eCommerceNews India - Technology news for digital commerce decision-makers
India

AppSec Stories

Indian Stories

AppSec stories

Global Stories

AppSec stories

Looking for cyber risk in the wrong places
DevOps

Looking for cyber risk in the wrong places

Software supply chain weaknesses are becoming the main entry point for attackers as development pipelines expand without enough oversight.

By Serkan Cetin • 4 min read • 2 days ago
Mandiant warns of AI agents fuelling new attack risks
Software-as-a-Service

Mandiant warns of AI agents fuelling new attack risks

Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.

By Sean Mitchell • 3 min read • Last week
CrowdStrike links PhantomRaven malware to bug bounty hunter
Malware

CrowdStrike links PhantomRaven malware to bug bounty hunter

The stealer's use of typosquatted npm packages has raised fears that bug bounty channels are being abused to monetise stolen developer data.

By Sean Mitchell • 4 min read • Last week
Secure Code Warrior launches Citizen AI training programme
Data Protection

Secure Code Warrior launches Citizen AI training programme

With most firms using AI in daily work but few staff ready for it, the programme targets non-developers handling sensitive data and automations.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Rubrik launches Code Guardian & expands Anthropic ties
Data Protection

Rubrik launches Code Guardian & expands Anthropic ties

The private previews aim to help security teams spot exploitable code chains and connect AI agents to Rubrik's governance tools more safely.

By Joseph Gabriel Lagonsin • 4 min read • Last week
EU software makers face new cyber reporting deadlines
Data Protection

EU software makers face new cyber reporting deadlines

Companies selling software into the bloc now have 24 hours to flag exploited flaws, with fines reaching EUR €15 million for delays.

By Joseph Gabriel Lagonsin • 5 min read • Last week
Google warns cyber attackers are moving to agentic AI
Malware

Google warns cyber attackers are moving to agentic AI

Attackers are compressing intrusions into hours, leaving defenders less time to spot and stop credential-harvesting campaigns.

By Sean Mitchell • 3 min read • This month
Governance controls are crucial for AI adoption and modernisation
Data Protection

Governance controls are crucial for AI adoption and modernisation

Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.

By Anthony Caruana • 5 min read • This month
Checkmarx joins Anthropic's Project Glasswing on defence
Application Security

Checkmarx joins Anthropic's Project Glasswing on defence

The collaboration could help security teams spot flaws before attackers exploit them, as exploitations increasingly happen on or before disclosure.

By Sean Mitchell • 3 min read • This month
RevEng.AI launches binary analysis models for code
Application Security

RevEng.AI launches binary analysis models for code

Security teams could get clearer visibility into compiled software, as RevEng.AI's new models aim to spot risks without source code.

By Joseph Gabriel Lagonsin • 4 min read • This month
Cycode launches agentic code scanning & attack chaining
DevOps

Cycode launches agentic code scanning & attack chaining

Security teams could see fewer false positives and faster fixes as Cycode's new system blends rule-based checks with AI to trace attack paths.

By Joseph Gabriel Lagonsin • 4 min read • This month
JFrog launches AI-era security tools for software supply
DevOps

JFrog launches AI-era security tools for software supply

As AI coding agents speed up development, JFrog is adding controls meant to keep governance, compliance and patching from lagging.

By Sean Mitchell • 6 min read • This month
TiDB clears security review & names CISO Robert Wood
Data Protection

TiDB clears security review & names CISO Robert Wood

Independent testing found no critical, high or medium flaws in TiDB's platform as database buyers demand stronger proof of security.

By Joseph Gabriel Lagonsin • 4 min read • This month
AI closes vulnerability window as zero-day exploits surge
Network Security

AI closes vulnerability window as zero-day exploits surge

Machine-speed discovery is shrinking defenders' lead time, as AI now uncovers obscure flaws and turns them into exploits before patches land.

By Pascal Geenens • 7 min read • This month
Westcon-Comstor signs Sonar deal across EMEA & APAC
Hybrid Cloud

Westcon-Comstor signs Sonar deal across EMEA & APAC

Partners across EMEA and APAC gain a route into AI coding and DevSecOps projects as SonarQube checks aim to cut security and governance risks.

By Sean Mitchell • 4 min read • This month
AI-generated cyber attacks to hit firms soon, warn experts
Multi-factor authentication

AI-generated cyber attacks to hit firms soon, warn experts

Many firms lack the capacity to fix existing flaws fast enough, leaving them exposed as AI-generated attacks scale up, experts warn.

By Joseph Gabriel Lagonsin • 6 min read • This month

Stories from Other Regions

AppSec stories

AIR launches AI firewall with USD $50 million backing
Data Protection

AIR launches AI firewall with USD $50 million backing

Enterprises face a new runtime security gap as AI agents increasingly access internal systems, files and tools without oversight.

By Sofiah Nichole Salivio • 4 min read • This month