The 22-Day Patch Gap: What Frontier AI Changes About Zero Trust
A Microsoft Defender flaw took 22 days to patch. Here's what frontier AI actually changes about that gap, and why the Zero Trust response to it hasn't changed at all.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Preventing Automated Security Decisions from Impacting Critical Events
Learn how Fastly DDoS Protection's new Challenge action prevents false positives and keeps legitimate traffic flowing during critical events.
Day 2 Wrap-Up from ALL IN 2026: Safety, the Last Mile, and Autonomy Beyond the Screen
Day 2 Wrap-Up from ALL IN 2026: Safety, the Last Mile, and Autonomy Beyond the Screen Day 1 at ALL IN 2026 gave us three themes to carry into the final day: production blockers, sovereign AI, and runtime governance. Day 2 extended each one. The conversations moved from whether enterprises can deploy AI to what responsible deployment requires when AI begins to influence public services, cross-border operations, physical equipment, and real institutional decisions. Across the sessions and conversa
Building an AI agent for smarter, less painful alert triage
Why SASE Can’t Keep Up With AI
AI agents run at the OS, identity, and browser layers, and generate more traffic. Why SASE can't govern them, and where enforcement belongs.
Getting started with runtime security and Falco
Discover how to get started with Falco to overcome the challenges of implementing runtime security for cloud-native workloads.
The answer to AI uncertainty is adaptability, not paralysis
AI uncertainty is not a strategic reason to wait; it is a strategic imperative to build adaptable organizations that can innovate confidently, govern risk proportionately, and respond effectively as technology and threats evolve.
Outcomes Over Alert Queues: Rebuilding MDR Around Speed
Coalition was recognized in “The Managed Detection And Response Services Landscape, Q3 2026” report by Forrester Research Inc.
Securing Communications in an AI-Assisted World
Christine Gadsby spoke with Decipher's Dennis Fischer about cybersecurity’s evolution, mobile communications risks, AI-driven threats, and secure government communications.
KI-Compliance nachweisen: Der OWASP GenAI Crosswalk ordnet 51 KI-Risiken 25 Regelwerken zu
KI-Compliance: Der OWASP GenAI Crosswalk ordnet 51 KI-Risiken den Controls aus 25 Regelwerken zu. ISO 42001, DORA und die EU-KI-VO decken je 41 davon ab.
AI for detection: Rule writer agent
Unit21's AI rule builder turns a plain-English pattern into a deployable rule. It asks when your prompt is vague, and it works on existing rules too.
AI for detection: Rule recommendations
Optimization Agent brings AML rule tuning down to minutes: it finds what separates true from false positives, proposes a fix, and backtests it on your data.
AI Agent Sprawl: The New Shadow IT Problem CISOs Can’t Ignore
Remember shadow IT? That familiar headache where employees signed up for cloud apps without telling anyone, and IT departments spent years playing catch-up trying to figure out what was actually running in their environments? Well, it’s back—except this time, the unsanctioned software doesn’t just store data or send emails. It takes actions on its own. […] The post AI Agent Sprawl: The New Shadow IT Problem CISOs Can’t Ignore appeared first on Plurilock.
2026 Bayes Leaks Report Video
2026 Bayes Leaks Report Video Off colby.burke Wed, 09/16/2026 - 23:08 Discover key findings and exclusive data-driven analysis in the 2026 Bayes Leaks Report, highlighting crucial security and market trends. Watch the video to gain actionable insights that will help your organization stay ahead of potential vulnerabilities and regulatory shifts. Read Time 0 Videos Watch Video Off Video Popup Content Off Exclude from the search No Two column Marketo form 0 Related Content Add date Yes Add read ti
BreachWatch™: The Trezor–ShipMonk Breach Shows Why Vendor Trust Must Be Verified
Third-party risk management has always depended on trust. Organizations trust vendors to follow the security requirements written into contracts, answer assessments accurately, and maintain the controls they say are in place. But the recent breach involving hardware wallet manufacturer Trezor and fulfillment provider ShipMonk is a reminder that trust alone is not a control. For…
Cryptography Is Negotiated: PQC Needs Network Data | Corelight
Post-quantum cryptography (PQC), and the many ways it intersects with IT and cybersecurity, is becoming increasingly important to organizations of every size. While it seemed like an esoteric concept a few years ago, relegated to cryptographers' conference talks, it’s now something that comes up in many of our customer conversations. In this blog, I’ll outline a few of the challenges around PQC and explain how network visibility provides a distinct advantage when it comes to identifying and migr
Rogue Agents Escaped. Now Washington's Asking Who, How, and... Huh?
New disclosures have transformed agent failures into a public trust, corporate accountability crisis
Die überprüfbare Produktgeschichte
Ein neuer Artikel auf textile-network zeigt anhand unseres gemeinsamen Projekts mit JUNKLE, wie das schon heute in der Praxis aussehen kann: Von wiederverwendeten Segeln zur Tasche macht der DPP Herkunft, Materialien und Verarbeitung digital nachvollziehbar.
Top Qodo Alternatives for AI-Powered Code Assistance
The best Qodo alternatives for AI code review in 2026, compared across noise, security, and cost, so you can pick the tool that fits your team. Category: DevSec Tools & Comparisons
MITRE ATT&CK Use Cases in 2026: A Security Team Guide
The post MITRE ATT&CK Use Cases in 2026: A Security Team Guide appeared first on Acalvio.
MCP Security & AI Agent Identity Governance Guide
Master MCP security: understand Model Context Protocol risks, non-human identity governance, prompt injection vectors, and enterprise controls.
CSPM vs SSPM vs AISPM: Security Posture Guide (2026)
Compare CSPM, SSPM, and AISPM: architectural differences, key blind spots, and how an identity control plane unifies cloud, SaaS, and AI posture security.
Unmasking ShadowParasite: The Invisible Cyber Fraud Network Hijacking Everyday Payments
Reading Time: 10 minsAn investigation by Lumu CTI exposes a Colombian payment fraud network using fake payment portals to hijack everyday utility bills and harvest banking credentials. The post Unmasking ShadowParasite: The Invisible Cyber Fraud Network Hijacking Everyday Payments appeared first on Lumu Technologies.
The OAuth Supply Chain: How AI Agents Exploit SaaS Trust
Understand how autonomous AI agents and delegated OAuth tokens turn trusted third-party SaaS integrations into persistent enterprise attack vectors.
CAPTCHA Was Built to Stop Bots. Attackers Are Using It to Stop Security Tools.
CAPTCHA was designed to keep automated traffic out of legitimate websites. Attackers have flipped that model. Across phishing and scam infrastructure, challenge pages are increasingly used to keep automated security scanners from seeing what sits behind them. Put a CAPTCHA in front of a credential-harvesting page and a scanner may record the challenge instead of […] The post CAPTCHA Was Built to Stop Bots. Attackers Are Using It to Stop Security Tools. appeared first on Bolster AI.
Elevated Export Control Diversion Risks
China’s revised National Defense Mobilization Law increases diversion and transshipment risk by drawing civilian organizations more deeply into defense mobilization. Exiger helps companies validate ultimate end users and beneficial ownership, monitor third-country routes and identify transactions that may support strategic stockpiling or military production. The post Elevated Export Control Diversion Risks appeared first on Exiger.
Windows 11 KB5124008 update breaks domain trust for some users
Microsoft is investigating reports that the Windows 11 KB5124008 security update is breaking domain trust relationships on some enterprise systems, preventing users from logging in with valid domain credentials. [...]
Enterprise at Scale: MCP’s Emerging Identity and Governance Foundation
4 min readWhat Enterprise Problems Must MCP Deployments Address? Run an agent-heavy workflow inside a real organization, and you immediately hit questions that per-user, per-tool authorization fails to address: At their core, these are infrastructure challenges that MCP deployments must address, even when the protocol does not solve them directly. The 2026-07-28 specification and stable Enterprise-Managed Authorization […] The post Enterprise at Scale: MCP’s Emerging Identity and Governanc
Switching Existing Software Vendors Overwhelmingly Drives Increased Satisfaction
Discover why 80% of organizations report increased satisfaction after switching vendors. Get Info-Tech's five-step methodology to build your business case while reducing switching costs. The post Switching Existing Software Vendors Overwhelmingly Drives Increased Satisfaction appeared first on Onspring.
The Modern AI Security Triad
In recent months, frontier model providers documented multiple security incidents where AI agents operating in isolated environments unexpectedly accessed production systems. Just yesterday, The New York Times reported six newly disclosed cases of OpenAI models concealing errors, fabricating data, and taking unauthorized actions. Anthropic has disclosed several instances attributed to 'misalignment' (such as recklessness or biased reasoning) rather than external attacks or stolen credential
What your IT logs can tell you about security
IT and NOC teams handle large volumes of logs every day: server logs, network logs, application logs, and cloud logs. Most of the time, this data is used to monitor uptime and performance.But the same log data can also tell you a lot about your security. It can show who accessed a system, from where, and when, and whether that access looked normal.... The post What your IT logs can tell you about security appeared first on ManageEngine Blog.
Digital Workforce Careers: Building Resilient Digital Teams
Digital workforce protection is a professional discipline focused on reducing personal attack surfaces across employee and executive populations before adversaries exploit exposed data. Most practitioners in this field didn’t follow a straight line to get here. They arrived through threat intelligence, privacy law, compliance consulting, or investigative work, and hiring managers treat that as a signal, not a gap. The field has no standard academic pipeline, and that gap creates real oppor
Independent verification of data-removal efficacy: Priwall by mePrism's AICPA AT-C 215 practitioner report
By Tom Daly, founder and CEO, Priwall by mePrism · Published September 16, 2026 · Last reviewed September 16, 2026 Ongoing measurement We intend to refresh this measurement annually as our enterprise dataset and broker coverage mature. The full methodology, engagement scope, and signed Sensiba LLP practitioner report are now available. Review the methodology and read the report for the procedures performed, factual findings, and limitations. TL;DR Key findings 01 Independent practitioner report.
TfL made 28,000 employees show up in person to reset a password
When TfL's network was compromised, the way out was 28,000 employees showing up at an office in person. ATO Protect Account Recovery+ for Entra ID is that same identity check, done remotely. The post TfL made 28,000 employees show up in person to reset a password appeared first on Trusona.
Remote Desktop
Firewall Configuration
The Apple Security Update Review for September 2026
Welcome back to our monthly look at Apple security patches. This release shows Apple is not immune to the new normal of AI-assisted vulnerability discovery as they release patches for 273 total CVEs.For the September 2026 release, Apple released 273 unique CVEs across macOS 27 (Golden Gate), macOS Sequoia 15.8, macOS Tahoe 26.7, iOS / iPadOS 27, visionOS 27, watchOS 27, tvOS 27, iOS / iPadOS 26.7, Safari 27, and Xcode 27. This patch release actually happened a couple of days ago, but since Apple
From Encrypted to Provable: The New Standard for Secure Communication
An executive insight brief for audit, governance, and data protection leaders in regulated industries. The through-line: consistent control, audit-ready evidence, and operational resilience — provable message by message, every jurisdiction,… The post From Encrypted to Provable: The New Standard for Secure Communication appeared first on Echoworx Email Encryption.
Region: United Kingdom
LinkedIn fights for the right to tell customers when the feds want their data
Microsoft’s top lawyer argued Tuesday that legislators “must make secrecy [orders] the exception” in government subpoenas demanding information about LinkedIn users. LinkedIn, which is owned by Microsoft, is fighting what it calls overly broad subpoena demands from the US government, which sometimes come with secrecy orders that prevent LinkedIn from alerting customers whose information is being requested. The company is asking federal courts “to enforce meaningful limits on both the scope of go