AppSec stories
Brinqa has rolled out AI agents to infer asset owners and deduplicate findings, aiming to cut cyber risk noise in sprawling IT estates.
Backslash raises USD $19m to secure emerging AI 'vibe coding' workflows as autonomous agents reshape how enterprise software is built.
CodeHunter extends its behavioural malware analysis into CI/CD pipelines, targeting risky software artefacts before they reach production.
Most CIOs expect AI-driven cyber attacks within a year, but only a third feel prepared, exposing a widening gap in cyber resilience.
Rapid AI and cloud adoption is fuelling a new wave of cyber risk, as Tenable warns of exposed software supply chains and “ghost” identities.
Anthropic unveils Claude Code Security, an AI tool that scans codebases for complex bugs, verifies risks and suggests patches for developers.
Tenable warns businesses that rapid AI and cloud adoption is creating an invisible exposure gap as identity and supply chain risks surge.
ActiveState launches a 79m-component secure open source catalogue to centralise software supply chains and cut enterprise vulnerability risk.
Checkmarx adds IDE-native security checks to AI-focused Kiro, aiming to catch vulnerabilities earlier and cut security rework for teams.
Vehere boosts North America cyber sales push with senior hires Glen Hlavsa and Ali Abughannam to target enterprise NDR demand.
DryRun Security appoints Signal Sciences Co-founder Andrew Peterson to its board to steer its AI-native code security push.
Okta launches Agent Discovery to uncover and rein in shadow AI agents, mapping risky app access and tightening identity-based controls.
Aerospike Database 8 now embeds default dynamic data masking, tightening PII protection while easing compliance and operational overhead.
DigiCert warns UltraDNS DDoS attacks spiked to record levels in December 2025, driven by massive Aisuru and Kimwolf botnets.
Tenable warns 'LookOut' flaws in Google Looker could hand attackers server control, expose secrets and enable cross-tenant cloud access.
Moltbook left a Supabase key exposed, leaking AI chats, 30,000 emails and 1.5 million API keys in a cautionary tale of vibe coding risk.
Qodo 2.0 launches multi-agent AI code review to boost trust in autogenerated code, claiming 11% better detection of critical issues.
Developers granting AI agents broad, unsupervised access to code and systems are creating new software supply chain and data exposure risks.
DryRun launches DeepScan Agent, an AI tool that scans whole codebases in hours to rank real-world security risks and speed remediation.
AI coding tools are speeding software delivery for Australian firms but overwhelming security teams and exposing unprecedented risks.