Supply Chain Security stories
The round values the software supply chain security company at USD $1 billion as AI coding boosts the flow of third-party code into production.
Threats from AI skills are escalating as the cybersecurity group expands research to counter a fast-growing software supply chain and attack surface.
The new integration keeps passwords out of prompts and repos, reducing the risk of leaks as AI coding agents move into production workflows.
Only a small fraction of disclosed flaws are likely to hit suppliers, leaving security teams to focus on the 58 highest-risk CVEs.
Independent security checks are gaining urgency as fast-growing AI and software firms face rising scrutiny from customers, partners and regulators.
The release gives security teams and developers new controls for credentials, merge requests and supply chain oversight as AI use grows.
Most Spring teams are exposed to container risks as 64% of respondents were unaware Dockerfile choices can affect security.
Members are backing tougher open source security as OpenSSF expands guidance on regulation, Python coding and AI-driven vulnerability tools.
Independent testing suggests enterprise AI can be deployed without exposed inbound ports, easing security concerns for firms handling sensitive data.
The recognition comes as buyers demand unified controls for human, machine and AI identities across cloud, on-premises and core business systems.
Businesses using AI agents may gain tighter controls as Zscaler adds new governance tools and deepens a decade-old partnership with Alstom.
AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.
Enterprises running ageing systems may gain a safer alternative to patching, as the new service flags flaws before vendors disclose them.
Despite higher spending plans, half of SMBs reported a cyber incident in the past year, exposing a widening readiness gap.
SMBs in Australia and New Zealand could cut the cost and complexity of cyber certification through a new channel-led package.
The findings suggest AI-assisted bug hunting is edging closer to practical exploitation, raising the stakes for software teams racing to patch flaws.
A JFrog study says weak package and container defences are leaving Indian organisations exposed as AI use adds new checks for developers.
Belgian software SMEs risk losing B2B contracts as new EU rules expose weak threat modelling and scant security training, a PXL study says.
UpGuard says exposed credentials and supplier risk leave Australia's biggest listed firms vulnerable, despite a modest rise in security scores.
Rising attack volumes are exposing under-resourced SMEs to downtime, lost contracts and regulatory risk unless security is built in now.