Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

25,205 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

How Yahoo Mail Strengthened Abuse Detection with Abusix Mail

About the Company Yahoo operates one of the world's largest consumer email platforms, protecting millions of users daily across a massive, diverse mail ecosystem. The Challenge Email abuse keeps growing in volume and sophistication. Attackers rotate infrastructure and exploit new domains constantly, which makes catching emerging threats early a problem that never stays solved. At […] The post How Yahoo Mail Strengthened Abuse Detection with Abusix Mail appeared first on Network Abuse Manag

Announcement

Why Cybersecurity Is a Business Problem, Not Just an IT Issue

David Jemmett, Chief Executive Officer “Cybersecurity is not just a technical function. It is a business issue that affects revenue, operations, customer trust, brand reputation, and long-term growth. “ Key Takeaways Most companies still treat cybersecurity as an IT issue.  That is not just a mistake. It is a business risk.  More importantly, it is a […] The post Why Cybersecurity Is a Business Problem, Not Just an IT Issue appeared first on CISO Global.

Announcement

Help desk vishing: why training isn’t the fix

Voice phishing is now the leading initial intrusion vector for cloud compromises and it's routing around MFA through the help desk. Training doesn't close the gap. Workforce identity verification does. The post Help desk vishing: why training isn’t the fix appeared first on imper.ai.

Announcement

Aged Care GRC: Compliance, Risk Management & Oversight

Australian aged care providers are operating in a fundamentally changed environment. For years, compliance was largely about demonstrating intent. Policies existed, processes were documented, reports were produced. That was often enough. Today, regulators, boards, and the public expect something far more demanding: clear, defensible evidence of what actually happens in practice. They want to see not just that systems exist, but that they work under pressure, across incidents, complaints, workfor

Announcement

dwarf-expert

Provides expertise for analyzing DWARF debug files and understanding the DWARF debug format/standard (v3-v5).

Announcement

Dimensional Analysis

Audits code for unit and decimal-scaling bugs and annotates it with dimensional comments recording the units of each value.

Announcement

designing-workflow-skills

Guides the design and structuring of workflow-based Claude Code skills with multi-step phases, decision trees, subagent delegation, and progressive disclosure.

Announcement

WindowsAudit Backdoor: Inside a .NET RAT That Hides in Discord

Advisory: Profero has observed this campaign active across multiple environments, and based on observed patterns and tradecraft, it may be positioning for escalation toward a broader ransomware operation. Profero has notified the Israeli National Cyber Directorate (INCD) of this activity. Organizations that identify any of the indicators of compromise (IOCs) listed below in their environments are encouraged to take prompt investigative action. If you would like to confirm whether your organizati

New capability

Introducing Hacktron Review

Hacktron Review is an AI security reviewer for pull requests that understands codebase context, reduces false positives, and catches exploitable vulnerabilities before they are merged.

Announcement

Australia’s Sovereign Security Frameworks: DSPF, DISP & SOCI Explained

If your organisation works with government or defence in Australia (even indirectly), then you are already operating within a compliance framework, whether you realise it or not. This is not a future obligation. It is in force today. It is being audited. And for many organisations, it represents a growing and often unrecognised risk. As defence spending increases, AUKUS obligations expand, and government workloads shift into the private sector, compliance with Australia’s sovereign security fram

Announcement

5 Things you didn’t know about Cilium Network Polices

Not all CNIs are created equal, and many assume that CiliumNetworkPolicies are the same as standard Kubernetes NetworkPolicies. At first glance, they can look similar. In this blog, we'll go over the top 5 things you may not know about Cilium Network Policies.

Announcement

Patching Isn’t Enough: CISA’s FIRESTARTER Advisory and What It Means for Your Network

CISA doesn’t issue Emergency Directives lightly. When ED 25-03 landed last week — mandating immediate action for federal agencies and urging all U.S. organizations to respond — it came with a warning that should stop every security leader cold: Patching your Cisco ASA/FTD devices will not remove this threat. FIRESTARTER is a persistent backdoor specifically [...] The post Patching Isn’t Enough: CISA’s FIRESTARTER Advisory and What It Means for Your Network appeared first on RedSeal.

Announcement

Benchmarking Neo's Black-Box DAST Capabilities

Since the launch of Neo, we've been steadily expanding what it can do. Neo has found 33+ real CVEs across open-source projects, performed well on white-box security testing where source code is available, and generally proven itself as a capable security engineer when it has context to work with. What we hadn't shared yet is how Neo does when it's operating purely as a black-box DAST agent no source code, no architecture context, just a URL. The prompt Neo gets is a minimal prompt with no guida

Announcement

Security Development Lifecycle (SDL): What It Is, Phases & Best Practices

A major difference between a secure application or website and one with exploitable vulnerabilities often comes down to how security is integrated into the development lifecycle and developer workflows. Largely pioneered by Microsoft, the security development lifecycle has evolved from reactive patch management to a more proactive integration of security practices throughout the development process.

Announcement

Stolen Cryptocurrency Recovery: How DriveSavers Rebuilt a Trezor Seed Phrase from 10 Missing Words

DriveSavers crypto recovery services combined forensic video analysis with proprietary recovery software to solve a brute-force problem initially estimated to be computationally infeasible The post Stolen Cryptocurrency Recovery: How DriveSavers Rebuilt a Trezor Seed Phrase from 10 Missing Words appeared first on DriveSavers Data Recovery Services.

Announcement

AI Is Quietly Expanding the Attack Surface Across Every Layer of Enterprises

The real danger with AI is quieter and wider than protecting an LLM. And it’s happening faster than security teams realize. These risks of AI in business: the silently expanding attack surface. When growing data pipelines, APIs, identity systems, and unauthorized shadow AI tools are left ungoverned, each becomes an entry point for attackers. Not to mention a risk to the enterprise. Here’s what security leaders need to know, and how to start closing the gaps before attackers find them first....

Announcement

DAAG vs DAAPM and The Transition to DAAG

DAAG vs DAAPM and The Transition to DAAG BLUF The DAAG officially replaces the DAAPM, but this is more of... The post DAAG vs DAAPM and The Transition to DAAG first appeared on SecureStrux.

Announcement

More Connectors Won’t Fix Your Governance Gaps

If you have been evaluating identity governance solutions, you have probably seen the pitch: “We have 500+ connectors.” Or 800. Or 1,200. The number keeps climbing, and the implication is clear. More connectors means more coverage. More coverage means better governance.  It sounds right. It is not.  Connector count has become a proxy metric for a problem it does

Announcement

How law firm technology adoption is shaping client trust in 2026

In 2026, law firm technology is no longer just an operational concern—it’s a defining factor in client trust and retention as well as revenue growth. New Integris research in the “Integris 2026 law firm trust in technology report” highlights a growing client confidence gap in the legal industry. While law firms are increasing technology spending,… The post How law firm technology adoption is shaping client trust in 2026 appeared first on Integris.

Announcement

The Doc Ock Problem: Securing AI Command from the Edge Inward

In the 20th century arms race was measured by missile tests and stockpiles of weapons. AI is shifting the 21st century global competition from a mode of kinetic stockpiling to a weaponizing of the supply chain. The vast resources that enable AI depend on the convergence of massive storage, specialized compute needed for matrix multiplication,... View Article The post The Doc Ock Problem: Securing AI Command from the Edge Inward appeared first on Owl Cyber Defense.

Announcement

No Known Exploitable Vulnerabilities

Blog #3 in our Human Written CRA expert series: What “no known exploitable vulnerabilities” actually means under the CRA—and how SBOMs, risk assessment, and automation help you meet the new security and reporting duties.

Announcement

Third-Party Remote Access in OT: The Soft Underbelly of Industrial Cybersecurity

“We trust our vendors. Plus, they’ve always had access. What's suddenly the problem?”In many industrial environments, allowing third-party vendors, contractors, and OEMs to access sensitive OT environments has been standard practice for years. What began as occasional remote support has now evolved into a core operational dependency. Today, remote vendor access underpins maintenance, diagnostics, and uptime across manufacturing plants, energy facilities, and critical infrastructure.But while the

Announcement

Data Without Borders: Rethinking Cloud Migrations and AI in a Multi‑Cloud World

For more than a decade, organizations have treated cloud data movement as a necessary evil—something to plan around, constrain, and minimize. Data was heavy. Networks were fragile. Migrations happened once, in carefully choreographed waves, and no one wanted to repeat them. That mental model no longer holds. Today, enterprises need to move data quickly between […]