Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,289 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Microsoft: Windows 11 24H2 Home and Pro reached end of support
Microsoft announced today that devices running Windows 11 24H2 Home and Pro editions have reached the end of support and will no longer receive monthly security and non-security preview updates. [...]
Kev-4B is live on Phala: typed decisions for AI agents
Synqly Adds JupiterOne Integration for Asset Visibility
We are announcing a new JupiterOne integration now live within the Synqly ecosystem. The post Synqly Adds JupiterOne Integration for Asset Visibility first appeared on Synqly.
What's New in Lakeflow Designer - October 2026 Roundup
We launched Lakeflow Designer to general availability in June, and since then, over...
CMMC Compliance Checklist
12 Step Checklist Your Organization Needs to Meet CMMC 2.0 Compliance Requirements To become CMMC compliant, you need to identify the information you handle (FCI or CUI), confirm your required level, and scope every system that touches that data. Then you implement the required controls, document how you meet each one, post your score to […] The post CMMC Compliance Checklist appeared first on PreVeil.
Commvault security advisory (AV26-1033)
Google’s Fingerprinting Policy Shift Raises Online Privacy Concerns
Online privacy is changing as a result of browser fingerprinting. The way it works is worrisome to regulators & technology companies, making them pay more attention to it. Unlike what happens with conventional tracking cookies, which store identifiers in a browser, fingerprinting makes use of characteristics of a device to know how it is different […] The post Google’s Fingerprinting Policy Shift Raises Online Privacy Concerns appeared first on PrivacySavvy.
Everyone's adopting AI agents. Almost no one can prove the ROI. Here's why
Amber Roberts, Staff Technical Marketing Manager at Databricks, has spent the last...
Artemis is a launch partner for the Cursor Origin marketplace
Artemis is a launch partner for the Origin marketplace. Detect suspicious Cursor and Origin activity and investigate alerts with read-only code access. The post Artemis is a launch partner for the Cursor Origin marketplace appeared first on Artemis Security.
Reco Reaches 200 SaaS Integrations for AI Governance
Discover how Reco became the first SaaS security platform to reach 200 integrations, expanding visibility and governance for enterprise AI tools.
When AI Becomes the Insider Threat: Risk in SaaS Environments
Learn how AI can become an insider threat in SaaS environments, the risks it creates, warning signs to watch, and how to prevent breaches with Reco.
11 Popular Vulnerability Scanning Tools in 2026
Exploitation of vulnerabilities is now the most common initial access vector in breaches, accounting for 31% of all initial access, according to Verizon’s 2026 Data Breach Investigations Report. Vulnerability scanning tools catch these potential attack entry points by checking your environment against known security issues.  Below, we cover what these tools are, the different types […]
Straiker Named in Two 2026 Gartner® Hype Cycle™ Reports: Secure AI and AI-Driven Cybersecurity
Straiker is a Sample Vendor for Agentic AI Security in two 2026 Gartner Hype Cycle reports: Secure AI and AI-Driven Cybersecurity.
Public Sector AI Agents and the Governance Gap
A new civil servant does not get access to every citizen record on day one. They get access scoped to their role, oversight from a manager, and a record of what they touched. Most agencies deploying AI agents against records systems skip all three. The agent gets connected, given broad access to move fast, and Read more...
AI-Generated Phishing and Deepfake Vishing: What We’re Actually Seeing in Live Incidents
Every vendor’s Cybersecurity Awareness Month content this year has a version of the same slide: “AI is supercharging phishing.” It’s not wrong. It’s also become background noise, a scary number pulled from a press release, dropped into a blog post, repeated by the next vendor down the line until nobody can trace it back to ... AI-Generated Phishing and Deepfake Vishing: What We’re Actually Seeing in Live Incidents The post AI-Generated Phishing and Deepfake Vi
Navigating the Waves of AI-Powered Identity Attacks: Lessons From One Year of Identity Exposure Management
By Mark MacDonald, Director, Product Marketing It’s one of the most famous lines in movie history. Chief Brody, chumming the water off the back of the Orca, a battle-hardened fishing boat, gets his first full look at the nemesis in Jaws. He backs slowly into the cabin in shock and says… “You’re going to need […] The post Navigating the Waves of AI-Powered Identity Attacks: Lessons From One Year of Identity Exposure Management appeared first on Flare | Identity First Threat Inte
The Palantir Mafia is changing the business of war and surveillance
Palantir alumni are building surveillance companies. Learn how venture capital, military technology, and data are shaping warfare.
Ivanti Connect Secure CVE-2026-104935: Find impacted appliances
Ivanti disclosed certain versions of ICS are affected by an authentication bypass by spoofing vulnerability. Here's how to find affected appliances.
Databricks is a Visionary the Gartner® Magic Quadrant™ for Analytics and Business Intelligence Platforms
We are incredibly excited to announce that Databricks has made its inaugural appearance...
ASTRO C2 Technical Analysis
ASTRO was assessed as a Rust-based command and control framework intended for Windows, Linux, and macOS. A seven-crate workspace, 102 agent source files, and more than 200 command variants were described in the supplied analysis. The post ASTRO C2 Technical Analysis appeared first on ThreatMon.
ARISE: Three Layers, One Platform
Before anything about platforms, one thing needs saying, because the agentic security conversation keeps losing it. Nothing in this threat model is new. Least privilege, credential hygiene, segmentation, inventory. Scope your service accounts. Do not bind a shared connector to a system. Verify continuously rather than at the front door. Every one of those was correct fifteen years ago, was correct ten years ago, and is correct this morning. Agents did not invent a single new defensive...
10 Questions to Ask Before Deploying Personal or Desktop AI Agents
8 min readAn agent that can read your inbox, use a browser, and work while you sleep changes the meaning of “signed in.” A session that once represented a person clicking through an application may now support software making decisions and taking actions for hours. Consider a simple request: prepare a customer briefing. The agent might read […] The post 10 Questions to Ask Before Deploying Personal or Desktop AI Agents appeared first on Aembit.
Scaling Defense: Subscription-Based Cybersecurity Services for Enterprise Growth
As an organization scales past the $250M revenue mark, its operational reality fundamentally changes. Supply chains become increasingly global, third-party vendor networks multiply, and the IT infrastructure powering the business grows exponentially more complex. Whether it’s manufacturing, professional services, or logistics, the underlying truth remains the same: basic security hygiene is no longer enough to […] The post Scaling Defense: Subscription-Based Cybersecurity Services for Ente
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security firm Volexity said on October 13. Ivanti has released fixes for two of the flaws and told customers on affected versions to "act immediately." A fix for the third is still pending, according to Volexity. Volexity, which reported the flaws to Ivanti,
Breaking down digital security: What actually matters
We've heard everyone talk about digital privacy, cybersecurity, and how we should set a strong password, but what most people fail to understand is the why. Why is it important to set a strong password? Why do we have to activate two-factor authentication? Why are software updates important? Even though we have a vague idea of why we need to do... The post Breaking down digital security: What actually matters appeared first on ManageEngine Blog.
SOC 1 vs SOC 2: What’s the difference, what you need, and what it costs
Learn how SOC audits work, the difference between SOC 1 vs SOC 2 compliance, and what type you need.
Website Tracking and GDPR: Why Browser Behavior Matters
Website tracking can collect and share personal data during a live browser session. Privacy teams need to understand that behavior alongside their... Read More... The post Website Tracking and GDPR: Why Browser Behavior Matters appeared first on Source Defense.
The Factory Floor’s Newest Worker Runs on a Model
A new engineer on a production line does not get access to every design file on day one. They get access scoped to their project, oversight from a lead engineer, and a record of what they touched. Most manufacturers deploying AI agents against PLM and file-sharing systems skip all three. The agent gets connected, given Read more...
Why AI spend needs to be attributable, not just visible
The monthly cloud bill lands and the AI line item has tripled. Finance asks why. Security asks who. The platform team pulls up the usage dashboard they turned on three …
Ivanti Connect Secure zero-day exploited in the wild (CVE-2026-104935)
OverviewOn October 13, 2026, Ivanti published a security advisory for CVE-2026-104935, a high-severity authentication bypass by spoofing (CWE-290) affecting Ivanti Connect Secure (ICS). The vulnerability has a CVSSv3.0 score of 8.6 and allows a remote, unauthenticated attacker to execute arbitrary commands.Ivanti reports that exploitation in the wild has already occurred prior to disclosure, affecting a limited number of customers. This indicates that exploitation has been occurring as a zero-da
Compliance assessment & certifications
Federal assessments & certifications
CIS Benchmarks: The Configuration Baseline Regulators Expect
CIS Benchmarks: The Configuration Baseline Regulators Expect Every major security regulation now asks the same question: can you prove your systems are securely configured? Few of them define what “secure” means. CIS Benchmarks® fill that gap.  Misconfiguration remains one of the easiest ways into an organisation. Default accounts, legacy protocols and inconsistent settings across thousands […] The post CIS Benchmarks: The Configuration Baseline Regulators Expect appeared
Continuous Penetration Testing vs. Annual Pentests: What Enterprises Need to Know
Continuous penetration testing runs against your live attack surface on an ongoing basis. Annual penetration testing gives you a deep, point-in-time snapshot once a year. Neither model is universally correct. The right choice depends on release velocity, attack surface volatility, and which compliance framework is driving the requirement. Enterprises shipping code weekly typically outgrow annual testing alone. The post Continuous Penetration Testing vs. Annual Pentests: What Enterprises Need to
Bring Your Own Vulnerable Driver: The Trust Gap Attackers Operate Inside
Uncover how BYOVD attacks exploit signing trust over disposable drivers, and why enforcing certificate revocation is essential for modern endpoint defense.
When AI Agents Cross the Line: How to Prepare for an AI Incident
Prepare for AI agent incidents with clear ownership, escalation thresholds, evidence requirements, and containment controls that support defensible decisions. The post When AI Agents Cross the Line: How to Prepare for an AI Incident appeared first on RadarFirst.
Best Unified Cybersecurity Platform for Mid-Sized MSSPs: A 2026 Buyer’s Guide to Compliance Reporting
Short answer: For mid-sized MSSPs (roughly 20 to 200 managed clients), Seceon Open Threat Management (OTM) is a strong fit because it combines SIEM, XDR, SOAR, NDR, UEBA, threat intelligence, and continuous compliance reporting in one multi-tenant platform. MSSPs manage 50+ client tenants from a single console, with per-tenant isolation, baselines, billing, and audit-ready reports. The post Best Unified Cybersecurity Platform for Mid-Sized MSSPs: A 2026 Buyer’s Guide to Compliance Reportin
When the Fridge Is the Attack Surface: Lessons from France's Supermarket Cyberattack
Most conversations about connected device risk start with cameras, door controllers, and badge readers. This week, the conversation started with refrigerators.
Bring Your Own Vulnerable Driver: How EDR Killing Became an Industry
Discover how Bring Your Own Vulnerable Driver (BYOVD) tactics evolved from one-off hacker tools into a commercialized, tiered EDR-killer service economy.