Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,260 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Your AI Agent Needs to Know Who You Are
Learn how Teleport JWTs propagate human identity through MCP tool calls for audit, authorization, and access control.
Content Studio creates customizable security awareness content | Hoxhunt SAT category highlights
Jun 24, 2026 | Big content libraries still contain big gaps. Hoxhunt's Content Studio equips you with AI that’s purpose-built to fill those gaps with training modules tailored for your situation.
Ad-Funded Phishing: How Facebook and Google Deliver Attacks to Enterprise Browsers
  Between June 16 and June 22, we detected phishing campaigns spanning tech support scams delivered via Facebook ads on Azure infrastructure, Microsoft credential harvesting hosted on Heroku and promoted through Google Ads, Paperless Post invitation lures targeting multiple email providers. What ties them together: these campaign abused trusted infrastructure both to host and deliver […] The post Ad-Funded Phishing: How Facebook and Google Deliver Attacks to Enterprise Browsers appear
From VPNs to Face Swaps: How Age Verification Loopholes Mirror the Bigger Fraud Problem
The UK Government's planned under-16 social media ban has pushed age assurance back into the headlines. When the Online Safety Act age-check requirements came into force on July 25, 2025, the intent was clear and defensible: children should be better protected from harmful online experiences. But the rollout also highlighted a challenge that now [...]
Introducing Citadel Radar: AI Firewall and Monitoring
Continuously Monitor the Business Appropriateness, Risk, and Quality of AI Citadel AI Inc. is launching Citadel Radar, a firewall and monitoring product that evaluates every prompt and response from your generative AI applications to detect, control, and monitor risk. As generative AI adoption expands across enterprises, simply checking error rates, availability, and system status, as […]
Executive protection in the field: Managing active threats and crisis communication for security teams
Learn how executive protection teams manage active threats, crisis communication, executive privacy, and business continuity before, during, and after incidents. The post Executive protection in the field: Managing active threats and crisis communication for security teams appeared first on Everbridge.
Patching Is Not Remediation. CISA Just Made That Federal Policy
CISA's new BOD 26-04 requires proving a system wasn't already compromised before you patch it. Patching is no longer remediation. What it means for enterprises.
Banking Threat Modeling Services for Compliance
VerSprite delivers risk-driven threat modeling for financial institutions that need to secure banking applications, prioritize remediation, and demonstrate compliance-ready security decisions. The post Banking Threat Modeling Services for Compliance appeared first on VerSprite, Threat Modeling and Pentesting Services.
The Risk Pattern Was There. The Report Missed It.
I’m sharing this from my role as a Data & Insights Partner at LogicManager because reporting is often where unknown knowns either stay hidden or finally become actionable. The data may already exist, but without the right view, teams can miss the patterns, ownership gaps, and follow-up needs sitting [...]
Sensitive Data Remediation Strategies
Finding sensitive data is only the first step in a DSPM program. The next challenge is data remediation. Explore strategies for determining which data creates risk, what needs action, and how organizations operationalize remediation efforts over time. The post Sensitive Data Remediation Strategies appeared first on archTIS.
Five Months to Patch, One Day to Weaponize: CVE Remediation Has a Math Problem
DaShaun Carter's upgrade demo always lands at zero CVEs. Two weeks ago it stopped at four, and what that means should worry every enterprise.
Residual Fertility: Looking Deeper at the Value Already in the Soil
When evaluating farmland, producers often focus on the big-ticket items: acres, yield potential, irrigation, and price. But one factor that can materially affect the value of a deal is easy […] The post Residual Fertility: Looking Deeper at the Value Already in the Soil appeared first on Pinion Global.
AI Cyber Threats: Claude Misuse, AI Pentesting & Data Leaks
AI cyber threats are moving beyond phishing and into operational attack paths. Attackers are experimenting with Claude Code misuse, AI-powered penetration testing tools, fake developer repositories, exposed secrets, autonomous agents, and model-connected workflows that can interact with real systems. The post AI Cyber Threats: Claude Misuse, AI Pentesting & Data Leaks appeared first on Redbot Security.
The Java Modernization Reckoning: What’s Driving Enterprises to Act Now
Java became the backbone of enterprise software for good reason. It scaled when nothing else could, survived platform shifts, and...
Top-Rated GRC Software for Companies in Regulated Industries
The top-rated GRC software for companies in regulated industries combines continuous regulatory intelligence across jurisdictions, quantitative risk analytics, and unified cross-domain visibility in a single platform.
Azure RBAC Explained: Roles, Scope, and Why Least Privilege Breaks Down
A developer needs access to a storage account. The fastest fix is Contributor at the subscription level. The project wraps up, the access review never happens, and six months later that identity still holds broad write permissions across every resource in the subscription. The account might be dormant. Or it might belong to a service […]
Vulnerability Prioritization: Why Basic Scoring Fails and a Better Way to Triage
Stop patching by severity score. See how to prioritize vulnerability remediation by what's reachable, exploited, and costly, so you fix what matters first. The post Vulnerability Prioritization: Why Basic Scoring Fails and a Better Way to Triage first appeared on SafeHill.
SOAR vs AI SOC Analysts: Alert Investigation Evolution
SOAR executes the playbooks your team writes. AI SOC analysts investigate alerts on their own. Compare what each automates, and see when a SOC runs both.
Unlock SOC Efficiency with AI for Tier 1, 2, and 3 Analysts
See what Tier 1, 2, and 3 SOC analysts do and how AI changes each tier in 2026. Triage becomes verdict review, and senior analysts get hunting time back.
How to Get 24/7 SOC Coverage Without a Night Shift
24/7 SOC coverage is a staffing-model problem. See where shift models and on-call rotations break, and how AI SOC agents change the coverage math for 2026.
The Noise Was Always the Problem
I've been in security long enough to remember the wall-to-wall SOC: rows of analysts staring at screens full of alerts, hoping they didn't miss the one thing that mattered buried in all the noise. Fancy "pew-pew" maps tracking attacks (that may or may not have happened).
ShinyHunters’ 0-day attacks: After patching, find out if you were breached
The 2026 SANS CTI Survey found that lack of time and funding remain the biggest challenges for 44% of CTI teams, while SOC analysts continue to face mounting pressure to operationalize threat intelligence quickly.
Interop Tokyo 2026: Showcasing the Future of Network Visibility and AI
We just returned from an incredible week in Japan! Interop Tokyo 2026 is the region’s premier computing and networking event. This year’s experience exceeded all our expectations. Connecting with our vibrant community always fuels our passion. It helps us shape the future of network traffic analysis. Here is a look at what went down and […]
Early Exposure, Lasting Harm: Porn and Under-16s
A Safeguarding Issue Happening at Scale Online pornography exposure among children is no longer rare or exceptional; it is increasingly routine, often accidental, and frequently occurring well before age 16. Recent UK data from the Children’s Commissioner shows that around 70% of young people reported seeing pornography before age 18, with more than a quarter exposed by age […]
Cyber Insurance Compliance Requirements: What MSPs Must Document
Cyber insurance carriers have become the strictest compliance auditors most organizations encounter. Before issuing or renewing a policy, insurers now commonly require documented evidence of specific security controls—and organizations that can't demonstrate active, documented compliance increasingly face coverage denials, exclusions, or premiums that make the policy impractical.
What Enterprise Browsers Can’t See: The Gap in BYOD, Contractor, and AI Desktop
Key takeaways Enterprise browsers are effective within their intended scope. The problem is that the scope is shrinking relative to where modern work actually happens. The category was designed for a workforce that no longer exists in most enterprises: one device per employee, all corporate-issued, all running the mandated browser. That assumption held for a […] The post What Enterprise Browsers Can’t See: The Gap in BYOD, Contractor, and AI Desktop appeared first on RedAccess.
Sekur Private Data Appoints Former U.S. State Department Deputy Assistant Secretary Annette L. Redmond to its Strategic Advisory Board
Decorated intelligence and cybersecurity executive with four decades of U.S. government leadership joins Sekur to advise on secure communications strategy for government, diplomatic, and enterprise markets MIAMI, FL / ACCESS Newswire / June 23, 2026 / Sekur Private Data, Inc., a Miami based leading Swiss-hosted cybersecurity, private communications, and defense communications company serving enterprise, government, […]
What Is Multi-Cloud?
Learn what makes a multi-cloud architecture, why it's important and how Isovalent Cilium enables a consistent networking and security operational model across any cloud infrastructure.
The High-Performance DBA: CPU Under Pressure, Part 2: Troubleshooting SQL Server
06/23/26 As we covered in Part 1, knowing how CPU works is useful. Knowing how to approach SQL Server CPU troubleshooting under real conditions is what separates theory from operational discipline. When performance drops, teams often start with the symptom they can see fastest: CPU ... The post The High-Performance DBA: CPU Under Pressure, Part 2: Troubleshooting SQL Server appeared first on SolarWinds Blog.
What Is Identity Observability? The Definitive Guide to Seeing What Identities Actually Do
By the time most organizations detect an identity-based breach, the adversary could have already been inside for weeks, moving through approved access paths with valid credentials. The tools meant to stop them, IAM, IGA, PAM, MFA, enforce policy at the moment access is granted, but then lose visibility into what is actually happening. That blind spot is where modern attacks live. Identity observability exists to close this gap. It is the fastest-emerging category in identity security, and for...
TRAIGA Compliance for Texas Financial Institutions | SBS
KEY TAKEAWAYS You're already in scope: If your tools have AI inside, TRAIGA applies, and most institutions can't yet show where AI touches customers. Friendlier than you'd expect: Intent-based liability, a 60-day cure period, and a NIST safe harbor give proactive institutions real protection. Start with progress, not perfection: Three concrete moves get you to defensible AI governance, and one is where most teams stall.
How Credit Karma Elevated Developer Productivity With Coder
Learn how Credit Karma uses Coder to give 250+ technical and non-technical users instant cloud workspaces, cutting environment setup by 97% and GPU costs by 50%.
Using AI to Strengthen Sales Force Compliance Monitoring in Life Sciences
Sales force interactions with healthcare professionals are among the highest-risk commercial activities in the life sciences industry. Learn how in-house commercial compliance professionals can apply AI to strengthen oversight of this activity – without sacrificing regulatory judgment.
Entrevista con Carlos Navarro, responsable de Infraestructura tecnológica y CISO de Grupo Osborne
“Cuando hablamos de ciberseguridad, hablamos también de reputación, de continuidad de negocio y de capacidad para seguir operando con normalidad” Osborne es una compañía con una historia muy larga, pero también con una clara vocación de innovación e internacionalización. Desde tu posición, ¿cómo se equilibra la protección de ese legado con la necesidad de avanzar […] La entrada Entrevista con Carlos Navarro, responsable de Infraestructura tecnológica y CISO de Grupo Osborne aparece primero
Quantum Executive Orders Send Clear Signals, Experts Say
Technology and quantum experts say President Donald Trump’s recent quantum executive orders send a clear signal to agencies and contractors to accelerate quantum readiness and strengthen post-quantum cryptography (PQC) efforts. Trump signed two executive orders on June 22 aimed at accelerating U.S. quantum technology development and speeding the federal government’s transition to PQC. https://www.meritalk.com/articles/quantum-executive-orders-send-clear-signals-experts-say/
Lazarus Targets the Financial Sector with Memory-Only Malware Toolset
.c-share {display:none;} The post Lazarus Targets the Financial Sector with Memory-Only Malware Toolset appeared first on Cognyte.
How to Prove Your Security Program Works | Todyl
Insurers, regulators, and enterprise buyers are asking MSPs for proof, not just attestation. Here's what documenting a security program actually requires.
What Anthropic’s Red Team Revealed About the Future of Security Operations
The Next Cybersecurity Challenge Isn’t the Model. It’s the Operation Around It. For years, security teams have assessed threat actors using a relatively stable set of signals. How technically sophisticated are they? How many ATT&CK techniques do they employ? How broadly do they operate across the kill chain? The assumption has been straightforward: more techniques […] The post What Anthropic’s Red Team Revealed About the Future of Security Operations appeared first on Bricklayer
The Golden Image Pipeline for Media & Entertainment (M&E) Studios
Automated golden image pipelines help media and entertainment studios cut virtual workstation provisioning from weeks to minutes. This guide explains how M&E teams can move… The post The Golden Image Pipeline for Media & Entertainment (M&E) Studios appeared first on Effectual.