Supply Chain Security stories
Faster AI-led flaw discovery could overwhelm patching and disclosure processes, leaving companies with bigger backlogs and less time to respond.
Travel customers could face phishing scams after Booking.com found suspicious activity may have exposed names, contact details and reservation data.
Most firms are not ready for AI-driven API attacks, with Salt saying 92% have yet to reach advanced security maturity.
Most engineering teams could struggle to meet EU Cyber Resilience Act reporting deadlines, with many still handling SBOMs manually or only after incidents.
Buyers of industrial control systems may gain confidence as Yokogawa’s plant software clears three independent cybersecurity certifications.
The update gives security teams earlier warning on vulnerable container images before they reach production, reducing blind spots across cloud estates.
Proxy networks built from compromised home devices are helping attackers hide in plain sight across Asia Pacific, Lumen says.
More than 40 critical software groups will use Claude Mythos Preview to hunt flaws, as Anthropic commits USD $100 million in credits.
Leaked AI credentials and unpatched dependencies are leaving production systems exposed across US and European organisations, Orca Security said.
New EU rules could force access control makers to prove stronger patching, sourcing and disclosure processes as cyberattacks rise.
Weak identity controls are now driving most attacks on Australian organisations, with breaches hitting revenue, customers and supply chains.
Defenders may gain faster vulnerability discovery, but the same AI leap is also sharpening concerns that attackers will exploit flaws in minutes.
Security researchers say long automated jobs can make Claude Code’s deny rules fall back to user prompts, weakening protections in CI/CD pipelines.
The move aims to reduce the risk of arbitrary code execution as open-weight models are shared and deployed at scale.
Access to advanced AI security tools will be limited to vetted groups as Anthropic backs open-source defenders with USD $100 million in credits.
Greater scrutiny of connected-device software is driving demand for product security tools, as Finite State adds another senior hire.
Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.
Customers in industrial, aerospace and automotive markets get a second US MRAM source as Everspin seeks to reduce supply disruption risk.
New Zealand buyers can now get phishing-resistant security keys faster, after a local Auckland stockholding cut import delays for agencies and firms.
Growing demand for earlier code security has prompted Distology to add Snyk’s application and AI tools to its UK, DACH and Benelux channel offer.