Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

25,328 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Embedded Entropy Architecture Guide for OEMs

This embedded entropy architecture guide explains how OEMs can design, verify, and integrate quantum-derived randomness into security hardware at scale. The post Embedded Entropy Architecture Guide for OEMs first appeared on Crypta Labs QRNG.

Announcement

The CSPM Gap: Why Most Cloud Breaches Start With a Misconfiguration You Already Knew About | SecurityHQ

The CSPM Gap: Why Most Cloud Breaches Start With a Misconfiguration You Already Knew About Cloud breaches rarely start with a zero-day. They start with a storage bucket left open, an identity role with far more permissions than it needs, or a security group that was supposed to be temporary and never got closed.  The […] The post The CSPM Gap: Why Most Cloud Breaches Start With a Misconfiguration You Already Knew About | SecurityHQ appeared first on SecurityHQ.

Announcement

Contracts Cannot Override the Law: Why Data Sovereignty Has to Be Architectural, Not Contractual

Introduction Every vendor contract for a cloud service contains language about data protection: confidentiality clauses, data processing agreements, promises about where data will and will not go. These clauses matter, and no organisation should sign a contract without them. What they cannot do is change what happens when a court or government agency lawfully compels Read more...

Announcement

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor's tradecraft. The attack took place in early June 2026 over a period of about 18 hours. "The destructive operations

Announcement

Securing AI Agents at Scale with NVIDIA

AI agents are crossing an important threshold. They are moving from assistants that respond to us to autonomous systems that reason, plan, and act on our behalf. They can write and execute … The post Securing AI Agents at Scale with NVIDIA appeared first on Palo Alto Networks Blog.

Announcement

What Is Cybersecurity Platform Consolidation in 2026

Cybersecurity platform consolidation is the process of bringing overlapping security tools, data, and workflows into a more integrated environment so teams can manage threats with less operational complexity. In 2026, the goal is not simply to buy fewer products. It is to improve visibility and response across endpoints, networks, cloud, identity, and applications while preserving The post What Is Cybersecurity Platform Consolidation in 2026 appeared first on Seceon Inc.

Announcement

Your AI agent found an API. Should it trust it?

In July 2026, during testing, autonomous AI agents breached Hugging Face’s production infrastructure without any human direction or knowledge. When the 2026 API World conference opened in Santa Clara on September 1, the question on everyone’s mind was no longer …

Announcement

WAF vs. DDoS Protection: Which Layer Blocks Which Attacks?

A WAF blocks Layer 7 attacks, not volumetric floods. See which DDoS control blocks which attacks, where each one fails, and how to prove yours is configured. The post WAF vs. DDoS Protection: Which Layer Blocks Which Attacks? appeared first on MazeBolt.

Announcement

Stolen AI credentials feed growing LLM proxy economy

Cyber threat groups have increasingly targeted enterprise AI assets, such as credentials, cloud environments, and research, as a means for operationalizing their own use of AI. Now, another sophisticated means for obfuscating illegitimate use of AI resources is coming more clearly to light. According to a report last week from security firm Team Cymru, malicious actors are employing proxy servers, known as transfer stations, to hide the origin of traffic to frontier AI models, providing cover fo

Announcement

16,415 Stolen Passwords, One Open Door: How Blackhatsect0r & DXQRTXX Exposed Themselves

Blog 16,415 Stolen Passwords, One Open Door: How Blackhatsect0r & DXQRTXX Exposed Themselves On July 28, 2026, someone posting as DXQRTXX told their own Telegram channel to tighten up their operational security. Weeks earlier, on the other side of that same channel, the crew had shared a report about a phishing operation that got caught […] The post 16,415 Stolen Passwords, One Open Door: How Blackhatsect0r & DXQRTXX Exposed Themselves appeared first on ThreatMon.

Announcement

Cómo medir si tu organización caería en el fraude del CEO

Qué es el fraude del CEO, por qué una simulación general no lo mide y cómo armar un ejercicio dirigido a quien puede mover dinero en tu organización. La entrada Cómo medir si tu organización caería en el fraude del CEO se publicó primero en SMARTFENSE.

Announcement

The patch window has collapsed.

The Patch Window Has Collapsed. For years, vulnerability management was treated like maintenance. Scan. Find vulnerabilities. Prioritise them. Schedule a maintenance window. Patch them. Repeat next month. That process made sense when defenders had time. The problem is that attackers are no longer working to our maintenance schedule. And increasingly, neither is AI. Something important […] The post The patch window has collapsed. first appeared on BlockAPT | Autonomous AI Cybersecurity.

Announcement

What Is a Zombie Agent, and How Many Do You Already Have?

Unused AI agents with active keys create big security risks. Learn what zombie agents are and how to protect your company's data. The post What Is a Zombie Agent, and How Many Do You Already Have? appeared first on JumpCloud.

Announcement

What Does the Cyber Security Skills Gap Mean for your SOC?

A well-run security operations centre (SOC) strengthens your ability to detect, investigate and contain threats. But building this capability in-house is costly, resource-intensive and relies on cyber security specialists who are increasingly hard to find and keep.

Announcement

The 10 Most Secure Browsers in 2026

The most secure browser in 2026 is Google Chrome, on the criterion that matters most: it ships security patches faster than anything else and installs […] The post The 10 Most Secure Browsers in 2026 appeared first on Reflectiz.

Announcement

A Sketch of GISEC Global 2026

Penta Security participated in GISEC 2026, the Middle East and Africa’s largest cybersecurity exhibition, held […] The post A Sketch of GISEC Global 2026 appeared first on Penta Security Inc..

Announcement

RoundKick XDR

Nowość w Arcabit Administrator RoundKick XDR — jeden raport, wiele źródeł i pełniejszy obraz zdarzeń Do modułu Arcabit Administrator dodaliśmy raport RoundKick XDR. Jego zadaniem jest zebranie w jednym miejscu...

Announcement

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below - CVE-2026-88771 (CVSS score: 9.5) - An improper input validation vulnerability that could allow an unauthenticated attacker to

Announcement

Vulnerability Management as a Service (VMaaS): The Complete Guide for 2026

Modern organizations can have security infrastructure spanning numerous networks, cloud environments, web and mobile applications, and APIs. Each of these can have security vulnerabilities that can be exploited by attackers. As the area that an organization’s security team has to protect- the attack surface- expanded, so did the number of alerts and findings that security […] The post Vulnerability Management as a Service (VMaaS): The Complete Guide for 2026 appeared first on Kratikal Blog

Announcement

Top 15 Nagios Alternatives to Know in 2026

TL;DR: Nagios alternatives replace manual, plugin-driven checks with automated discovery, dependency mapping, and modern dashboards. Best for agentless dependency mapping: Faddom. Best open-source replacement: Zabbix. Best managed SaaS observability: Datadog. What Is Nagios and Why Do Organizations Seek Alternatives? Nagios is an open-source monitoring system used to track the health and availability of servers, networks, […]

Announcement

How Data Lineage Catches a File That’s Trying Not to Be Found

A technical look at how Netskope One Data Lineage reconstructs a file’s journey and closes visibility gaps with endpoint events. It almost feels like a Shrödinger riddle: When a user downloads a financial report, renames it (e.g. holiday_photo.jpg), edits it, and uploads it to personal cloud storage, is it still the same file? Arguably not, […]

Announcement

Ransomware Group emperador Hits: SiteProRentals

Summary In the latest cybersecurity news, SiteProRentals — an organization based in US — has fallen victim to a ransomware attack conducted by the… The post Ransomware Group emperador Hits: SiteProRentals appeared first on HookPhish.

Announcement

Ransomware Group emperador Hits: Electrolux 2…

Summary In the latest cybersecurity news, Electrolux 2… — an organization based in SE — has fallen victim to a ransomware attack conducted by… The post Ransomware Group emperador Hits: Electrolux 2… appeared first on HookPhish.

Announcement

Real-Time Detection of AI Phishing Emails

Learn how real-time detection of AI phishing emails analyzes sender domains, URLs, destination pages, user behavior, and threat intelligence to identify sophisticated phishing attacks. The post Real-Time Detection of AI Phishing Emails appeared first on Foresiet.

Announcement

Cycode Uncovers Account Takeover in MCP Python SDK

A malicious MCP server tricked the SDK into sending login credentials to the attacker instead of the real login provider... The post Cycode Uncovers Account Takeover in MCP Python SDK appeared first on Cycode.