Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Published on 17 September 2026, google-protobuf up to 4.0.2 can recurse indefinitely between its group-skipping reader paths when it sees deeply nested unknown group fields, letting a small protobuf payload crash Node.js services that use generated protobuf deserializers.
Shadow AI is staff using ChatGPT, Claude and Gemini without approval. What leaks, why network DLP cannot see it, and a privacy-first way to stop it.
ClickFix tricks staff into pasting a malicious command. How the attack works, why UK firms are seeing more of it, and where the chain can be broken.
Grok Build is xAI’s coding agent. The grok CLI has an interactive TUI, a headless mode, ACP, and MCP servers configured with grok mcp or ~/.grok/config.toml. Model traffic is ordinary HTTPS. Pipelock covers that path as a forward proxy, and it covers MCP tool traffic when you wrap each stdio server with pipelock mcp proxy. There is no pipelock grok install. Do not treat this page as env-only, and do not treat MCP as unsupported. The full command reference lives in the Grok CLI integration
Some of the most damaging outages are the ones your monitoring never flags: a slice...
2026 M&A Leaks Report Off ranjeesh Fri, 09/18/2026 - 23:10 2026 M&A Leaks Report Annual research from SS&C Intralinks and the M&A Research Centre (MARC) at Bayes Business School draws on nearly two decades of global mergers and acquisitions (M&A) data. The analysis tracks leak activity across markets and sectors, while examining how early disclosures impact deal outcomes.The 2026 M&A Deal Leaks report builds on those findings and goes a step further, examining what makes
Two-sided platforms carry a much heavier fraud burden compared to single-sided retailers. Every buyer, seller, renter, and payer is a potential attack surface, and one bad actor can hit both sides of a transaction at once. For commerce marketplaces and peer-to-peer (P2P) platforms, fraud protection functions as trust infrastructure, determining whether people keep transacting on […] The post Fraud Protection for Commerce Marketplaces and P2P Platforms appeared first on Sift.
Multi-vault secrets governance gives enterprises a consistent way to control access, rotation, and audit activity across existing secrets managers. Because those secrets can remain in AWS Secrets Manager, Azure Key Vault, Google Secret Manager, Kubernetes, or HashiCorp Vault, security teams gain clearer visibility without first moving everything into a new store. The post The Complete Guide to Multi-Vault Secrets Governance appeared first on Akeyless.
In TDIR, actionable threat intelligence ends one of three ways: a hunt, a detection, or a confident decision to ignore it. How to get every threat report to one of them.
DCAI, VDRPro, FCAI Product Enhancements Off ranjeesh Fri, 09/18/2026 - 22:09 DealCentre AIQ&A – Buyer Question VisibilityIn an effort to prevent duplicate questions and increase awareness, Buyers can now see proposed questions from members of their permission group. Q&A “Action Status” ColumnA status column is now available to Q&A Admins and Sell side SMEs to capture (and filter) the workflow status of a question (Delegated, Proposed or Follow Up) – NOTE:
In March 2026, LangChain took its coding agent from Top 30 to Top 5 on Terminal Bench 2.0 without touching the model or fine-tuning a single weight... The post AI Agent Harness: The Layer That Decides Whether AI Security Works appeared first on Cycode.
Egnyte Content Cloud for Enterprises | Start Free Trial bcollins Fri, 09/18/2026 - 14:32 Body Worldwide Intelligent Content Services 2026 Vendor Assessment h1 .tc--teal { color: var(--teal) !important; } .h1, h1 { font-size: clamp(40px, 4vw, 60px); line-height: 94%; } .banner_copy--block { gap: 4px !important; max-width: 600px; } @media (min-width: 1150px) { .banner-description p { font-size: clamp(19px, 5vw, 43px) !important; min-width: 600px; } } .dark_blue_to_light_teal_gradient { backg
TypeSafe’s Jev classifies, scores, and routes without generating text — up to hundreds of times cheaper than an LLM judge. What that changes for evals, confidence routing, and application architecture. The post TypeSafe’s Jev: Can decision models replace LLM judges? appeared first on Arize AI.
CRPx0 has published 47 victims since July 2026. Inside its ClickFix campaign: a fake CAPTCHA, a cross-platform Python loader, and domain-wide encryption.
In late August 2025, someone called Jaguar Land Rover’s IT help desk, convinced them they were an employee, and walked away with a valid password. That’s the story most outlets have settled on, though JLR itself has never confirmed it. What happened next is really a story about IT/OT network segmentation — or the lack […] The post What the Jaguar Land Rover Breach Really Exposed appeared first on Portnox.
The post Protecting People, Facilities, and Operations in Today’s Threat Landscape appeared first on Ontic.
The post Protecting People, Facilities, and Operations in Today’s Threat Landscape appeared first on Ontic.
G2 DCAI Review - Link ranjeesh Fri, 09/18/2026 - 20:26 Off DealCentre AI user review on G2What I like most about DealCentre AI is Ask Link, its conversational AI engine. Being able to ask natural-language questions directly against the deal documents and receive precise answers within seconds complete with source references for quick verification across PDFs, Word, and Excel files makes a real difference. On
The new program expands Vectra AI's partner strategy as increasingly complex security environments and the growing use of AI create demand for broader AI expertise, services, and security outcomes.
At a glance: SAP patched a critical vulnerability in a widely used SAP request-tracing feature that researchers report can lead to compromise of affected SAP systems. Depending on the role of the affected server and its permissions, a successful compromise could expose business-critical data, disrupt ERP operations, or provide a path to connected SAP systems and databases. Teams managing SAP environments can focus on identifying affected systems, deploying available updates, and watching closely
A practical guide for MSPs on auditing inherited Microsoft 365 tenants, transferring GDAP and CSP relationships, and standardizing security baselines across an expanded client book after an acquisition.
WordPress 7.1.1 patched a vulnerability reported by pwn.ai’s Paulos Yibelo named Click2Shell, a complicated vulnerability chaining Cross-Site Request Forgery (CSRF) into selector injection to turn a single click into a remote shell. It was reported responsibly and was fixed in the 17 September release; it’s also an interesting vulnerability which highlights the power of chaining […]
The post Eclypsium Infrastructure Assurance Platform appeared first on Eclypsium.
A study initiated by a University of Arizona Cancer Center physician-scientist Dr. Dan Theodorescu revealed that the loss of the Y chromosome in men’s body tissue could pave the way for cancer to develop in that tissue.
The authentication bypass flaw CVE-2026-76460 impacts Cisco's Identity Services Engine (ISE) and received a maximum 10 out of 10 CVSS score.
Cisco Secure Network Analytics UDP Director — the product that started life as the Lancope Flow Replicator and spent a decade as the Stealthwatch UDP Director — is end-of-sale and end-of-life. If you are running one, you are running unsupported software on a clock that ends October 31, 2028, with no engineering fixes since late 2024. Plixer Replicator imports your existing UDP Director configuration directly, so... Read more » The post Your Cisco UDP Director Is End-of-Life. Here’s th
Ten of the fifteen most active ransomware families in August were not on July's list. The names turn over constantly. The tradecraft underneath them does not.
By Adrian Cheek, Senior Cybercrime Researcher What Passive DNS Discloses About the Systems Behind the Cameras Automated license plate readers and AI-assisted video surveillance have moved from a handful of pilot deployments to tens of thousands of installations across US towns, business parks and residential streets. Anyone can see the cameras, but the cloud platform […] The post 77% of Flock Safety’s Public DNS Namespace is Development Infrastructure appeared first on Flare | Identi
Named as a Pioneer in Emerging Market Quadrant on top of Coolest Vendor Innovations
Selection highlights innovation in securing autonomous AI agents
How can organizations achieve resilience? Resilience depends on seeing risk as one connected system. In this episode of The Chertoff Group‘s Mission Critical Conversations, host Michelle Dawn Mooney sits down with Ben Joelson, president and head of Security Risk and Resilience, to discuss what it takes to create resilient organizations in an age of converging […] The post Security & Resilience with Ben Joelson appeared first on The Chertoff Group.
An AI agent scanned public files, found a vulnerability in an application, and modified personal records on its own. No human reviewed the request, approved the access, or even knew the agent was probing the system until after the damage was done. That is not a hypothetical. Spain’s data protection authority confirmed it happened, and Read more...
Summary In the latest cybersecurity news, MPA Pharma — an organization based in DE — has fallen victim to a ransomware attack conducted by… The post Ransomware Group rhysida Hits: MPA Pharma appeared first on HookPhish.
Auto remediation in application security (AppSec) is the automated process that detects, triages, and fixes security vulnerabilities in code, dependencies, or infrastructure configurations without requiring manual developer intervention for every finding. It combines vulnerability scanners (SAST, DAST, SCA) with automated fix-generation engines that produce patches, dependency upgrades, or configuration changes, then submit those fixes as pull requests or direct commits into the development work
Auto remediation in application security (AppSec) is the automated process that detects, triages, and fixes security vulnerabilities in code, dependencies, or infrastructure configurations without requiring manual developer intervention for every finding. It combines vulnerability scanners (SAST, DAST, SCA) with automated fix-generation engines that produce patches, dependency upgrades, or configuration changes, then submit those fixes as pull requests or direct commits into the development work
Authors: Joshua Ofori Otchere, Director, Software Development, Precisely Yvon Leclerc, Vice President, R&D, Precisely Key Takeaways Precisely Engineering welcomed 12 interns this term; six share their experiences here, including four who joined through a hackathon-inspired hiring approach. In an AI-driven engineering environment, curiosity, collaboration, and the ability to ask the right questions matter as much […] The post A Look at the 2026 AI Software Engineering Intern Program at
Remote access has always been a core part of how on-premises Exchange works. Users need OWA to read their email from outside the office. Their devices need Autodiscover to set themselves up automatically. Keeping both reachable means keeping Exchange accessible from the Internet, and that opens up more of the server than most organisations... The post How to secure Exchange Server beyond the CVE-2026-62911 fix appeared first on ManageEngine Blog.
At Databricks IT, our vision is to empower people to work from anywhere without putting...
Microsoft locks its most useful alerting features behind E5 licensing, but that doesn’t mean you’re stuck flying blind on Business Premium or E3. The native alert policies available on lower tiers cover more ground than most admins realize. This guide walks through what’s actually available without E5, how to configure it, and where the gaps […]