CFOtech US - Technology news for CFOs & financial decision-makers
United States

AppSec Stories - Page 3

American Stories

AppSec stories

OpenAI broadens AI cyber tools as arms race heats up
Data Protection

OpenAI broadens AI cyber tools as arms race heats up

Ransomware pressure on US firms is intensifying debate over whether broader AI hacking tools will help defenders or aid criminals.

By Sean Mitchell • 4 min read • Fri, 17th Apr 2026

Global Stories

AppSec stories

Wiz expands AI security coverage across cloud & edge
Hyperscale

Wiz expands AI security coverage across cloud & edge

Customers gain broader visibility into AI risks as Wiz adds cloud, edge and coding-tool coverage, with Red Agent now in public preview.

By Sean Mitchell • 4 min read • Fri, 24th Apr 2026
CrowdStrike launches AI security coalition with partners
Cloud Security

CrowdStrike launches AI security coalition with partners

Boards face mounting pressure to fix AI-found code flaws faster, as CrowdStrike and partners launch a service to rank exploit risks.

By Mark Tarre • 4 min read • Fri, 24th Apr 2026
Lineaje survey finds AI code confidence outpaces visibility
Digital Transformation

Lineaje survey finds AI code confidence outpaces visibility

Most firms are still flying blind on AI-generated code, even as 89% say they can secure it and 86% have already adopted it.

By Shannon Williams • 4 min read • Thu, 23rd Apr 2026
Claude Code can leak secrets in public npm packages
Data Protection

Claude Code can leak secrets in public npm packages

Hundreds of packages could have exposed API keys and logins after Claude Code saved approved commands in a file npm may publish by default.

By Shannon Williams • 4 min read • Thu, 23rd Apr 2026
Check Point teams with Google Cloud on AI agent security
Firewalls

Check Point teams with Google Cloud on AI agent security

Enterprises using autonomous AI agents could get tighter controls as the tie-up adds governance and live monitoring to Google Cloud deployments.

By Mark Tarre • 4 min read • Thu, 23rd Apr 2026
AI coding speeds up, but security teams fall behind
DevOps

AI coding speeds up, but security teams fall behind

Security teams are struggling to review surging AI-generated code, with 62% saying the workload is getting harder to manage.

By Shannon Williams • 4 min read • Thu, 23rd Apr 2026
Zscaler joins Anthropic Project Glasswing on cyber AI
Firewalls

Zscaler joins Anthropic Project Glasswing on cyber AI

AI-driven attacks are pushing firms to hide systems from the public internet rather than rely on patching flaws after discovery.

By Sofiah Nichole Salivio • 3 min read • Wed, 22nd Apr 2026
HackerOne launches h1 Validation to tackle AI flaws
DevOps

HackerOne launches h1 Validation to tackle AI flaws

Rising AI-generated vulnerability reports are leaving security teams with record backlogs and only hours to judge which flaws hackers can exploit.

By Catherine Knowles • 4 min read • Wed, 22nd Apr 2026
Chainguard & Cursor tackle AI code supply chain risks
DevOps

Chainguard & Cursor tackle AI code supply chain risks

AI coding agents are increasing supply chain risk, prompting new controls to verify third-party dependencies before they reach production.

By Catherine Knowles • 4 min read • Wed, 22nd Apr 2026
Tenable flags Microsoft GitHub workflow flaw exposing code
DevOps

Tenable flags Microsoft GitHub workflow flaw exposing code

A critical flaw in a widely used Microsoft code-sample repository could have let attackers steal secrets and run code through GitHub issues.

By Sean Mitchell • 4 min read • Wed, 22nd Apr 2026
AI vulnerability discovery forces boards to rethink cyber risk
Data Protection

AI vulnerability discovery forces boards to rethink cyber risk

Boards are being pressed to abandon periodic patching as AI models can now uncover and chain software flaws faster than human teams can respond.

By Kaleah Salmon • 6 min read • Wed, 22nd Apr 2026
LangWatch launches open-source tool for AI red-teaming
Data Protection

LangWatch launches open-source tool for AI red-teaming

The framework is designed to expose hidden risks in production AI systems that can be missed by conventional one-off tests.

By Sean Mitchell • 4 min read • Tue, 21st Apr 2026
Appdome launches identity-first mobile API protection
Virtualisation

Appdome launches identity-first mobile API protection

Mobile API calls can now be checked against app, device and session identity before access is granted, aiming to curb bot abuse and takeover attempts.

By Catherine Knowles • 4 min read • Fri, 17th Apr 2026
Capsule Security raises $7 million to guard AI agents
Privileged Access Management

Capsule Security raises $7 million to guard AI agents

The Tel Aviv startup says enterprises need runtime controls as AI agents take on more privileged tasks across core business systems.

By Catherine Knowles • 5 min read • Thu, 16th Apr 2026
AI coding boom deepens cognitive debt, says Thoughtworks
DevOps

AI coding boom deepens cognitive debt, says Thoughtworks

Rising use of AI assistants is making software harder to understand, prompting teams to revive stricter testing, controls and oversight.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 16th Apr 2026

Stories from Other Regions

AppSec stories

Melbourne to host combined cyber security conferences
Data Protection

Melbourne to host combined cyber security conferences

More than 500 senior leaders will gather in Melbourne next July as cyber risk, AI and resilience pressures push security teams to align.

By Sean Mitchell • 4 min read • Wed, 22nd Apr 2026