prompt?” What can it touch? If a prompt injection lands, the damage stops where the agent’s credentials stop. The blast radius of an AI agent is its keyring, and the access graph is how you see […] The post Follow the Key: What an AI Agent’s Access Graph Reveals appeared first on Hush Security.
En un escenario en el que la inteligencia artificial acelera la capacidad de los atacantes para identificar vulnerabilidades, automatizar tareas y adaptar sus estrategias, la prevención sigue siendo imprescindible, pero ya no es suficiente. Las organizaciones necesitan prepararse para detectar las amenazas a tiempo, contener su impacto y recuperar la operativa con la mayor rapidez […] The post Más allá de la prevención: por qué la ciberresiliencia es el nuevo estándar frente a las amenazas
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks. The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.
Every smart camera, badge reader, connected printer and sensor on your network is an endpoint, and most of them are unprotected. That is the simplest answer to the question of why IoT matters to endpoint security. The Internet of Things has quietly multiplied the number of devices that can be attacked, and it has done […]
The European Cybersecurity Organisation (ECSO) has called for a dedicated European industrial policy for space cybersecurity, warning that... The post ECSO outlines six priorities for EU space cybersecurity policy, from secure-by-design systems to threat intelligence sharing appeared first on Industrial Cyber.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
Hush Entitlements adds access context to every NHI and AI agent Finding an AI agent is only the beginning. Agents don’t work alone. They reach your cloud services, data, and infrastructure through credentials and non-human identities (NHIs), and the access granted to those identities determines how far an agent can go. An agent with read […] The post You Found the Agent. Now Find Out What It Can Do. appeared first on Hush Security.
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.
ThinkLabs AI, an AI-powered grid intelligence company that empowers critical infrastructure with trustworthy, physics-informed AI, announced on Tuesday... The post ThinkLabs AI names Dragos’ Robert Lee to board to accelerate AI-driven grid planning, modernization appeared first on Industrial Cyber.
Financial market infrastructure, exchanges, clearing houses, payment systems, increasingly falls under both physical resilience frameworks and cybersecurity obligations at once. An operator significant enough to be designated critical infrastructure is, in many jurisdictions, also significant enough to fall under essential-entity cybersecurity requirements simultaneously. The physical side gets proportionate attention because it produces visible, inspectable evidence. Read more...
Defence supply chains supporting critical national infrastructure increasingly face both physical resilience obligations and cybersecurity requirements at once. An operator significant enough to be designated critical infrastructure is, in many jurisdictions, also significant enough to fall under essential-entity cybersecurity requirements simultaneously. The physical side gets proportionate attention because it produces visible, inspectable evidence. The cyber Read more...
Compare Reboot-to-Restore, VDI, and reimaging to find the best approach for keeping shared Windows endpoints consistent and easier to manage. The post Non-Persistent Windows Endpoints: Reboot-to-Restore vs VDI vs Reimaging appeared first on Faronics.
Learn how to govern autonomous AI agents in production: delegated authority, runtime controls, risk-mapped oversight, and audit evidence for every action.
We are pleased to announce that Codenotary has been accepted into NVIDIA Inception, a program designed to support companies developing innovative AI technologies and accelerate their growth. This is an important milestone for Codenotary as we continue expanding our focus on securing, monitoring, and controlling autonomous AI agents through our AgentMon and AgentX products. NVIDIA Inception provides access to technical resources, AI development tools, training, and potential go-to-market opportun
With guardrails lowered, OpenAI’s AI agents chained vulnerabilities and breached Hugging Face. Here’s what the incident means for your AI and network security.
Financial market infrastructure, exchanges, clearing houses, payment systems, increasingly falls under both physical resilience frameworks and cybersecurity obligations at once. An operator significant enough to be designated critical infrastructure is, in many jurisdictions, also significant enough to fall under essential-entity cybersecurity requirements simultaneously. The physical side gets proportionate attention because it produces visible, inspectable evidence. Read more...
The Coralogix migrations team has published what it measured. Since 2023 the team has moved more than 75,000 assets across 300+ migrations and onboardings, including a single migration of about 41,000 alerts. The new Migration Benchmarks page holds the figures by source, a calculator for your own migration and the causes of delay that post-migration […] The post Introducing Migration Benchmarks: every source we timed now converts in under an hour appeared first on Coralogix.
We ran OpenAI PrivacyFilter and Protecto on the same 150 enterprise prompts. PrivacyFilter detected about 68% of 344 annotations, but only 37% came back with a data type a policy engine can act on. Protecto correctly classified 90%. The post OpenAI PrivacyFilter vs Protecto: 344 Annotations Compared appeared first on Protecto.
On October 11, 2026, attackers manipulated refrigeration controls at hundreds of French supermarkets, forcing prolonged defrost cycles and destroying stock. Le Monde reported that extending the cycles delayed temperature alarms causing food damage and wastage. It was not until the morning after the attack that delivery workers noticed that the storeroom was damaged and triggered […] The post The Blind Operator: Lessons from France’s Supermarket Attacks appeared first on SIGA.
Beginning on Friday, October 16, 2026, N-able’s Adlumin MDR and Nightscope Threat Research teams have been tracking the now-confirmed compromise affecting the ConnectWise/SkyKick Cloud Backup app for Microsoft 365. What we've done On Friday, we engaged in a proactive hunt to identify Adlumin partners and customers who are using this M365 app and have performed outreach if indicators associated with this event. N-able’s Adlumin MDR and Nightscope Threat Research teams have constructed
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature. The work was done in a lab as a proof of
Governance platforms decide what AI is allowed. A behavioral control plane makes sure it happens. Here's how they compare. The post AI Behavioral Control Plane vs AI Governance: Key Differences appeared first on Polygraf.
