Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,331 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
AI Pentesting or AI-Powered AppSec? Know What You’re Actually Buying
The security industry is entering a new era of AI-powered security testing.  Agentic AI can reason through applications, identify vulnerabilities, generate exploits, adapt its approach, chain weaknesses together, and validate […] The post AI Pentesting or AI-Powered AppSec? Know What You’re Actually Buying appeared first on Ridge Security.
Mobius report 71/2026 – Minelaying Via Fixed-Wing UAVs, Ukraine
In recent months, starting in early 2026, released documentation has shown both Ukrainian and Russian forces developing and deploying fixed-wing UAVs to disperse landmines over enemy territory. Available imagery also documents purpose-built mine release systems developed for this purpose. Employing...
Cycode + Hugging Face: See & Secure Every AI Model
Cycode’s Hugging Face integration gives security teams visibility, context, and control over the AI models your teams build, publish, and pull... The post Cycode + Hugging Face: See & Secure Every AI Model appeared first on Cycode.
ISOC in Microsoft Defender: What You Need to Know
On September 23, 2026, Microsoft announced a new Defender feature set called ISOC (integrated security operations center). This feature set allows Microsoft 365 E5 and The post ISOC in Microsoft Defender: What You Need to Know appeared first on Corsica Technologies.
Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
CVE-2026-86950: Apple CoreGraphics Zero-Day Linked to Extremely Sophisticated Targeted Attacks
Apple has released emergency security updates to address a CoreGraphics vulnerability that may have been exploited in a highly targeted attack against specific individuals. Tracked as CVE-2026-86950, the flaw is an out-of-bounds write issue that can lead to arbitrary code execution when a vulnerable Apple device processes a maliciously crafted file. The vulnerability was reported […] The post CVE-2026-86950: Apple CoreGraphics Zero-Day Linked to Extremely Sophisticated Targeted Attacks app
AuthMind Data Reveals One in Five AI Agents Operating in Enterprise Environments as Shadow Agents
Expanded agentic AI discovery capabilities identify coding, user-assisted, autonomous and shadow AI agents by observing what they do on the network. BETHESDA, Md. – 29 Sep 2026 – AuthMind, the leader in identity observability-driven Agentic AI threat protection, today announced that approximately 20 percent of AI agents running inside enterprise environments are shadow agents that security teams don't know exist, according to the latest AuthMind deployment data. The findings come from...
Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. "During the shutdown, this activity led to the discovery of a previously unknown critical vulnerability confined to a capability that is enabled for less than 1% of the customer base," the company
Zentera Launches Data Access Control for AI Agents
Ensage AI Security now gives security teams controls, so companies can adopt agents without exposing licensed designs, research data, or customer records.
Threat Actor Deep Dive: Storm
Storm is a ransomware and data-extortion operation first observed in August 2026, when the group began publishing victims to its own Tor-based data leak site (DLS).
How Versa Sovereign SASE Answers the EU Technological Sovereignty Package
Agents Should Show Up in Inventories, Not Pentests
Your AI inventory lists what was declared. The agents and MCP servers running in your clusters show up only in what they do. The pentest of your production Kubernetes cluster wraps up. The report has one finding in red. From a foothold in a single pod, the testers reached an MCP server – a small […] The post Agents Should Show Up in Inventories, Not Pentests appeared first on Hush Security.
A Practical Guide to Enterprise IT Risk Assessment
Enterprise IT environments now span cloud platforms, SaaS applications, endpoints, third-party services, and AI tools, creating more opportunities for disruption, security incidents, and operational failure.IBM’s Cost of a Data Breach Report 2026 puts the global average cost of a data breach at $4.99 million, while Verizon’s 2026 Data Breach... The post A Practical Guide to Enterprise IT Risk Assessment appeared first on ManageEngine Blog.
The Essential Guide to Sort Code Checkers in UK Banking
Every bank account in the UK has a unique sort code, but did you know this six-digit number does more than just identify a bank branch? It plays a crucial role in routing payments accurately and securely. Yet, incorrect or outdated sort codes can lead to failed transactions, delays, or even fraud. Businesses rely on […] The post The Essential Guide to Sort Code Checkers in UK Banking appeared first on Trustpair.
Attaques agentiques : quand l’humain disparaît de la Kill Chain
Chez les acteurs de la menace, on le sait, l’usage de l’IA générative s’est généralisé […] L’article Attaques agentiques : quand l’humain disparaît de la Kill Chain est apparu en premier sur INTRINSEC.
Ontic Connect San Francisco
The post Ontic Connect San Francisco appeared first on Ontic.
Catch threats before they escalate with real-time Identity Telemetry
Identity governance helps control who should have access, but periodic reviews alone may not reveal attacks as they happen. tenfold Software explains how real-time identity telemetry can help security teams investigate suspicious activity before it escalates. [...]
Where to start: The maturity path from static scoring to prediction
Where to start: The maturity path from static scoring to prediction The idea of a local predictive model can be daunting, particularly if you’re still at the stage of patching by pivoting off KEV or CVSS.
VPN on Your Router vs. Your Device: Which One Should You Actually Use?
A router VPN covers your whole house automatically but can choke your speeds. A device VPN app is far faster and flexible but only protects the gadget it's running on. The real move is to use both, which is only a headache if your VPN forces cheap 5-device caps on you.
Ransomware Group m3rx Hits: cpacb.com
Summary In the latest cybersecurity news, cpacb.com — an organization based in CA — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group m3rx Hits: cpacb.com appeared first on HookPhish.
Citrix Patches Actively Exploited NetScaler ADC & NetScaler Gateway Vulnerabilities
Two critical zero-day vulnerabilities in Citrix NetScaler ADC (formerly Citrix ADC) and Citrix NetScaler Gateway (formerly Citrix Gateway) are under […] The post Citrix Patches Actively Exploited NetScaler ADC & NetScaler Gateway Vulnerabilities appeared first on The HIPAA Journal.
AI Red Teaming Techniques for Enterprise AI Security
Every major security breakthrough begins the same way: attackers find a new surface before defenders think to look there. It happened with networks, web applications, and the cloud. Now, as organizations embed artificial intelligence into their most critical operations, it is happening with AI systems as well, and conventional security testing was never designed to address it. That gap is exactly what AI red teaming techniques were built to close. “AI red teaming reveals how attackers inte
The Access Protocol: Mastering Who, What, and When in Regulated Environments.
The Access Protocol: Mastering Who, What, and When in Regulated Environments. bcollins Tue, 09/29/2026 - 06:48 Designed to help biotech and life sciences teams build risk-based, audit-ready access controls as best practice in applied data governance. Event Category On-Demand Event Date Time Wed, 09/23/2026 - 10:00 Event Image Image Event URL Watch On-Demand Feature Event Off Event start date Wed, 09/23/2026 - 12:00 Event Time 10 am PT / 1 pm ET Industry Life Sciences
Master Services Agreement
101 Malicious npm Packages Add Developers' WhatsApp Accounts to Groups Without Consent
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. "The malicious packages abuse the 'Baileys' WhatsApp open source project to add the victims to groups without their consent," OX Security researchers Nir Zadok, Moshe Siman Tov Bustan, and Vitalii Chepurko said in a technical
The Access Protocol: Mastering Who, What, and When in Regulated Environments.
The Access Protocol: Mastering Who, What, and When in Regulated Environments. bcollins Tue, 09/29/2026 - 06:44 Designed to help biotech and life sciences teams build risk-based, audit-ready access controls as best practice in applied data governance. Resource Center Category Webinar Resource Center Image Resource Center URL Watch Now Industry Category Life Sciences URL open same window Off
4 Reasons Life Sciences M&A Due Diligence Demands a Purpose-Built AI Platform
4 Reasons Life Sciences M&A Due Diligence Demands a Purpose-Built AI Platform Off owen.dudley Tue, 09/29/2026 - 13:43 Purpose-built AI accelerates the complex diligence behind life sciences transactions, helping capital reach promising treatments sooner. M&A Due Diligence Off Roland Petrenkó ">Roland Petrenkó Roland Petrenkó Job Title Head of Pharma & Healthcare – EMEA LinkedIn Handle https://www.linkedin.com/in/roland-petrenko/ Summary Roland Petrenkó is a senior account executiv
Beyond Detection Accuracy: Measuring the Real Business Impact of Bot Management
See how DataDome helped a high-traffic platform recover 8% revenue in 24 hours by replacing signature-based bot detection with behavioral analysis.
The 2026 U.S. Midterms Election Season, Weakened Defenses: The Cyber Landscape Ahead
The 2026 U.S. Midterms Election Season, Weakened Defenses: The Cyber Landscape Ahead In late April 2026, Army General Joshua Rudd, the head of U.S. Cyber Command and the NSA, testified before the Senate Armed Services Co
What Does DSPM Time-to-Value Really Mean?
Speed matters in data security. Security leaders do not want to spend months waiting to understand where sensitive data lives. They need answers quickly, especially as enterprise data … The post What Does DSPM Time-to-Value Really Mean? appeared first on BigID.
Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610
CVE-2026-50610: privilege elevation on Acer devices Many laptops ship with vendor « control center » software […] L’article Acer System Monitor: from standard user to SYSTEM with CVE-2026-50610 est apparu en premier sur INTRINSEC.
Piratage du FBI : ShinyHunters aurait contourné le pare-feu protégeant Oracle PeopleSoft
Le piratage du portail de recrutement du FBI commence à livrer ses premiers détails techniques. Google a documenté une méthode utilisée par ShinyHunters pour contourner les protections d’Oracle PeopleSoft, que le groupe affirme également avoir employée contre FBI Jobs.
Ontic’s Corporate Security Executive Dinner
The post Ontic’s Corporate Security Executive Dinner appeared first on Ontic.
Scytale vs Vanta vs Drata: Which Compliance Platform Is Right for You?
Compare Scytale, Vanta, and Drata across compliance features, pricing, integrations, and support. The post Scytale vs Vanta vs Drata: Which Compliance Platform Is Right for You? appeared first on Scytale.
GAO finds 988 Lifeline still lacks cybersecurity safeguards
The Government Accountability Office (GAO) recently found that the Department of Health and Human Services (HHS) has not fully implemented cybersecurity controls for the 988 Suicide and Crisis Lifeline, leaving the service exposed to potential hacks.
Brand Monitoring Services: How to Compare Them
Search for brand monitoring services and you will get two different product categories on the same results page, described in almost identical language. One defends your trademark against counterfeits and grey market sellers. The other defends your customers and executives against people impersonating you. Different vendors, different buyers, different price points, and buying the wrong […] The post Brand Monitoring Services: How to Compare Them appeared first on CybelAngel.
Cesile Johnson: The Only Woman in the Room
Terry sits down with Cesile Johnson, CTO of Core Bank, for a conversation about what it actually takes to modernize a bank from the inside — the legacy systems nobody wants to touch, the guardrails that have to exist before AI gets anywhere near customer data, and the reality of building a career in a […] The post Cesile Johnson: The Only Woman in the Room appeared first on Fleet Defender.
Introducing nGenius Copilot for Enterprise
Introducing nGenius Copilot for Enterprise: NETSCOUT's latest addition to nGeniusONE that extends the platform with an AI-powered natural-language interface to interact with Smart Data.
5 Browser Risks Most IT Teams Don’t Know They Have
You’ve patched your endpoints, set up your firewall, and your EDR is working. But do you know which browser extensions are installed on your devices right now? Most IT teams don’t. Employees spend most of their day in the browser, but it doesn’t get the same attention as the device itself. Here are five risks […]