AppSec stories
Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.
Security teams face a wider gap as enterprise AI moves into production, with data governance and runtime controls often managed separately.
Enterprises in Southeast Asia will get tighter control over software and AI assets as iZeno begins distributing JFrog’s security tools immediately.
As AI moves into production, enterprises face gaps between data governance and runtime controls that can expose sensitive information and policy breaches.
Security teams will gain visibility into AI agents in production, with new runtime controls aimed at spotting misuse, shadow AI and compromise paths.
Enterprises could spot compromised maintainers sooner, as the new tool maps open-source contributors, dependencies and policy breaches across builds.
Security teams now have a beta tool to probe large language model apps for prompt injection, jailbreaks and data theft before attackers do.
Sonatype says smaller AI tied to live software data can outsecure larger models on dependency upgrades, slashing risk and cost.
NSS Labs warns many enterprise AI guardrails fail basic security tests, urging independent, real-world validation of protections.
Red Hat reports 97% of organisations suffered cloud-native security incidents last year, exposing basic failings in configuration and governance.
Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.
Veracode unveils an AI-driven tool that automatically fixes open-source vulnerabilities, tackling mounting security debt in software supply chains.
UiPath is pushing AI deeper into software testing, promising autonomous agents that transform quality assurance and developers' roles.
Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.
Growing demand for earlier code security has prompted Distology to add Snyk’s application and AI tools to its UK, DACH and Benelux channel offer.
Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.
Australian organisations face fresh risk of cloud and identity compromise as the cyber watchdog reissues its alert on repository attacks.
The funding will help Qodo expand globally as enterprises look for ways to verify AI-written code before it reaches production systems.
Adoption among big enterprises has helped the cybersecurity start-up secure USD $28 million, as it expands tools for AI-driven software development.
Netacea has unveiled Trust Layer, a server-side tool to classify and control surging AI agent and bot traffic before it hits apps.
