CFOtech US - Technology news for CFOs & financial decision-makers
United States

AppSec Stories - Page 11

American Stories

AppSec stories

Global Stories

AppSec stories

GitLab 19.0 adds secrets manager & AI workflow tools
Private Cloud

GitLab 19.0 adds secrets manager & AI workflow tools

The release gives security teams and developers new controls for credentials, merge requests and supply chain oversight as AI use grows.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 22nd May 2026
OpenSSF adds five members & new security resources
Application Security

OpenSSF adds five members & new security resources

Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.

By Sofiah Nichole Salivio • 4 min read • Fri, 22nd May 2026
Orchid warns of hidden identity gap as AI risks rise
Data Protection

Orchid warns of hidden identity gap as AI risks rise

Most enterprise access still sits outside formal controls, leaving AI agents and unmanaged accounts to widen security and compliance risks.

By Sean Mitchell • 5 min read • Fri, 22nd May 2026
Cloudflare launches Claude agent environments with Anthropic
DevOps

Cloudflare launches Claude agent environments with Anthropic

Businesses can now run Claude-powered agents in isolated Cloudflare sandboxes, with tighter controls for private data, audit trails and scaling.

By Mark Tarre • 3 min read • Fri, 22nd May 2026
Software Improvement Group launches AI code governance
DevOps

Software Improvement Group launches AI code governance

Many firms lack visibility over AI-written software, raising maintainability and security risks as adoption of coding assistants accelerates.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 21st May 2026
Anthropic model can chain bugs into exploits, Cloudflare
Cloud Security

Anthropic model can chain bugs into exploits, Cloudflare

The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.

By Mark Tarre • 4 min read • Tue, 19th May 2026
Synack report says vulnerability testing gap widens
Digital Transformation

Synack report says vulnerability testing gap widens

Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.

By Mark Tarre • 4 min read • Sat, 16th May 2026
HackerOne links validated flaws to Wiz cloud platform
Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
HackerOne & Wiz link validated findings to cloud risk
Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • Fri, 15th May 2026
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • Fri, 15th May 2026
Cycode launches agentic development lifecycle security
Application Security

Cycode launches agentic development lifecycle security

Security teams face new risks from AI coding tools as Cycode adds controls for prompts, generated code and unauthorised model use.

By Sean Mitchell • 4 min read • Thu, 14th May 2026
AI now routine in cyber attacks, Google report finds
Malware

AI now routine in cyber attacks, Google report finds

Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 12th May 2026
WatchGuard buys Perimeters.io in cloud security push
Data Protection

WatchGuard buys Perimeters.io in cloud security push

MSPs will gain a single platform for cloud threat detection as the deal widens WatchGuard's reach into identity and SaaS security.

By Mark Tarre • 3 min read • Mon, 11th May 2026
KnowBe4 partners Secure Code Warrior on AI training
Data Protection

KnowBe4 partners Secure Code Warrior on AI training

Organisations using AI in software development will get training on secure coding and governance as vulnerabilities and data risks mount.

By Mark Tarre • 4 min read • Sat, 9th May 2026
Synack launches Sara AI Pentesting for wider coverage
Data Protection

Synack launches Sara AI Pentesting for wider coverage

The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 8th May 2026
Causal Dynamics Lab launches Cielara Code for AI coding
DevOps

Causal Dynamics Lab launches Cielara Code for AI coding

It aims to cut wasted search time for coding agents after tests found most of their work was reading files rather than editing code.

By Sofiah Nichole Salivio • 5 min read • Wed, 6th May 2026
Tenable finds GitHub workflow flaw in Microsoft repo
DevOps

Tenable finds GitHub workflow flaw in Microsoft repo

A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.

By Mark Tarre • 4 min read • Mon, 4th May 2026

Stories from Other Regions

AppSec stories