Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,111 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
The Business Cost of Cloud Misconfigurations
Explore the business cost of cloud misconfigurations, data breaches, downtime, compliance penalties, and reputation damage. Learn how cloud security assessments help organisations reduce risk. The post The Business Cost of Cloud Misconfigurations first appeared on ArmourZero.
You Didn’t Build the Stack. You Still Have to Make it Work.
You walk into a new client environment and start the audit. Email security from one...
Nuix’s Reconciliation Action Plan Endorsed
Nuix’s Reconciliation Action Plan Endorsed [email protected] Wed, 05/20/2026 - 11:09
What’s New in WebOrion Monitor: Smarter Triage, Clearer Baselines, Better Filters
Monitoring works best when it stays out of your way — surfacing the things that matter and quietly handling the things that don’t. This month’s WebOrion Monitor release leans into exactly that. We’ve shipped three updates focused on cutting noise, improving visibility, and helping you investigate faster. Here’s everything that’s new. Finetuning Suggestions for AI […] The post What’s New in WebOrion Monitor: Smarter Triage, Clearer Baselines, Better Filters app
[2026 공급망 보안 솔루션 리포트] AI가 찾은 취약점에 공급망 뚫리면…국가 안보 위기 직결
Mythos Doesn’t Need CVEs: Defending against AI Zero-Days
The arrival of Anthropic’s Claude Mythos marks the end of the “Human Era” of cybersecurity. This post explores how Mythos utilizes agentic iteration to collapse the exploit development timeline from weeks to minutes, rendering traditional patching cycles obsolete and necessitating a shift toward runtime virtual patching. Who Should Read: CISOs, DevSecOps Engineers, and Vulnerability Management Leads grappling with the acceleration of AI-driven threats. Read Time: 4 minutes Highlights: Agentic It
Serving AI models with Open Inference Protocol APIs
How Arcjet hosts AI security models using Python, Open Inference Protocol, Go, and Modal: the architecture behind prompt injection detection.
A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office
Go behind the scenes with Lulu, a Strategy Co-Op at Snyk, and discover a day balancing high-impact AI security projects with a vibrant Boston office culture.
Introducing the new Mondoo App
A new Mondoo App with Risk Dimensions, operational context for every finding, and overhauled dashboards - built for fixing and actually reducing risk.
What Claude Code Stores Locally (And What an Attacker Could Find)
Recently, whilst testing in Claude Code, I started to think about the information I was exposing on a daily basis. Where are my chats going? How much is being s
Attracting the European Insurance Consumer of the Future: Building Trust in Modernisation
Keycloak experimental AuthZEN Support
We are excited to announce that from 26.7.0, Keycloak will include experimental support for the OpenID AuthZEN Authorization API 1.0 specification. This allows Keycloak to act as a Policy Decision Point (PDP), exposing its authorization capabilities through a standardized API that any Policy Enforcement Point (PEP) can consume. You can try this now with the Keycloak nightly release. Why AuthZEN? Authorization has long been fragmented, with competing systems defining their own protocols for answe
When Your VPN Opens Your Private Network to the Public
How AI-assisted reverse engineering of stripped PAN-OS binaries led to finding a JWT algorithm confusion vulnerability in GlobalProtect's Cloud Authentication Service, enabling full VPN auth bypass with just a username.
Guide: How to Conduct a Comprehensive Data Risk Assessment in Enterprise Environments
Learn how to conduct a data risk assessment with this 7-step framework. Covers data discovery, classification, risk scoring, and remediation for cloud, AI, and regulated environments.
Hit Wicket: Inside The Expansive Web of Scams Targeting Millions of IPL Fans This Season
CloudSEK’s report exposes a highly sophisticated, seasonal IPL online betting scam ecosystem. Fraudsters deploy clone platforms, celebrity AI deepfakes, and blackhat SEO tactics to exploit government domains and trap unsuspecting fans. Sustained by money mule networks, bulk advertisements, and predatory fake loan apps, this industry intentionally blocks user withdrawals, causing severe financial losses and blackmail. Authors : Sourajeet Majumder
Phishing Campaign Abuses Incident Management Platform to Impersonate Trust Wallet | Hoxhunt Research category highlights
May 20, 2026 | Legitimate incident management platform was misused to increase the credibility of the attack.
CPCSC Is Live: What Canadian Defence Suppliers Need to Know
Canada’s defence industry has been watching CPCSC come down the pipe for two years. As of April 2026, it’s here. The Canadian Program for Cyber Security Certification —managed jointly by Public Services and Procurement Canada (PSPC) and National Defence—is now embedding mandatory cyber requirements directly into defence contracts. Level 1 self-assessments are required now. Level 2 […] The post CPCSC Is Live: What Canadian Defence Suppliers Need to Know appeared first on Pl
8 Completely Unsurprising Findings from the 2026 Verizon DBIR
I’ve been reading the 2026 Verizon DBIR faithfully since the early editions, as a practitioner in the trenches, then as... The post 8 Completely Unsurprising Findings from the 2026 Verizon DBIR appeared first on Symmetry Systems.
The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised
A day after the AntV npm supply chain attack, the same campaign appears to have struck `durabletask`, a Microsoft-associated Python package on PyPI. Snyk has coverage in the vulnerability database and package health pages. Here's what we know.
Today Your Network Can See Its Future
Software got CI/CD. Networking never did, until today. The post Today Your Network Can See Its Future first appeared on www.forwardnetworks.com.
P4 One Experiments (Plugin)
P4 One Experiments (Plugin) P4 One ttrench Tue, 05/19/2026 - 15:37 Product Description Create and compare creative experiments directly inside Unreal Engine. Current Customer Link https://www.fab.com/listings/a8a8554c-babe-445f-8baa-593ea2991913 Exclude From Downloads List Off
What OWASP Vulnerabilities in AI-Generated Code Mean for Mobile App Security
Key Finding: 1 in 4 AI-generated code samples contain at least one confirmed OWASP vulnerability — and mobile apps face elevated risk due to their distributed, client-side execution model, direct exposure to untrusted devices and attack surfaces traditional AppSec tools are not designed to evaluate. Developers are increasingly turning to AI coding assistants to speed […] The post What OWASP Vulnerabilities in AI-Generated Code Mean for Mobile App Security appeared first on NowSecure.
Two-Thirds of Nonhuman Accounts Are Unseen and Unmanaged, According to New Identity Gap Report
AI Tools Created a Security Gap Your Network Cannot See. Browser Controls Close It.
Generative AI adoption changed enterprise security in ways many organizations have yet to address. The risk did not come from... The post AI Tools Created a Security Gap Your Network Cannot See. Browser Controls Close It. appeared first on Skyhigh Security.
Service Desk Identity Automation: Your Service Desk Isn’t Automated. Here’s What’s Happening
Walk into most enterprise IT organizations and ask about their service desk. You will hear about automated ticket generation, self-service portals, SLA dashboards, and routing rules that send requests to the right queue within seconds. From the outside, the entire process looks modern and efficient.  Now ask what happens after the ticket lands in the queue. 
Peak moments don’t break systems. They reveal them.
Every organization has infrastructure that performs fine on an average Tuesday. Predictable traffic. Familiar patterns. Enough headroom to absorb the occasional spike. Then a mega global event happens. Millions of customers simultaneously book, buy, log in, and transact. Traffic surges and fraud attempts multiply. Messaging volumes hit levels that most platforms have never seen outside of a
Increase Threat Visibility with DomainTools Real-Time IP Risk Feeds
Gain real-time visibility into high-risk hosting IPs with DomainTools IP Risk and Hotlist Feeds. Block threats, enrich SOC workflows, and stop attacks faster.
The Ghost in the Machine: What 20 Years in Infosec Taught Me About AI Agent Security
In my twenty years in information security, I’ve witnessed the rise and fall of countless technologies. I’ve seen “silver bullets”... The post The Ghost in the Machine: What 20 Years in Infosec Taught Me About AI Agent Security appeared first on NopSec.
The Governance Gap in Agentic AI
The agentic AI governance gap cuts across every security domain with no clear product boundaries. Understand what that means for your roadmap. The post The Governance Gap in Agentic AI appeared first on zvelo.
Cytactic Featured in Gartner’s 2026 Hype Cycle for Cybersecurity Leadership as CIRM Emerges as a Critical Category
Gartner’s newly released Hype Cycle for Cybersecurity Leadership, 2026 highlights a major industry shift: cybersecurity is moving beyond prevention-first strategies and into a new era centered on operational resilience, business continuity, and cyber incident execution at scale. Within the report, Gartner recognizes Cybersecurity Incident Response Management (CIRM) as an emerging category designed to help organizations […] The post Cytactic Featured in Gartner’s 2026 Hype Cycle for Cyberse
Windows Kiosk Software: How to Lock Down and Control Your Devices
Windows devices are everywhere in kiosk deployments. Retail checkout stations. Hospital check-in terminals. Airport wayfinding displays. Employee self-service kiosks. The hardware is familiar, widely supported, and easy to source. But Windows was designed to be a general-purpose operating system. It was built to be flexible, open, and accessible. That is exactly the opposite of what […] The post Windows Kiosk Software: How to Lock Down and Control Your Devices appeared first on KioWare.
From ISO 27001 to CMMC Level 2: What Carries Over, What’s New, and How to Level Up
Insert Coin: Introduction  If you’ve ever played a video game sequel, you know the feeling. The first game took you hundreds of hours. You learned the mechanics, figured out the enemy patterns, built your character from the ground up, and eventually, finally, cleared it. Then the sequel drops. You fire it up, and something interesting happens. You’re not a complete beginner. Your instincts are […] The post From ISO 27001 to CMMC
The DBIR Confirms the New Bottleneck in Security: Not Pointing, but Prioritizing
The 2026 DBIR is out, and vulnerabilities are the name of the game. Empirical is proud to have contributed critical research to this year’s report.
Transform IT with Agentic AI: the Dawn of Accelerated, Autonomous Service
The IT service management (ITSM) industry stands at a real inflection point. For decades, service desks have operated on a fundamentally reactive model — employees face problems, submit tickets and wait for human analysts to diagnose, triage and resolve their issues. Automation improved throughput within that model, but it never challenged the model itself. The inflection point: why ITSM will never be the same Agentic AI changes the equation entirely. Rather than simply accelerating the speed at
Vishing is the fastest-growing way attackers are breaking in. Most security stacks cannot see it
Voice phishing is the #1 initial infection vector for cloud compromises in 2025. Here is why the existing security stack misses it, and what closes the gap. The post Vishing is the fastest-growing way attackers are breaking in. Most security stacks cannot see it appeared first on imper.ai.
How to Adopt AI Agents Securely at Scale: The 4 Zones of Automation [Webinar Summary]
Vercel's breach started with an AI app holding broad, static access. Marco van Hurne (ASML) and Johannes Keienburg (Cakewalk) on the four zones of AI automation, why most zone 3 agent projects fail and why the most dangerous agent in a company is usually a zone 1 agent.
Facing Your IT Problems: Act Now, Save Big
Forget the old idea that IT headaches are just a back-office nuisance. When your inventory server locks up during peak sales or a critical app update ... The post Facing Your IT Problems: Act Now, Save Big appeared first on enkompas Technology Solutions.
Turn Blind Trust into Verified Control with Prompt Security for Agentic AI
Prompt for Agentic AI Security empowers organizations with proactive governance, meaning security teams can deploy agents with confidence.
Modernizing EMS Communication: How Technology Improves Pre-Hospital Care and Outcomes
Legacy radio workflows can’t keep up with today’s emergency care demands. Discover how modern, secure, mobile-first communication helps EMS and hospitals coordinate in real time—speeding room placement, reducing wall time, and improving patient flow.