CFOtech US - Technology news for CFOs & financial decision-makers
United States

AppSec Stories - Page 4

American Stories

AppSec stories

NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Tue, 28th Jul 2026

Global Stories

AppSec stories

Proofpoint flags underground AI prompt injection tools
Software-as-a-Service

Proofpoint flags underground AI prompt injection tools

Proofpoint says underground forums are advertising tools that use indirect prompt injection across emails, PDFs, calendar invites and web pages.

By Mark Tarre • 4 min read • Thu, 30th Jul 2026
Qualys adds governance to TotalAI for AI risk control
Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Thu, 30th Jul 2026
Secure.com appoints Brown Hill to lead Americas sales
Digital Transformation

Secure.com appoints Brown Hill to lead Americas sales

The cybersecurity group is widening its Americas push as it seeks more customers and partners for its AI-focused platform.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 30th Jul 2026
Reco adds live AI runtime controls for browser use
Digital Transformation

Reco adds live AI runtime controls for browser use

Security teams can now block risky AI prompts in real time as Reco expands its platform from visibility into browser-level enforcement.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 30th Jul 2026
Miggo launches rapid defence layer for active exploits
Application Security

Miggo launches rapid defence layer for active exploits

Security teams can now block newly disclosed flaws in minutes, as Miggo's tool adds temporary protection while patches are still being deployed.

By Sofiah Nichole Salivio • 4 min read • Thu, 30th Jul 2026
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Thu, 30th Jul 2026
Checkmarx launches Fusion hybrid scanning tool for AI code
Cloud Security

Checkmarx launches Fusion hybrid scanning tool for AI code

The hybrid system aims to help security teams spot serious flaws in AI-generated code faster, as production code becomes harder to review.

By Mark Tarre • 4 min read • Wed, 29th Jul 2026
Netskope says downstream AI data breaches are surging
Malware

Netskope says downstream AI data breaches are surging

Downstream AI data leaks have more than doubled in a year, with connected services now returning unauthorised information to staff and agents.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 29th Jul 2026
Felk warns AI is fuelling attacks on smaller firms
Malware

Felk warns AI is fuelling attacks on smaller firms

Smaller firms face faster and costlier breaches as AI cuts the time hackers need to exploit software flaws from weeks to hours.

By Sean Mitchell • 4 min read • Fri, 24th Jul 2026
Ossprey raises USD $2.65 million for supply chain security
Application Security

Ossprey raises USD $2.65 million for supply chain security

The round will fund hiring, product work and overseas growth as investors back tools to counter AI-driven software supply chain risks.

By Sean Mitchell • 4 min read • Fri, 24th Jul 2026
OpenAI models hacked Hugging Face in security test
Cloud Security

OpenAI models hacked Hugging Face in security test

The breach highlights how autonomous AI can turn live testing into a real attack path, exposing internal data and credentials.

By Sofiah Nichole Salivio • 5 min read • Fri, 24th Jul 2026

Stories from Other Regions

AppSec stories

Saviynt tops USD $300 million ARR & launches Zuma AI
Software-as-a-Service

Saviynt tops USD $300 million ARR & launches Zuma AI

The rise of AI agents is forcing security teams to rethink access controls, as the identity vendor passes USD $300 million in ARR.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 31st Jul 2026
PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Thu, 30th Jul 2026
Saviynt tops USD $300 million ARR with Zuma launch
Data Protection

Saviynt tops USD $300 million ARR with Zuma launch

New controls for AI agents and machine identities come as Saviynt passes USD $300 million in annual recurring revenue, with bookings up more than 80%.

By Karen Joy Bacudo • 4 min read • Wed, 29th Jul 2026
The shadow identity crisis: Who let the agents in?
Digital Transformation

The shadow identity crisis: Who let the agents in?

Security chiefs face a widening breach risk as most firms plan to use AI agents, yet barely a third feel ready to secure them properly.

By Evgeny Zaretskov • 5 min read • Wed, 29th Jul 2026
Autonomous OpenAI agents breach Hugging Face in test
Robotics

Autonomous OpenAI agents breach Hugging Face in test

Security teams are reassessing AI access controls after autonomous models exploited an unknown flaw and moved laterally inside a real system.

By Sofiah Nichole Salivio • 6 min read • Fri, 24th Jul 2026