Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
OpenAI GPT-6 Sol: An evaluation
GPT-6 Sol writes 27% less code than GPT-6 Astra and produces 22% fewer findings in total. See the full evaluation of correctness, security and maintainability.
Unified Code, Unified Risks: Uncovering Vulnerabilities in .NET MAUI Applications
.NET MAUI lets developers write once and ship to both platforms. From an attacker's perspective, that means reverse-engineer once and break everywhere. This post walks through extracting readable assemblies from MAUI apps and the high-impact vulnerability patterns that consistently appear.
Introducing Agent Trust: Managing Agents with Identity Plus Behavior
This past summer, an AI agent from outside the organization, operating well within its authenticated permissions, still caused a breach. Not from a stolen credential or a broken login, but from a sequence of individually plausible actions that added up to an unauthorized outcome. It has since become the reference case for a question every […] The post Introducing Agent Trust: Managing Agents with Identity Plus Behavior appeared first on Cequence Security.
The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint
Threat actors exploited Samsung MagicINFO to install AnyDesk, disable Defender, and compile a Monero miner directly on a victim endpoint. Learn the detection signals.
Voice Callers Exploit BYOD to Access Corporate Data
In a story recently reported by Dark Reading, threat actors are calling and texting employees on personal mobile devices, impersonating IT help desks and directing them to phishing pages designed to steal Microsoft 365 credentials and authentication tokens. By targeting unmanaged BYOD devices, attackers can bypass many corporate security controls and use compromised identities to access and exfiltrate sensitive data from services including SharePoint, OneDrive, and Exchange.
Introducing Omnis Streamer’s Built-in MCP Server: NETSCOUT’s Latest Innovation
NETSCOUT’s Omnis Streamer now includes a built-in MCP server, giving AI agents and LLMs real-time access to Smart Data for AI workflows and autonomous troubleshooting.
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds or exfiltrate sensitive assets.This dynamic is central to our analysis as we kick off a series around Rapid7's collaborative research with Zimbra; upcoming installments will explore technical details and broader findings based within the Zimbra Collaboration Suite. Our investigation disrupted the trad
Google to critical infra orgs: Our AI scanners won't be evil, promise
Gemini 3.8 Flash Cyber and Wiz's Red Agent team up to protect hospitals, public transit, and tech
AI-SPM vs. AI Runtime Security: What CISOs Actually Need
One vendor says posture is the foundation. The other says posture is a snapshot and the real risk is at inference. Both are right, because they are describing different controls—and a CISO who knows the split can buy deliberately instead of buying twice.
What Is AI SIEM? How Intelligent Security Information and Event Management Works
What Is AI SIEM? AI SIEM is a Security Information and Event Management platform enhanced with Artificial Intelligence, Machine Learning, behavioral analytics, automation, and intelligent event correlation. Traditional SIEM primarily focuses on collecting, storing, searching, correlating, and analyzing security events. AI SIEM adds an intelligence layer that can help security teams understand patterns and relationships The post What Is AI SIEM? How Intelligent Security Information and Event Mana
Detecting common Windows privilege escalation techniques with Wazuh
Privilege escalation is the process by which an attacker gains permissions beyond those assigned to their current account. On Windows endpoints, threat actors who gain initial access as a standard user may exploit misconfigurations to obtain administrator or NT AUTHORITY\SYSTEM privileges. With elevated privileges, an attacker can disable security controls, access protected files, dump credentials, […] The post Detecting common Windows privilege escalation techniques with Wazuh appeared fi
Safe AI Adoption Is Now a Two-Front Problem
AI agents can create risk from inside the business without malicious intent. Security teams must continuously validate controls against both external adversaries and increasingly capable AI agents. The post Safe AI Adoption Is Now a Two-Front Problem appeared first on AttackIQ.
New Browser Guard features add protection before and after you click
Spot dangerous sites before you click—and check for scams once you’re there.
Network Forensics Analysis with NetWitness: From Detection to Full Attack Reconstruction
How does NetWitness reconstruct an attack using network traffic? Network protocols are analyzed by NetWitness and the raw data and metadata of the raw data are stored into a database. Search can be conducted through IP addresses, domain names, users or protocols, etc., to form a full view of the sessions on the application layer […]
How Can You Tell if a Domain Is Malicious?
Now that you’ve found a way to see all newly registered domains, it's time to determine which was are malicious by doing some analysis. This way, you can try to stay ahead of domain attacks by identifying them quickly and protecting your brand before the threat actor is able to fully launch their attack.
Master Cybersecurity Audits with Continuum GRC Risk Management
In 2026, organizations face an increasingly complex regulatory environment where cybersecurity audits demand more than checkbox compliance—they require integrated risk management strategies that anticipate threats, map controls across frameworks, and demonstrate continuous improvement. Continuum GRC delivers precisely this capability, enabling CISOs and compliance officers to master cybersecurity audits through a unified platform that aligns technical […] The post Master Cybersecurity Audi
FedRAMP 20x Risk Management: Lazarus Alliance Audit Services
FedRAMP 20x introduces a predictive risk posture that replaces static authorization with automated, evidence-driven oversight. Lazarus Alliance delivers audit services that embed this shift into daily operations for cloud service providers seeking Authority to Operate in 2026 and beyond. FedRAMP 20x Risk Management: From Periodic to Predictive Oversight FedRAMP 20x reframes risk management around continuous […] The post FedRAMP 20x Risk Management: Lazarus Alliance Audit Services appeared
CVE-2026-87902: From WordPress path traversal to RCE via PEAR
CVE-2026-87902 affects WordPress 4.7.0–7.1.1 and can enable path traversal, local PHP inclusion, and RCE. See impact, exploit conditions, and remediation.
What Is a Trojan Virus? A Comprehensive Guide for Cybersecurity Readiness
Every day, employees download files, click links, and install software they believe is safe. Most of the time, it is. But hidden among the legitimate downloads is one of the oldest and most effective tricks in the cybercriminal playbook: the Trojan. If you’ve ever asked, “What is a Trojan virus?”, you’re asking one of the […]
CVE-2026-48842: Unauthentifizierte SQL-Injection-Schwachstelle in Roundcube Webmail jetzt im Visier von Angreifern
Überblick über CVE-2026-48842, die unauthentifizierte SQL-Injection-Schwachstelle in Roundcube Webmail, mit CVSS-Schweregrad und EPSS-Ausnutzungswahrscheinlichkeit CVE-2026-48842 CVSS 8,1 · Hoch EPSS 0,8 % (54.) CVE-2026-48842 (CVSS 8,1, EPSS ≥ 54. Perzentil), veröffentlicht im Mai 2026, ist eine unauthentifizierte SQL-Injection-Schwachstelle in Roundcube Webmail. Betroffene Instanzen erfordern aufgrund der erhöhten Risikosignale umgehende Aufmerksamkeit. Die Schwachstelle betrifft Roundcube Web
Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls
The logistics sector has become the target of a new malicious cyber campaign that distributes an Android spyware codenamed Corp MDM. According to Have I Been Squatted, the campaign uses fake Google Play pages branded as CEVA and TKW Logistics to distribute an Android Package Kit (APK) file that's dressed up as a system service. The delivered app has the package name "com.corp.mdm" Corp MDM
How to Control Internet Access by Device Without Creating More Work for IT Teams
Managing internet access across a K–12 school district is no small task, especially as the number and variety of connected devices continue to grow. IT teams may be responsible for thousands of Chromebooks, laptops, tablets, shared devices, and district-issued devices that students and staff use both on and off campus. Keeping users safe and productive ... The post How to Control Internet Access by Device Without Creating More Work for IT Teams appeared first on ManagedMethods Cybersecurity, Saf
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar
Closing the Dark Web Blind Spot in EclecticIQ Intelligence Center with SOCRadar Your analysts start the morning in their threat intelligence platform, working the feeds, cases, and detections in front of them. What they
Secure Remote Access: the Door You Built Yourself
What CISA and the Five Eyes want from your secure remote access for OT, and how Forescout SRA and the Forescout Vistaro platform get you there. The post Secure Remote Access: the Door You Built Yourself appeared first on Forescout.
Out of the Shadows: Know Every Agent, Govern Every Agent, Trust Every Agent
You cannot govern a population of agents you cannot categorize, register and fingerprint. Shadow AI and ungoverned AI are different problems, and discovery is where the harder one begins.
How to create and publish your own DMARC record
Learn everything you need to know about DMARC to create and publish your own DMARC records and keep them secure and up to date. The post How to create and publish your own DMARC record first appeared on Valimail.
US driver’s license verification is now powered by AAMVA DLDV 3.0
GovDataMatch now runs on AAMVA DLDV 3.0. See how smarter driver's license verification against state DMV records approves more real users and stops fraud.
Women in cyber threat intelligence: No typical path
Sixteen women share how they broke into cyber threat intelligence (CTI), and what it means for how security teams should be hiring.
Devolutions launches Devolutions Ventures
Devolutions announces Devolutions Ventures, a corporate venture division that backs complementary IT and MSP companies. Investments to date include dbatools.pro, Mizo, Obkio, UniGetUI, Avalonia UI, PowerShell Universal, and ControlR.
4 Identity Security Approaches That Fail in Production
We Looked at Four Popular Approaches to Identity Security. Here’s Why Each One Breaks Down in Production. If you’ve sat through identity security vendor pitches over the last few years, you’ve probably heard some version of the same promise: deploy this, and credential-based attacks stop being a problem. Most of those pitches aren’t lying, exactly. The post 4 Identity Security Approaches That Fail in Production appeared first on Seceon Inc.
Survey: People don’t trust AI, but they tell it everything
New research finds that most AI chatbot users have shared something sensitive, but few trust the companies behind them.
Why are SBOMs failing to stop supply chain attacks?
A software bill of materials (SBOM) could prevent most supply chain attacks. Let’s analyze what’s holding back their broader adoption.
Sitehop Opens US Office At Defence And Security Hub
Sitehop, the UK-based post-quantum cybersecurity specialist, has opened a US office in Virginia, Arlington, close to the nation’s military and industrial establishment. The move is being spearheaded by co-founder and CEO Melissa Chambers, a Mississippi-born former NASA engineer and entrepreneur, the daughter of a USAF electrician. It comes after Sitehop’s encryption hardware was installed at key […]
Technology risk management under DORA, NIS2 and ISO 27001
Technology risk management is the process of identifying, assessing and controlling risks to a company’s IT systems, data and digital operations, from cyberattacks and outages to failed vendors and ageing infrastructure. It sits inside operational risk, and for EU-regulated firms it is also a legal obligation, one that DORA, NIS2 and ISO 27001 each require […] The post Technology risk management under DORA, NIS2 and ISO 27001 first appeared on Copla.
Cloud Range Launches AI Validation Range™ and AI Readiness Framework
Cloud Range launches AI Validation Range™ and the Cloud Range AI Readiness Framework™ to help organizations train, test, and validate AI models and agents under realistic conditions.
Enforcing AI Data Policy at the API Gateway
Your AI agents all call the same internal APIs, and those APIs return everything. Here's why enforcing data policy at the API gateway scales better than building filtering into every agent you ship. The post Enforcing AI Data Policy at the API Gateway appeared first on Protecto.
AI Software Factory: Specifications, Work Orders, And Governance
TL;DR AI Software Factory: Specifications, Work Orders, And Governance An agent working from a short Jira ticket for a tenant-scoped...
Get total control of your DDI infrastructure with Micetro’s unified API
Stop juggling between network tools and use Micetro's RESTful API for complete control over your DDI infrastructure and cloud environment.
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation
CVE-2026-94127: F5 BIG-IP APM RCE Under Active Exploitation F5 has released emergency engineering hotfixes for CVE-2026-94127 , a critical heap-based buffer overflow in BIG-IP Access Policy Manager (APM). The vulnerabili