Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

25,326 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Mantax Otax: Indonesian Mobile Ransomware with Spyware Integration

Executive Summary The zLabs research team has discovered a sophisticated and highly aggressive mobile malware strain linked to Indonesian threat actors, that marks a dangerous tactical evolution by seamlessly integrating comprehensive spyware capabilities with traditional ransomware functionality into a single attack vector. This hybrid threat systematically compromises user privacy through an intrusive suite of surveillance features, which includes recording device screens in real-time, extract

New capability

Introducing the CyberAgents Exchange AI Inspector: Rigorous review for community-built AI

Open-source registries for AI agents are only effective when they include a rigorous, transparent security review process for community submissions. That’s why for its new CyberAgents Exchange registry, Tenable paired its exposure management expertise with OpenAI GPT Cyber models to create the CyberAgents Exchange AI Inspector.Key takeawaysThe Exchange Inspector combines Tenable’s exposure detection with OpenAI’s GPT Cyber models and with human oversight to rigorously vet submissions made to the

Announcement

AI Is Changing the Build-Versus-Buy Decision

My family wanted an application to help us coordinate work around the house. We wanted a reward system, family goals, calendar information and some meal-planning capability. Maybe my daughter earns enough points to choose the movie. Maybe we all hit a goal and go to the lake. There were products that solved pieces of the problem. I could not find one that fit the way we wanted everything to work. To be honest, I also did not want to pay for several tools and still end up with a pa

Announcement

Folding RUM Into Incident Response

We built real user monitoring into our existing product, so a slow page load and the backend request behind it land together as a single thing to investigate.

Announcement

WISeKey and its Subsidiaries, SEALSQ and WISeSat, Present Commercial Quantum Spatial Orbital Cloud (QSOC) at the International Space Summit in Paris

WISeKey and its Subsidiaries, SEALSQ and WISeSat, Present Commercial Quantum Spatial Orbital Cloud (QSOC) at the International Space Summit in Paris QSOC aims to establish a secure, sovereign orbital infrastructure combining post-quantum semiconductors, quantum-generated trust and satellite connectivity. Geneva, Switzerland, Sept 9, 2026 — WISeKey International Holding Ltd (SIX: WIHN; NASDAQ: WKEY), a global leader […]

Announcement

How to Investigate a Compromised Privileged Account: A Step-by-Step Guide

A single compromised privileged account can provide access to your critical systems, sensitive data, and security controls. With elevated permissions, an attacker can change system configurations, access other credentials, disable security controls, and move further across your environment.  Drawing on our experience with privileged access security in combination with incident response guidance from NIST and […]

Announcement

LDAP and Active Directory authorization without changing the application

LDAP and Active Directory groups encode the access rules for applications nobody will fund a rewrite for. Covers resolving those groups at the proxy in front of the application, turning them into an input to policy rather than the access model itself, cache staleness, and where boundary enforcement stops.

Announcement

What Agentic AI Could Do for Enterprise Incident Response Workflows

Agentic AI in incident response means AI systems that can independently triage alerts, pull forensic evidence, and recommend or take containment action, rather than just flagging anomalies for a human to investigate. For Indian enterprises, this matters less as a buzzword and more as a math problem: CERT-In gives you six hours to report a […] The post What Agentic AI Could Do for Enterprise Incident Response Workflows appeared first on Innefu Labs.

Announcement

Unstructured Data Governance Best Practices for Security and Compliance Teams

How Unstructured Data Governance Best Practices for Security and Compliance Teams Enterprise files accumulate across file servers, NAS systems, M365, cloud storage, and hybrid environments. Over time, sensitive information can become excessively exposed, misplaced, outdated, or difficult to track. Effective unstructured data governance best practices help security, compliance, and infrastructure teams reduce these [...] The post Unstructured Data Governance Best Practices for Security and Compli

Announcement

7 AI Automation Strategies from Continuum GRC for GRC Compliance

AI Automation is transforming GRC compliance assessments by enabling organizations to move beyond periodic manual reviews toward continuous, intelligent oversight. Continuum GRC has identified seven targeted strategies that integrate AI Automation directly into GRC workflows, helping CISOs and compliance officers meet requirements under frameworks such as NIST SP 800-171 Rev 3, CMMC 2.0, ISO 27001:2022, […] The post 7 AI Automation Strategies from Continuum GRC for GRC Compliance appeared

Announcement

SOC 2 + AI Controls: Lazarus Alliance Governance Audits

In 2026, organizations integrating AI and machine learning into core operations face a critical gap: standard SOC 2 reports no longer suffice for demonstrating control effectiveness over autonomous systems. Lazarus Alliance governance audits address this by extending SOC 2 Trust Services Criteria with AI-specific control layers that map directly to NIST 800-53, ISO 27001, and […] The post SOC 2 + AI Controls: Lazarus Alliance Governance Audits appeared first on Lazarus Alliance, Inc..

Announcement

How to Justify Paid DDoS Testing When You Have Never Been Attacked

To justify paid DDoS testing without a past outage, frame it as quality assurance on protection you have already bought – not as a second protection purchase. The business case rests on what a contract, a configuration, and a provider dashboard cannot show: whether every asset is routed through the mitigation path, and whether real […]

Announcement

Cybersecurity in construction – how companies systematically reduce their risks

The construction industry is more digital and interconnected than ever before. Cloud platforms, Internet of things (IoT) devices, building information modelling (BIM), and mobile collaboration speed up planning, execution, and construction logistics. At the same time, new dependencies on digital supply chains, external service providers, and shared platforms are being created. Cybersecurity thus becomes a management responsibility: Construction companies must not only protect individual IT syste

Announcement

How to Prove DDoS Defences to a Regulator

To prove DDoS defences to a regulator, show how they perform – not simply what was purchased or configured. Credible evidence connects each critical service to a documented risk, protection control, realistic test scenario, and measured outcome, then records any failure, its owner and remediation, and whether controlled retesting verified that the gap was closed. […]

New capability

Built for Agents, Better Outcomes for Humans: Introducing Qodo’s Agentic Toolbox

Today, Qodo is excited to release our new Agentic Toolbox, a packaged set of tools and skills that brings Qodo’s Context Engine, independent review, and governance capabilities directly into coding agent workflows. The Agentic Toolbox equips coding agents with ready-made tools and skills for understanding the systems they change and bringing quality into every stage […] The post Built for Agents, Better Outcomes for Humans: Introducing Qodo’s Agentic Toolbox appeared first on Qodo.

New capability

Introducing Qodo for Codex: Quality Built Into the Agentic Workflow

In OpenAI’s Codex, a change can move from plan to implementation to passing tests in a single session. That workflow becomes even more valuable when quality is built into it from the start, with the agent drawing on what your organization already knows and its work reviewed independently. Qodo is bringing both to Codex through […] The post Introducing Qodo for Codex: Quality Built Into the Agentic Workflow appeared first on Qodo.

Announcement

Your SBOM Program May Already Be a CIS Controls Program

  What a recent customer conversation taught us about turning software supply-chain transparency into operational security controls In a recent conversation with a multinational industrial manufacturing company, we were demonstrating what we normally think of as software supply-chain operations.

Announcement

Deepfake Fraud and the Collapse of Verification

Deepfake-enabled fraud losses reached $3.7 billion through mid-2026, with 89% of that damage recorded in the past 18 months. Three seconds of audio is enough to clone a voice. In January 2026, the Bombay Stock Exchange issued an urgent public warning: deepfake videos of its CEO were circulating online, promoting fraudulent stock tips and promising […] The post Deepfake Fraud and the Collapse of Verification appeared first on Allure Security.

Announcement

Regulatory Change Management: Build Once, Map Many

Regulations change. Your security framework should not need rebuilding each time. Learn how reusable controls, compliance mapping and traceability help CISOs identify what actually needs to change. The post Regulatory Change Management: Build Once, Map Many appeared first on CISOteria.

Announcement

Why every home should have a guest Wi‑Fi network for better security

When friends, family members, contractors, or delivery technicians visit your home, someone will eventually ask for your Wi‑Fi password. While sharing your primary network may seem harmless, it’s not the safest option. A better alternative is creating a guest Wi‑Fi network. Most modern routers support this feature, and it helps protect your devices by separating […] The post Why every home should have a guest Wi‑Fi network for better security first appeared on Total Defense.