CFOtech US - Technology news for CFOs & financial decision-makers
United States

AppSec Stories

American Stories

AppSec stories

BreachLock launches Breach360 autonomous pen testing
Network Security

BreachLock launches Breach360 autonomous pen testing

Security teams gain a single workflow to validate real exploit paths as BreachLock folds autonomous testing into its wider platform.

By Sofiah Nichole Salivio • 4 min read • Last month

Global Stories

AppSec stories

Governance controls are crucial for AI adoption and modernisation
Data Protection

Governance controls are crucial for AI adoption and modernisation

Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.

By Anthony Caruana • 5 min read • 2 days ago
Checkmarx joins Anthropic's Project Glasswing on defence
Application Security

Checkmarx joins Anthropic's Project Glasswing on defence

The collaboration could help security teams spot flaws before attackers exploit them, as exploitations increasingly happen on or before disclosure.

By Sean Mitchell • 3 min read • 4 days ago
RevEng.AI launches binary analysis models for code
Application Security

RevEng.AI launches binary analysis models for code

Security teams could get clearer visibility into compiled software, as RevEng.AI's new models aim to spot risks without source code.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Cycode launches agentic code scanning & attack chaining
DevOps

Cycode launches agentic code scanning & attack chaining

Security teams could see fewer false positives and faster fixes as Cycode's new system blends rule-based checks with AI to trace attack paths.

By Joseph Gabriel Lagonsin • 4 min read • Last week
JFrog launches AI-era security tools for software supply
DevOps

JFrog launches AI-era security tools for software supply

As AI coding agents speed up development, JFrog is adding controls meant to keep governance, compliance and patching from lagging.

By Sean Mitchell • 6 min read • Last week
TiDB clears security review & names CISO Robert Wood
Data Protection

TiDB clears security review & names CISO Robert Wood

Independent testing found no critical, high or medium flaws in TiDB's platform as database buyers demand stronger proof of security.

By Joseph Gabriel Lagonsin • 4 min read • Last week
AI closes vulnerability window as zero-day exploits surge
Network Security

AI closes vulnerability window as zero-day exploits surge

Machine-speed discovery is shrinking defenders' lead time, as AI now uncovers obscure flaws and turns them into exploits before patches land.

By Pascal Geenens • 7 min read • Last week
Westcon-Comstor signs Sonar deal across EMEA & APAC
Hybrid Cloud

Westcon-Comstor signs Sonar deal across EMEA & APAC

Partners across EMEA and APAC gain a route into AI coding and DevSecOps projects as SonarQube checks aim to cut security and governance risks.

By Sean Mitchell • 4 min read • Last week
AI-generated cyber attacks to hit firms soon, warn experts
Multi-factor authentication

AI-generated cyber attacks to hit firms soon, warn experts

Many firms lack the capacity to fix existing flaws fast enough, leaving them exposed as AI-generated attacks scale up, experts warn.

By Joseph Gabriel Lagonsin • 6 min read • Last week
Broadcom launches TrueSource for secure open source
Cloud Security

Broadcom launches TrueSource for secure open source

Customers will get human-verified open source fixes as Broadcom expands Spring security coverage and counters risks from AI-generated patches.

By Sean Mitchell • 4 min read • Last week
CREST launches AI testing standard for cyber firms
Application Security

CREST launches AI testing standard for cyber firms

Buyers of AI tools now have a benchmark to judge testing providers, as CREST's new standard targets gaps in assurance and due diligence.

By Mark Tarre • 4 min read • Last month
Google Cloud urges stronger cyber basics amid AI attacks
Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Last month
TrendAI adopts Claude Opus 5 for vulnerability triage
Data Protection

TrendAI adopts Claude Opus 5 for vulnerability triage

Security teams could cut exposure faster as the model helps rank exploitable flaws and apply temporary defences before vendor fixes arrive.

By Sean Mitchell • 4 min read • Last month
GitLab adds enterprise controls for agentic AI tools
DevOps

GitLab adds enterprise controls for agentic AI tools

Regulated teams can now keep AI processing inside GitLab Dedicated, with new secret handling, spending caps and security fixes added in 19.3.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

AppSec stories

Simple but secure: solving blockchain's biggest UX challenge
Crypto

Simple but secure: solving blockchain's biggest UX challenge

Blockchain apps risk losing new users unless developers simplify approvals and signing while keeping private keys and transactions secure.

By Ibraheem Kabir • 5 min read • Last month
Visa expands cybersecurity tools with new advisory services
Digital Transformation

Visa expands cybersecurity tools with new advisory services

Businesses facing faster AI-driven attacks can now use Visa's updated framework and advisory services to cut vulnerability fixes from weeks to hours.

By Joseph Gabriel Lagonsin • 4 min read • Last month