AppSec stories
Security teams are drowning in AI-generated bug reports, and 11 early users are already testing a system that filters the noise.
Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.
Security teams should treat AI patching with caution after 53.9% of 6,080 model-generated fixes failed or introduced new flaws.
Hong Kong saw a record 15,877 cyber incidents in 2025 as AI speeds attacks and shortens the window to exploit software flaws.
Prompt-injection attacks and data leaks are the main risks as businesses connect Copilot and Gemini to email, files and internal tools.
Defenders will test prompt-injection tactics against AI agents as CrowdStrike and AWS offer USD $100,000 in prizes for a virtual red-team contest.
The tie-up aims to help security teams turn validated AI findings into ranked fixes before vulnerabilities pile up and attackers move first.
The suite aims to cut security backlogs and tighten oversight of AI agents as companies face a surge in machine identities and fragmented tools.
Browser-based AI agents will face tighter enterprise oversight as Google moves to curb data leaks and unauthorised actions in Chrome.
Security teams face a wider visibility gap as Tenable adds Google Gemini, MCP and AI coding tools to its exposure management platform.
UK security leaders are warning that AI-generated code is outpacing controls, with a quarter already seeing incidents from flaws it introduced.
Accenture's double win underlines Wiz's push to deepen its Australian channel as customers seek help securing cloud and AI projects.
Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.
Smaller security teams can now access autonomous testing on demand, as the platform drops its minimum commitment and adopts consumption pricing.
Security teams can now track newly disclosed CVEs in live systems, as RapidFort expands its supply chain tools into production monitoring.
Security teams can now stop rogue enterprise AI agents in seconds as Straiker adds runtime controls to its wider testing platform.
The update aims to cut remediation costs and stop teams wasting time by re-analysing vulnerabilities without enough business context.
AWS customers can now buy Chainguard Libraries through Security Hub Extended, as open-source dependency attacks push firms to tighten supply chain checks.
Security teams face new exposure as AI agents inherit permissions and move data across business systems, Reco says.
Existing customers can now govern AI agents more tightly, as Cequence links model, API and tool access to role-based policy controls.
