IT Brief Canada - Technology news for CIOs & IT decision-makers
Canada

Supply Chain Security Stories

Global Stories

Supply Chain Security stories

Checkmarx launches autonomous agents to fix code flaws
Data Protection

Checkmarx launches autonomous agents to fix code flaws

As AI coding speeds up, Checkmarx says its new agents can cut manual vulnerability fixes by up to 70% before code is committed.

By Mark Tarre • 4 min read • Today
SonicWall urges focus on patch speed over CVE count
Network Security

SonicWall urges focus on patch speed over CVE count

The real risk lies in unpatched flaws, as attackers increasingly exploit fixes already available but not yet installed.

By Mark Tarre • 3 min read • Today
AI now drives live cyber attacks, Check Point says
Malware

AI now drives live cyber attacks, Check Point says

Security teams face faster, harder-to-trace intrusions as AI is now being used to write attack code and run deception during breaches.

By Joseph Gabriel Lagonsin • 4 min read • Today
Google open-sources k8s-aibom for live AI workload audits
DevOps

Google open-sources k8s-aibom for live AI workload audits

Security teams can now spot hidden AI workloads in live Kubernetes clusters, as Google's new tool also creates immutable ML bills of materials.

By Sean Mitchell • 4 min read • Yesterday
CodeHunter names Stephen McCarney as Chief Strategy Officer
Cloud Security

CodeHunter names Stephen McCarney as Chief Strategy Officer

Amid rising AI-generated code risks, the hire is aimed at speeding CodeHunter's push into enterprise and government cybersecurity markets.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
OpenAI requires hardware-backed passkeys for cyber access
Data Protection

OpenAI requires hardware-backed passkeys for cyber access

Users who miss the deadline will lose access to OpenAI's most advanced cyber models, as the firm tightens defences against phishing.

By Sean Mitchell • 4 min read • 2 days ago
Agentic AI widens cyber risk as attackers speed up
Software-as-a-Service

Agentic AI widens cyber risk as attackers speed up

Attackers are using agentic tools to compress breaches into days, exposing developers and cloud users to faster, harder-to-stop intrusions.

By Sean Mitchell • 8 min read • Last week
Google Cloud puts Cloud Run sandboxes into preview
Virtualisation

Google Cloud puts Cloud Run sandboxes into preview

Developers can now isolate AI-generated code and user scripts inside Cloud Run, reducing the risk of exposing credentials or host data.

By Sean Mitchell • 3 min read • Last week
BeyondTrust launches NHI governance for machine identities
Hybrid Cloud

BeyondTrust launches NHI governance for machine identities

Security teams can now tighten oversight of service accounts, API keys and AI agents as machine identities outnumber staff in many enterprises.

By Mark Tarre • 4 min read • Last week
Frame launches AI campaign against social engineering
Digital Transformation

Frame launches AI campaign against social engineering

Rising use of deepfakes and voice cloning is forcing firms to rethink staff training as insurers and buyers scrutinise human risk more closely.

By Sean Mitchell • 4 min read • Last week
NCC Group maps security gaps across AI coding agents
Application Security

NCC Group maps security gaps across AI coding agents

Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.

By Sean Mitchell • 4 min read • Last week
Kyndryl expands sovereign cloud services with Microsoft
Data Protection

Kyndryl expands sovereign cloud services with Microsoft

Demand for regulated cloud computing is rising as governments and banks seek tighter data control, auditability and local oversight.

By Sofiah Nichole Salivio • 3 min read • Last week
Tanium wins Spain's top security certification for cloud
Software-as-a-Service

Tanium wins Spain's top security certification for cloud

The approval opens Spain's public sector market to Tanium Cloud, after the platform met the country's highest security standard for sensitive systems.

By Sean Mitchell • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

The real cost of build vs. buy for agentic AI in regulated banking
Storage

The real cost of build vs. buy for agentic AI in regulated banking

Banks risk repeating DevOps sprawl as DIY agentic AI pushes build costs above USD $1.4 million and delays production by up to 18 months.

By Bryan Ross • 6 min read • Today
Tactical Air Support scores perfect 110 in CMMC review
Physical Security

Tactical Air Support scores perfect 110 in CMMC review

A gap between perceived readiness and formal scrutiny forced the defence contractor to rebuild its compliance programme before passing.

By Sean Mitchell • 5 min read • Today
Beaten Zone passes AUD $20 million fundraising mark
Robotics

Beaten Zone passes AUD $20 million fundraising mark

Investor appetite for defence tech is rising as the Brisbane-based fund draws fresh capital amid regional tensions and supply chain concerns.

By Karen Joy Bacudo • 4 min read • 2 days ago
RiskProfiler wins 120 G2 nods across 31 categories
Cloud Security

RiskProfiler wins 120 G2 nods across 31 categories

The recognition underscores rising demand for cyber-risk tools that show measurable returns, as buyers demand faster deployment and continuous monitoring.

By Sofiah Nichole Salivio • 4 min read • Last week
CISA uses Anthropic AI to hunt flaws in federal code
Application Security

CISA uses Anthropic AI to hunt flaws in federal code

The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.

By Mark Tarre • 5 min read • Last week