Vendor news

Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.

25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.

Announcement

Tokenomics Begins Upstream

Waymo does not put Gemini in the real time driving path. It uses an encoder for perception and control, and reserves the reasoning model for the rare and semantically strange. The AI SOC has the same shape. An encoder only foundation model running next to the data lake or pipeline forwards roughly thirty percent of volume to the SIEM, and an agent harness that assigns a model per task handles what follows. Seventy percent less ingestion, and more than eighty percent less work reaching people.

Announcement

Weekly Briefing - 31-08-2026

Corgea's weekly briefing for 28-31 August 2026 covers the compromised `@7nohe/openapi-react-query-codegen` release workflow, the KEV-listed Linux UDPv6 `fraggap` container-escape path in `CVE-2026-53362`, and why the rest of the weekend's reporting mostly added depth to those same two incidents.

Announcement

GreyNoise + CrowdStrike: Real-Time Edge Intelligence in Falcon Next-Gen SIEM and Charlotte Agentic SOAR

Today we’re announcing an expanded integration between GreyNoise and the CrowdStrike Falcon® platform, with new content for CrowdStrike Falcon® Next-Gen SIEM and CrowdStrike Charlotte Agentic SOAR. The expanded integration includes a purpose-built Falcon Next-Gen SIEM dashboard, correlation rules that detect allowed inbound traffic from malicious infrastructure, and SOAR playbooks that bring GreyNoise threat context into automated response workflows.

Announcement

The Harness Is Where Agents Act

Model guardrails aren't enough. AI agent risk concentrates in the harness—where visibility and runtime control must govern prompt-to-action work.

Announcement

Research Worth Reading - Week 35, 2026

Ruby, escapes and good memories... 💎 Ruby Marshal Kick-off Gadgets - elttam 👍 0 Luke Jahnke is back at it. Two weeks after publishing a universal Ruby 4.0 deserialization chain, he questioned whether removing explicit callbacks and RubyGems gadgets would eventually exhaust the attack surface.Luke found six methods that Marshal.load invokes implicitly, including hash, eql?, and to_s. These calls emerge from rebuilding ordinary Ruby objects, making them difficult to remove without changin

Announcement

How to Participate in Threat Intelligence Sharing (ISACs) Without Exposing Sensitive Data

The open letter on collective cyber defense puts information sharing at the center of its proposal, for cybersecurity companies, governments, and frontier AI companies alike: “Share threat intelligence and tested playbooks… share tools, playbooks, and credible threat assessments with governments, security partners, and open-source maintainers.” The most common objection we hear from security teams when […] The post How to Participate in Threat Intelligence Sharing (ISACs)

Announcement

Agentic Identity Traceability: An Implementation Guide

One of the most technically specific points in the open letter on collective cyber defense is this one: “Build observability and security tools, ensure agentic identities are traceable and accountable, and share best practices in continuous monitoring.” It’s a relatively new problem for most security teams: this isn’t about auditing what a human user or […] The post Agentic Identity Traceability: An Implementation Guide appeared first on Faraday.

Announcement

How to Review AI-Generated Code With the Same Rigor as Human Code

The open letter on collective cyber defense includes a line that many development teams still haven’t translated into concrete process: “Raise the security bar for what you buy, build, and deploy, including AI-generated code.” The problem isn’t that AI-generated code is inherently less secure than human-written code — many studies show comparable vulnerability rates. The […] The post How to Review AI-Generated Code With the Same Rigor as Human Code appeared first on

Announcement

Digital Product Passport and JTC24: Why Standards Determine Future-Proofing

Behind every Digital Product Passport sits a foundation that is not yet fully finished: the technical standards currently being developed by CEN/CLC JTC24, the joint committee of CEN and CENELEC. Until these standards are finalized, part of the technical detail behind the DPP remains in flux. Companies that build on open, cross-sector standards now reduce the risk of having to rebuild their systems later.

Announcement

Wie der digitale Produktpass die Metallindustrie verändert: ESPR-Compliance und Kreislaufwirtschaft

Stahl und Aluminium gehören zu den Produktgruppen, für die im Rahmen der ESPR künftige delegierte Rechtsakte vorgesehen sind. Ein fixer Zeitplan steht dafür noch nicht fest. Parallel treibt der Critical Raw Materials Act die Nachvollziehbarkeit von Rohstoffen voran. Für die Metallindustrie bedeutet das zwei sich ergänzende Regulierungslinien, die auf denselben Grundsatz hinauslaufen: nachvollziehbare, verifizierbare Produktdaten über den gesamten Lebenszyklus.

Announcement

How the Digital Product Passport Will Transform the Metals Industry: ESPR Compliance and Circularity

Steel and aluminium are named among the product groups for which future delegated acts under the ESPR are planned, though no fixed timeline exists yet. In parallel, the Critical Raw Materials Act is advancing traceability for raw materials. For the metals industry, these are two complementary regulatory tracks pointing toward the same principle: traceable, verifiable product data across the full lifecycle.

Announcement

Behavioral Risk Brief: Crypto Stealing Chrome Extension

The Claim Governance frameworks that treat an extension’s installation history and prior clean behavior as ongoing proof of safety create systemic risk when that same history can be inherited by a new owner or preserved deliberately before a compromise. Zero Trust for Code addresses this by requiring a pre-execution trust decision on what an extension […]

Announcement

11 best anti-phishing solutions and software in 2026

Learn everything you need to know about the best anti-phishing solutions and software on the market to give your business the protection it needs. The post 11 best anti-phishing solutions and software in 2026 first appeared on Valimail.

Announcement

Daily OT Security News: August 30, 2026

The latest IoT, OT, CPS, and ICS cybersecurity news, vulnerabilities, and key takeaways for August 30, 2026. The post Daily OT Security News: August 30, 2026 appeared first on Viakoo, Inc.

Announcement

Non-Human Identity on Linux

What Is a Non-Human Identity on Linux? A non-human identity on Linux is any account, key, or credential that authenticates to a system without a person behind it — a service account that runs a daemon, an SSH key that lets one host reach another, an API token a script uses to call a controller. It is the machine equivalent of a user, and on a modern Linux estate there are far more of them than there are people. The scale is easy to underestimate. Palo Alto Networks' 2026 Identity Security Land

Announcement

AI Fraud Prevention: Tools and Best Practices

The tool categories in an AI fraud prevention stack, what the payment layer can and cannot decide, and five practices for the stages where AI-enabled fraud is built.

Announcement

Personal device attacks against healthcare staff in 2026

According to the FBI in its2025 IC3 Annual Report, the healthcare industry ranked as the top targeted sector for cyber threats in 2025, with 460 known ransomware attacks and 182 data breaches. Cybercriminals target healthcare because patients’ PHI is central to proper patient care. A single compromise can cause a long list of issues for a healthcare organization, and unfortunately, the healthcare industry has numerous threat vectors prime for an attack, such as personal devices.

New capability

Introducing SILENTCHAIN Professional: Verified AI Findings for Burp Suite

SILENTCHAIN Professional is now available at $199/seat/year. The advanced AI Burp Suite extension adds Phase 2 active verification, WAF detection, out-of-band testing, 200+ curated payloads, HTML advisory reports, and 10 AI providers. The post Introducing SILENTCHAIN Professional: Verified AI Findings for Burp Suite first appeared on Sn1perSecurity.