Online payment fraud prevention: a practical guide for 2026
A practical guide to online payment fraud prevention: the main fraud types, the prevention layers that stop them, and where device evidence at checkout fits.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
25,327 matching stories — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
9 best new account fraud prevention tools in 2026, ranked
The 9 best new account fraud prevention tools for 2026, ranked, with cside first for device intelligence at signup that catches fraud before the account exists.
9 best Kount alternatives and competitors in 2026, ranked
Looking for a Kount alternative? Compare the 9 best fraud-prevention platforms for 2026, ranked, with cside first for device intelligence and chargeback proof.
Auth0 Enterprise Connect in beta vs. WorkOS for enterprise SSO and SCIM
Auth0's beta keeps the authorization server you already run and adds the enterprise surface around it. The differences from WorkOS show up in SCIM direction, plan tier, and which pricing table you are actually reading.
How to add enterprise SSO to an Express.js API
Add enterprise SSO (SAML and OIDC) to an Express.js API with WorkOS. Step-by-step Node.js code for the login redirect, the callback, and JWT verification on protected API routes.
Zero Trust Data Security in 2026: The Standards Map
Nine documents govern zero trust data security in 2026, and each settles a different question. This is the map of which standard answers what, and the one question none of them answers for you.
The MCP 2026-07-28 Spec Hardens the Token. The Action Still Needs a Decision.
The 2026-07-28 Model Context Protocol specification closes real credential-layer gaps with RFC 9207 issuer validation and issuer-bound client credentials. It answers which client is calling. It does not answer whether this action on this object is permitted.
AI Agents Need Authorization Decisions, Not Guardrails
Prompt filters and output classifiers steer a model. They do not authorize anything. An AI action request is an access request, and it belongs at a policy decision point that returns a signed allow or deny with the reasons attached.
Introducing Slack Code: Letting Your Coding Agent Delete a Production Database Even Faster
Slack just made your coding agents more powerful. That is also the problem. Four major AI coding agents now live natively inside your Slack workspace: Claude Code from Anthropic, Codex from OpenAI, Cursor, and GitHub Copilot. @mention any of them in a channel, and they get to work. They read your conversation history, your canvases, your connected developer tools. Then they push commits, investigate bugs, open pull requests, and trigger deployments. Slack calls this “multiplayer coding.” Agents
Contextualize: Turning data into understandable operational information
Learn how industrial data contextualization turns connected data into trusted, governed information that people, applications and AI agents can act on.
Control trace volume with OpenTelemetry tail-based sampling
Learn how to configure tail-based sampling in the OpenTelemetry Collector to drop noisy traces, keep the ones that matter, and control APM costs.
How SLED can win the cybersecurity race with agentic AI
AI-accelerated attacks are outpacing SLED security teams. Learn how state, local, and education organizations are closing the gap by fixing their data foundation first.
How to Achieve Cheaper, Faster and Accurate Pentests
Cheaper, faster and accurate pentests were never a real tradeoff. Context removes it: one graph of assets, code and cloud that every engagement reads from and writes back to.
The Line Between Defense and Offense Just Moved. Here’s What Comes Next.
For four decades, U.S. law drew a hard line around private-sector cybersecurity. Companies could detect, respond to, and report attacks. They could not fight back. On Wednesday, August 12, 2026, that line moved. President Trump signed a National Security Presidential Memorandum (NSPM) directing the Department of Justice (DOJ) and the Department of Homeland Security (DHS) ... The Line Between Defense and Offense Just Moved. Here’s What Comes Next.
Your AI Agent Has New Skills. Can You Trust Them?
Segmenting visibility with DNS Views for tighter network access control
Most organizations experience a strange DNS problem at some point: The same domain name means something different depending on who's asking for it. For example, a single internal app, workspace.company.com, might need to serve a locked-down instance to finance, a live staging build to engineering, and a stable production build to support — all... The post Segmenting visibility with DNS Views for tighter network access control appeared first on ManageEngine Blog.
Secure AgentCore Agents Without Locking Them Down
Teams are shipping production AI agents on Amazon Bedrock AgentCore. Adding defense-in-depth to secure what those agents send and receive requires inline, real-time content inspection and policy enforcement on the network path. The post Secure AgentCore Agents Without Locking Them Down appeared first on Aurascape, Inc..
Inbound Private Link now supports account-level Genie One, the account console, and custom URLs
Enterprises adopting Databricks for their most sensitive data commonly rely on Inbound...
Bad Grammar is Dead. Tone Matching is the New Payload
Generative AI has eliminated typos in phishing. Discover how attackers weaponize LLMs for perfect tone matching, and how Doppel stops them at machine speed.
Careers
Genomics Testing Lab Notifies Nearly 310,000 of Hack
Baylor Genetics Among the Latest Medical Labs, Bio-Tech Firms Attacked The post Genomics Testing Lab Notifies Nearly 310,000 of Hack appeared first on Clearwater.
Migrate VMware to Proxmox: A Technical Guide for Conversion, Cutover, and Continuity
Neither networking nor storage carries over on its own. Both need a decision to be made before the first VM converts, because a VM that lands on Proxmox VE with the wrong bridge or an unplanned storage backend has to be reworked rather than adjusted. The post Migrate VMware to Proxmox: A Technical Guide for Conversion, Cutover, and Continuity appeared first on Veeam Software Official Blog.
What are the limitations of security ratings?
Security ratings help compare supplier posture, but miss customer-specific exposure, hidden dependencies and relationship context.
CVE-2026-19478 | GitLab CE/EE GraphQL Directive Code Injection Vulnerability
CVE-2026-19478 is a critical GitLab GraphQL code injection vulnerability that can allow unauthenticated attackers to modify or delete public projects and user data.
Security Bulletin: Citrix NetScaler ADC & NetScaler Gateway Authentication Bypass
About: CVE-2026-19490 is a critical authentication bypass vulnerability affecting Citrix NetScaler ADC and NetScaler Gateway deployments configured for Gateway or AAA services. The flaw could allow a remote attacker to bypass authentication without valid credentials, potentially gaining unauthorized access to affected appliances. While no active exploitation has been reported, organizations should treat remediation as a priority due to the severity of the vulnerability and the prevalence of NetS
The Creator Economy Hijack: How Adversaries Exploit Clout to Bypass Enterprise Defenses
It’s 8:47 a.m. when the first Slack message lands: “Is this really our CEO’s LinkedIn?” A screenshot follows. Same headshot, same job title, same connection count built up over a decade. The only difference is a single character swapped in the profile URL, and a pinned post announcing an “employee investment pool” with a link […] The post The Creator Economy Hijack: How Adversaries Exploit Clout to Bypass Enterprise Defenses appeared first on Bolster AI.
SynkLoader: when you throw in everything but the kitchen sink
Discover a new malware family, SynkLoader. See how we reverse-engineered its phishing tactics to expose its attack chain.
Q+A – Rich Olsen, Senior Project Manager
I have far exceeded any personal or professional goal I ever set for myself. Being one of 9 growing up in inner-city Detroit...I never imagined being where I am today
Updated Response to CISA Advisory (AA25-071A): #StopRansomware: Medusa Ransomware
AttackIQ has released an updated assessment in response to the recent revision of CISA Advisory AA25-071A, dated August 18, 2026, which details new behaviors exhibited by Medusa Ransomware. The post Updated Response to CISA Advisory (AA25-071A): #StopRansomware: Medusa Ransomware appeared first on AttackIQ.
Operational Risk Taxonomy: A Practical Classification Model
Two risk teams can look at the same vendor incident and log it under completely different categories, one calling it a cyber event and the other a third-party failure, and both would be defensible without a shared taxonomy to settle the question. That inconsistency is a real cost, and it is the reason risk aggregation reports across business units so often fail to add up to a coherent picture.
DataBahn Competitor: Is Realm a Better Alternative for Your SOC?
Realm is a DataBahn competitor built for the SOC: it reads your live detections, protects the fields they need, and proves coverage held. See the side-by-side. The post DataBahn Competitor: Is Realm a Better Alternative for Your SOC? appeared first on Realm Security.
Financial Confidence Is Built Before the Numbers
Most people assume Finance is just there to handle the forecast. But really, our job is much bigger: we’re here to help everyone understand what those numbers are actually trying to tell us about our business. Long before a budget gets signed or a forecast hits the CEO’s desk, [...]
Financial Confidence Is Built Before the Numbers
Most people assume Finance is just there to handle the forecast. But really, our job is much bigger: we’re here to help everyone understand what those numbers are actually trying to tell us about our business. Long before a budget gets signed or a forecast hits the CEO’s desk, [...]
Face Recognition vs. Facial Authentication 101
TLDR Face recognition identifies unknown individuals by searching databases without their knowledge or consent, while facial authentication verifies willing users who actively participate in the process with explicit consent and liveness detection. Conflating the two leads to... The post Face Recognition vs. Facial Authentication 101 appeared first on Daon.
The LiteLLM Breach’s Real Scale Just Surfaced, and It’s an AI Governance Wake-Up Call
TL;DR: A poisoned AI gateway package from March 2026 just resurfaced last week as something much bigger. Researchers at Hudson Rock and CloudSEK independently confirmed a 153GB archive of stolen credentials tied to thousands of companies, including AWS, Cisco, Salesforce, and Deloitte. The scale wasn’t visible until now, and it’s a case study in why […] The post The LiteLLM Breach’s Real Scale Just Surfaced, and It’s an AI Governance Wake-Up Call appeared first on L
The LiteLLM Breach’s Real Scale Just Surfaced, and It’s an AI Governance Wake-Up Call
TL;DR: A poisoned AI gateway package from March 2026 just resurfaced last week as something much bigger. Researchers at Hudson Rock and CloudSEK independently confirmed a 153GB archive of stolen credentials tied to thousands of companies, including AWS, Cisco, Salesforce, and Deloitte. The scale wasn’t visible until now, and it’s a case study in why […] The post The LiteLLM Breach’s Real Scale Just Surfaced, and It’s an AI Governance Wake-Up Call appeared first on L
Threat Hunting for Microsoft Hyper-V
Threat Hunting for Microsoft Hyper-Vdon.jennings@h… Thu, 08/20/2026 - 16:14 August 20, 2026 Built for the Estates That Can't Afford a Compliance Gap or a Ransomware Recovery Gap Image Meta description Security team monitoring ransomware threats and recovery readiness across a regulated Microsoft Hyper-V environment. Platform R-Cloud Public sector agencies, defense contractors, healthcare systems, and financial institutions standardize on Hyper-V for a reason that has nothing to do with con
Threat Hunting for Microsoft Hyper-V: Built for the Estates That Can't Afford a Compliance Gap or a Ransomware Recovery Gap
Threat Hunting for Microsoft Hyper-V: Built for the Estates That Can't Afford a Compliance Gap or a Ransomware Recovery Gap don.jennings@h… Thu, 08/20/2026 - 16:14 August 20, 2026 Image Meta description Security team monitoring ransomware threats and recovery readiness across a regulated Microsoft Hyper-V environment. Platform R-Cloud Public sector agencies, defense contractors, healthcare systems, and financial institutions standardize on Hyper-V for a reason that has nothing to do with co
How to Secure Classified Information Sharing Between Government Departments
Government departments handle some of the most sensitive information imaginable—intelligence reports, defence assessments, diplomatic communications, and critical infrastructure data. When these agencies need to collaborate and share classified materials, they face a fundamental challenge: how to maintain the highest security standards whilst enabling essential inter-departmental cooperation. Traditional approaches to securing classified information sharing often rely Read more...
Intelligence Insights: August 2026
Debuts, departures, and danger on the blockchain in this month’s edition of Intelligence Insights.