Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,328 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Agentic AI is autonomous software with identity, tools, and memory. Here are the real security risks, governance gaps, and why identity is the control plane.
A purported ad-blocker exfiltrates reams of sensitive information and benefits from having Google's stamp of approval despite researcher warnings.
What is identity security? Learn how identity security protects human and non-human identities, AI agents, credentials, and access across modern environments.
Brand impersonation hits marketing and security at the same time. See how Doppel helps both teams catch and dismantle attacks before customer trust erodes.
Non-human identities outnumber humans in enterprise environments. Learn best practices for governing machine identities with automated discovery, credential rotation, and least privilege.
Cybersecurity teams are increasingly responsible for more than day-to-day security operations. They are also expected to evaluate risk, support compliance, guide investments, communicate with leadership, and help determine where the security program should go next. Those responsibilities require strategic security leadership, but not every organization needs or is ready for a full-time Chief Information Security […] The post When Does Your Organization Need a vCISO? appeared first on Lumif
In the first two blogs in this series, we explored why network observability needs to evolve and what we mean by Intelligent Network Observability. Now comes the practical question: How do you put it to work in your IT environment?  Most NetOps teams aren’t starting from scratch. You already have network monitoring investments, established workflows, […]
Follow the investigation from a single IP later tied to the PEEP toolkit back to a historical cluster of domains, hosting environments, and coordinated provisioning.
CVE-2026-19490 is a critical Citrix NetScaler ADC and Gateway authentication bypass vulnerability included in CISA’s Known Exploited Vulnerabilities catalog. NodeZero® Rapid Response safely validates exposure.
Citrix a corrigé huit vulnérabilités dans NetScaler ADC et Gateway, dont deux failles critiques déjà exploitées par des pirates. Dans l'urgence, le CERT-FR a publié une alerte et renvoie les administrateurs vers les correctifs de l'éditeur.
Trusted and Safe AI with Eclypsium AI Infrastructure Assurance and NVIDIA Open Agent Safety Platform AI agents are moving from answering questions to taking action. They can read sensitive data, call APIs, write and execute code, use external tools, and coordinate with other agents. In some environments, their decisions may affect physical systems. That creates […] The post Safe AI Agents Start With Trusted AI Infrastructure appeared first on Eclypsium.
A regional sales director wants to know why the Northeast pipeline looks soft this quarter...
Originally Posted on Substack Technological design is power. To be meaningful, regulation must address design. The design of technology controls what people can and can’t do, how people behave, how people interact with others, the way people make decisions, how much personal data they disclose, and many other things. Policymakers have been reluctant to regulate […] The post Technological Design Is Power appeared first on TeachPrivacy.
Executive Summary Imperva Threat Research identified a series of remote denial‑of‑service vulnerabilities in GraphQL Java, one of the most widely used libraries for GraphQL in the Java ecosystem. In this blog, we’ll deep dive into these vulnerabilities, analyze their impact, and provide recommendations to protect your environment. If your endpoints are protected by Imperva Web Application Firewall, your systems are already protected against these threats. Introduction GraphQL Java is the engine
Answer 5 quick questions to predict what a dark web scan will find about your company. Then run the free scan to see your real exposure.
The CLOUD Act lets US authorities demand data from US-based cloud providers, wherever it's stored. Here's how it works.
Incident responders began warning of potential vulnerabilities in NetScaler Gateway products on Saturday before cybersecurity agencies in the Netherlands, U.S. and U.K. released advisories on Sunday confirming vulnerabilities. Citrix itself confirmed eight new vulnerabilities.
Meta's Muse agent hides in plain sight as a regular browser. See why fingerprinting alone can't tell you if agentic traffic should be trusted.
The EU Cyber Resilience Act (CRA) establishes cybersecurity requirements for products with digital elements sold in the EU. These requirements affect how connected and embedded products are designed, secured, updated, documented, and maintained throughout their lifecycle. As CRA implementation progresses, engineering and product teams need to stay informed about the latest requirements, timelines, and compliance […]
Cisco Investments is Arcade.dev's newest strategic investor, extending our Series A to make AI agent governance core enterprise infrastructure.
Securing human identities has always been a mess. Then came AI agents. Now the mess has its own agents, running 24/7, operating at machine speed, and occasionally deciding the best […] The post 14 Tips for Human and AI Identity Management from Ping Identity appeared first on CISO Series.
The post Cyber Attack News: Risk Roundup, Top Stories for September 2026 appeared first on Xage Security.
Connecting the Office and Field Guide bcollins Mon, 09/28/2026 - 08:49 How Connected Project Information Drives Better Decisions Across Construction. Resource Center Category eBook Resource Center Image Resource Center URL Read More Industry Category AEC URL open same window Off
Aikido is an inaugural partner in OpenJS's Security Stewardship Program, funding bug bounties and maintainer support for Node.js. Category: Aikido
At a glance: Citrix disclosed eight NetScaler vulnerabilities on September 27, 2026, including two actively exploited flaws that were added to the CISA KEV catalogue. NetScaler ADC and NetScaler Gateway are attractive targets because they sit at the network edge and often provide access to VPN, authentication, and business-critical applications. Patching addresses the vulnerabilities, but organizations with internet-facing NetScaler deployments may also need to assess whether compromise occurred
Six years ago, Microsoft’s own identity security lead wrote a blog post telling the industry to hang up on phone-based authentication for good. It didn’t land the way you’d expect a warning from the company that built the world’s most-used identity platform to land. SMS codes stuck around. Voice calls stuck around. “It’s better than […] The post Microsoft Just Proved the Passwordless Argument appeared first on Portnox.
How Upfront Work Makes Healthcare Migration More Predictable caro2698 Mon, 09/28/2026 - 10:36 Cloud Insights How Upfront Work Makes Healthcare Migration More Predictable September 29, 2026 by Kristen Frankel, Technical Program Director, Program Operations, Rackspace Technology Link Copied! Recent Posts Look Beyond Uptime to Measure Healthcare IT Reliability October 15th, 2026 Who Controls the Intelligence your AI Creates? October 13th, 2026 AI, Digital Maturity and Resilience at HTN Live Leeds O
A practical, no fluff answer to how often continuous red teaming should run, plus the triggers that mean you need a test right now, not next quarter.
By the time you're comparing digital risk protection vendors, the category question is settled. You've accepted that threats against your brand, customers, executives, and data live outside the perimeter, across domains, social platforms, app stores, marketplaces, ads, and the dark web, and that somebody has to find and remove them. What's left is the harder […] The post How to evaluate digital risk protection vendors appeared first on Bolster AI.
In our introduction to the platform, What Is an Agentic SOC? Inside Rainier, we described Rainier’s four core pillars. This […] The post How AI Alert Triage Works in an Agentic SOC: Inside Rainier’s Alerts & Triage Engine appeared first on Network Intelligence.
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p.
Citrix has released emergency security updates for two critical zero-day vulnerabilities affecting NetScaler ADC and NetScaler Gateway after confirming that attackers are already exploiting both flaws in real-world attacks. Tracked as CVE-2026-88771 and CVE-2026-88772, the vulnerabilities each carry a CVSS v4.0 score of 9.5 and can enable unauthenticated remote code execution on vulnerable appliances. The […] The post CVE-2026-88771 and CVE-2026-88772: Critical Citrix NetScaler Zero-Days E
Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) appeared first on Unit 42.
Gartner forecasts that up to 70% of new remote access … The post Zero Trust Network Access (ZTNA): Scope, Limits and Gaps appeared first on Tufin.
Could a simple mistake cost your establishment more than expected? Modern digital tools bring more consistency to routine workflows and help your team catch avoidable errors. Learn more about them here. Why ...
Could a simple mistake cost your establishment more than expected? Modern digital tools bring more consistency to routine workflows and help your team catch avoidable errors. Learn more about them here. Why ...
A routine package install can open the door to a cloud breach. Learn how attackers exploit developer credentials. Discover practical steps to contain exposure and protect your cloud environment.
Microsoft Threat Intelligence identified NeedyMantis, a modular post-compromise malware framework used in targeted intrusions that combines custom loaders, encrypted archives, and extensible components to maintain long-term access and support follow-on operations. The post NeedyMantis: Unpacking a post-compromise malware family used in targeted operations appeared first on Microsoft Security Blog.
Installing a VPN on your router can make your home network more convenient, faster, and safer. Here are nine scenarios where it makes a real difference, from automatic setup to full privacy.
Service accounts can leave AI agents with permanent access. Learn how to spot risky permissions, assign owners, and shut down access without breaking workflows. The post Service Accounts: The Hidden AI Security Risk in Your Organization appeared first on JumpCloud.