Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,297 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Après avoir participé à la deuxième promotion de l’incubateur InterCERT en 2024, le CERT ITrust officialise son adhésion à l’InterCERT France, première communauté française de CERT (Computer Emergency Response Team). Une nouvelle étape dans le développement de nos activités de réponse à incident et de notre engagement au sein de l’écosystème cyber français. InterCERT [...]
Welcome to Daily OT Security News for October 12, 2026. Here are five verified advisories and vendor notices that matter for operational technology teams. Each briefing includes source-listed mitigations and direct links to primary references. CISA warns of EasyIO FG controller flaws that could enable full device access News briefing CISA republished Johnson Controls advisory […] The post Daily OT Security News: October 12, 2026 appeared first on Viakoo, Inc.
GitLab warned users today to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler that could let remote attackers run arbitrary code on targeted instances. [...]
CVE-2026-104286 (CVSS 9,8, EPSS ≥ 82. Perzentil) ist eine kritische Path-Traversal-Schwachstelle [CWE-22] in Verbindung mit einer fehlerhaften Verarbeitung von NULL-Bytes [CWE-158] und betrifft Fortinet FortiMail. Eine Ausnutzung ist über HTTP/HTTPS-Anfragen an die Weboberfläche von FortiMail möglich. Die Schwachstelle wurde am 1. Oktober 2026 sowohl veröffentlicht als auch in die KEV-Liste der CISA aufgenommen. Eine erfolgreiche […]
Today, Silverfort announces an integration that brings its runtime Identity Security approach to Agent Gateway, part of Google Cloud Gemini Enterprise, giving teams real-time visibility into AI agent activity and enforcing access decisions as they happen. After Silverfort was named in Google Cloud’s Next ’26 announcement among the partner services bringing identity and governance administration […]The post Silverfort Secures AI Agents on Google Cloud in Runtime with Agent Gateway Integrati
Detailed video demonstrations at booth A1 include examples of Axiado technology integrated with a variety of Arm, x86, and GPU platforms. The post Axiado Brings Autonomous Management to AI Infrastructure with Platform Intelligence, Improving Efficiency, Security, and Reliability appeared first on Axiado Corporation.
Fin's AI agents outpaced its review process. See how shared standards and low false positive rates keep AI code review trustworthy. Read the lessons.
AI compliance rarely fails for lack of effort—it fails because the effort is scattered across six systems and three teams, and every audit question becomes a scavenger hunt. One inventory, one policy engine, one evidence store: the five-step path.
Fuzz testing is now a team sport Security teams don’t fuzz test in isolation. QA engineers, security teams, protocol experts, and CI/CD pipelines all contribute to the process. Until now, collaborating through a shared Black Duck Defensics® environment, sharing test configurations, and gaining visibility into results wasn’t easy. With the latest release, that changes. You […] The post Improve collaboration with Defensics multiuser deployment appeared first on Black Duck.
The Marketplace designation gives federal agencies a clearer basis for planning around the latest Dynatrace platform while certification work continues. The post Dynatrace reaches FedRAMP Class D (High) Initial Implementation status appeared first on Dynatrace news.
Discover how crypto agility for legacy systems enables post-quantum protection for data in transit without costly application rewrites or infrastructure upgrades. The post Protect Now, Modernize Over Time: Building Crypto-Agility Around Legacy Systems appeared first on Certes.
Evaluate a cyber deception solution across decoy realism, coverage, agentless deployment, identity deception, integrations, automation, and SOC value. The post What to Look for in a Cyber Deception Solution: 12 Capabilities That Matter appeared first on Fidelis Security.
A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
Legacy systems are a major barrier to PQC readiness. Discover how crypto-agility protects sensitive data without costly infrastructure modernization. The post PQC Readiness Shouldn’t Depend on Infrastructure Readiness appeared first on Certes.
Today, we announced that Elisity has entered into a definitive agreement to be acquired by IonQ, the world’s leading full-stack quantum platform and foundry. I want to share directly why I believe this is the right next phase for our customers, partners and team. This combination will enable us to build on our Zero Trust platform and the relationships we have earned to help enterprises protect operations today and prepare for the quantum era. Following closing, we intend to connect IonQ’s quantu
The hardest SOC 2 AI risk problem is not whether an AI tool is innovative; it is whether the auditor can see where the tool starts, what it can touch, who owns it, and what evidence proves it behaved as intended. AI agents, embedded copilots, retrieval-augmented generation, automated support bots, and vendor-hosted models create a […] The post SOC 2 AI Risk: 10 Evidence Wins with Lazarus Alliance appeared first on Lazarus Alliance, Inc..
AI GRC automation is changing how CISOs, compliance officers, and security teams prepare for cybersecurity audits: the winning model is no longer a frantic evidence sprint, but a continuously monitored, auditor-ready control environment. Continuum GRC cybersecurity audits help organizations connect compliance evidence, continuous control monitoring, AI governance, and risk management into one defensible operating model […] The post 7 AI GRC Audit Wins with Continuum GRC Cybersecurity Audit
Researchers have tricked six widely used AI agent frameworks into running tool calls written by an attacker, simply by asking the underlying model to repeat the call back. The technique, which the researchers call “Repeat-After-Me,” worked on LangChain’s LangGraph, Microsoft Agent Framework, Microsoft’s AutoGen, Google’s Agent Development Kit 2.0, AWS’ Strands Agents and CrewAI, according to researchers from Pennsylvania State University, Université Montpellier and Dartmouth College. “A seemingl
Unpatched vulnerabilities remain one of the leading causes of breaches, yet most patching tools still force IT teams into costly trade-offs between speed and stability. At NinjaOne, we believe the future of patch management must eliminate both security and operational risk without compromise. Patch management, when administered effectively and expeditiously, can amplify the value of […]
Manufacturing and Energy Plants utilise Operational Technology (OT) to help manage and operate their business. These technologies include programmable logic controllers (PLCs), supervisory control and data acquisition (SCADA) systems, and human-machine interfaces (HMIs). Integrating these technologies introduces risks to plant operations and service. Security breaches to plant control systems may lead to physical damage to […] The post OT Security Checklist for Manufacturing & Energy Plant
When AI makes breaking in cheap, what matters is how much data sits behind each door.ARTEX is an open-source AI agent built for penetration testing, and anyone can download it. Between late September and early October, one attacker pointed it at South Korean banks and left with customer data, according to CrowdStrike.Shinhan Bank and Yegaram Savings Bank reported breaches affecting 25,000 and 40,000 people, Infosecurity Magazine reported, citing The Straits Times. CrowdStrike assessed the attack
Draft — summary to be written.
Discover why traditional security tools leave gaps in enterprise AI use and how AI Usage Control (AIUC) provides crucial identity, data, and prompt-level risk governance.
Microsoft has reminded customers that systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will stop receiving security updates next month. [...]
Writing and sending a follow up email is tricky. Here's what to say, when to send, and six templates for different business scenarios.
A password hint may seem harmless: a short clue that helps you remember a login. But a hint displayed on a sign-in screen can also help someone else guess it. If the clue points to your pet, birthday, hometown, school or favorite team, a criminal may find the answer in your social posts, public records […] The post Why password hints are a security risk—and what to use instead first appeared on Total Defense.
An administrator needs to sign in during an internet outage. A traveling employee opens a laptop without Wi-Fi. A workstation operates on an internal network with restricted external connectivity. In each case, the organization still needs to verify who is signing in. Offline FIDO MFA lets users complete multi-factor authentication with an enrolled FIDO2 security […] The post Offline FIDO MFA: Phishing-Resistant Login Without Internet appeared first on Rublon.
Find out which tasks suit workflow automation, where human judgment matters, and how to choose tools that protect your business data.
ZeroFox Signals Research began scoping the 2026 federal election domain threat surface in June and has observed it continuously since early July. For three months we have been observing it, enriching it, and following how election-adjacent domain infrastructure is being registered, held, and in a few cases reconfigured in ways that warrant watching ahead of […]
The Operational Technology Information Sharing and Analysis Center (OT-ISAC) and the Singapore University of Technology and Design (SUTD)... The post OT-ISAC, SUTD combine research and industry threat intelligence to strengthen OT cybersecurity preparedness appeared first on Industrial Cyber.
What's In Store? A first look at the upcoming release of StorMagic SvHCI 2.6, including support for Veeam agentless backups A live demo from Mark showing what the Veeam integration looks like and how it works Why agentless backup matters to customers moving away from VMware, and how to explain it in customer conversations [...] The post Sneak Peek: Veeam Agentless Backups in SvHCI appeared first on StorMagic.
How to Secure Unstructured Data Across File Servers, NAS and M365 Enterprises need to secure unstructured data across Windows file servers, NAS devices, SharePoint, OneDrive, and other M365 services. Each environment has different permission models, sharing mechanisms, and security controls. A confidential file may be protected on a file server but become exposed [...] The post How to Secure Unstructured Data Across File Servers, NAS and M365 appeared first on FileOrbis.
MCP security controls are necessary, but an attack that begins through MCP may not end there. Learn why AI agents still need detection and response.
MCP connects AI agents to enterprise tools and data. Learn the five MCP security risks and what an MCP security architecture should look like.
Sovereign RAG: Building Retrieval-Augmented Generation Under Local Control Retrieval-Augmented Generation (RAG) enables enterprise AI to generate responses using internal documentation. However, sovereignty risks arise when embedded data, vector databases, or AI models operate outside of approved infrastructure. Sovereign RAG addresses these risks by keeping enterprise data, AI processing, and access controls within defined [...] The post Sovereign RAG: Building Retrieval-Augmented Generation Un
If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
Cybersecurity threats do not follow audit schedules. A security control that was effective during last month’s assessment may no longer provide the same protection today. New vulnerabilities, changes to IT systems, third-party dependencies and evolving business requirements can all affect an organisation’s security posture. Yet many organisations still rely on periodic reviews, spreadsheets and disconnected […] The post What Is Continuous Security Monitoring? A Practical Guide
CVE-2026-102255: Critical SonicWall SMA1000 SSRF SonicWall has patched CVE-2026-102255 , a critical pre-authentication Server-Side Request Forgery (SSRF) vulnerability affecting the WorkPlace interface of SMA1000 applian