CISA issues alert on Kotaemon improper authorization checks
Cinnamon’s Kotaemon (all versions up to v0.12.0) improperly checks conversation ownership, letting authenticated users read, delete, rename, or overwrite others’ conversations.
535 articles published in the last 90 days, most about Cybersecurity and Data Center.
Records are individual enterprise-technology developments, captured as they happen: product launches, funding, partnerships, executive moves, vulnerabilities, and announcements across cloud infrastructure, networking, security, and AI. Looking for the synthesis? See Briefs
Decision Insights Threat Desk • September 23, 2026
Cinnamon’s Kotaemon (all versions up to v0.12.0) improperly checks conversation ownership, letting authenticated users read, delete, rename, or overwrite others’ conversations.
Decision Insights Record • September 23, 2026
Portnox added capabilities to detect unauthorized AI applications and agents on managed devices and automatically enforce policy.
Decision Insights Record • September 23, 2026
Cycode said its Workstation Protection extends ADLC Security to intercept installs and block malicious packages using cooldown policies.
Decision Insights Record • September 23, 2026
IP Fabric version 8.1 added application-aware infrastructure mapping and a redesigned cloud-native data model.
Decision Insights Threat Desk • September 22, 2026
Overview Vendor-signed UEFI Shell applications may allow an attacker to bypass Secure Boot protections by abusing commands such as mm (Memory Modify). On systems that trust the affected vendor’s
Decision Insights Record • September 22, 2026
Proofpoint said its Agentic Collaboration Security system uses intent-based detection and agentic capabilities to protect email, collaboration tools, and browser activity.
Decision Insights Record • September 22, 2026
Proofpoint described a unified agentic system linking AI intent with data access using its Knowledge Graph and three agents for detection, investigation and remediation.
Decision Insights Record • September 22, 2026
Avast’s 2026 Safe Tech Report found 56% say they’d spot AI fakes, while 52% have shared or considered sharing sensitive data with chatbots.
Decision Insights Record • September 22, 2026
Commvault named BNSF Railway CISO Alex Levy the inaugural TIME + Commvault CISO of the Year.
Decision Insights Record • September 22, 2026
Apica was named a Leader by QKS Group in the SPARK Matrix for Edge Telemetry Pipeline Platforms (Q3 2026).
Decision Insights Record • September 22, 2026
Tamnoon integrated with CrowdStrike Falcon Cloud Security to use Falcon findings in Tamnoon managed remediation workflows via the CrowdStrike Marketplace.
Decision Insights Threat Desk • September 17, 2026
Dokploy versions 0.29.8 and 0.29.11 and canary commit 24b02f5 are vulnerable to OS command injection in backups and restores.
Decision Insights Record • September 17, 2026
Crusoe announced the initial closing of a $3.9B Series F funding round at a $30.9B post-money valuation, highlighting $140B+ TCV, 6GW+ contracted capacity, and growth in Crusoe Cloud. The company
Decision Insights Record • September 17, 2026
Recorded Future said it was named a Leader in The Forrester Wave: External Threat Intelligence Service Providers, Q3 2026.
Decision Insights Record • September 17, 2026
Cyble signed an MOU with the UAE Cyber Security Council to support threat intelligence, early warning, and insights for government and critical infrastructure.
Decision Insights Record • September 17, 2026
Delinea joined Anthropic’s Project Glasswing, testing Claude Mythos 5.1 against its own code for credential and authorization security functions.
Decision Insights Record • September 16, 2026
Atos opened a Dubai-based AI-driven Security Operations Center in partnership with GCH for UAE data residency and locally operated monitoring.
Decision Insights Record • September 16, 2026
Relativity rebranded RelativityOne as Relativity aiR, consolidating its platform and agentic AI under one name.
Decision Insights Record • September 16, 2026
Stellar Cyber and ESET will integrate ESET Threat Intelligence into Stellar Cyber’s Open Threat Intelligence Platform during data ingestion.
Decision Insights Record • September 16, 2026
Hitachi Vantara set a net-zero greenhouse gas goal by FY2040, with SBTi validating its near- and long-term emissions targets.
A synthesis of what changed across the vendors, projects and technologies tracked here. Published every two weeks. Subscribing creates a free Decision Insights account.