AppSec stories
Enterprises face new risks as autonomous software agents spread through systems faster than older security tools can track or control.
Audit trails for AI-generated code could get easier as the plugin exposes packages, dependencies and provenance inside Claude Code.
Security teams gain rollback and policy controls as autonomous Claude agents begin writing and deploying code at machine speed.
Agentic AI, zero-day surge, sovereign cloud, and humanoid robots will define IT strategy in 2027, Info-Tech Research Group warns.
Security teams are under pressure as attacks can now begin before patches land, making early risk detection critical.
Millions of downloads were exposed to silent code execution as a flaw in Hugging Face Transformers let malicious models run on load.
The rollout aims to help customers tame rising AI-driven complexity as Datadog adds autonomous monitoring, security and agent oversight tools.
Rising demand for secure AI software development has prompted Sonatype to expand its leadership team and scale operations globally.
The partnership could help uncover critical flaws faster as AI-driven attacks and machine identities raise the stakes for infrastructure security.
Independent tests are giving APAC buyers a clearer basis to compare cloud WAAP products as web and API attacks intensify.
The partnership could speed up flaw detection and patching for critical software used by businesses and public sector organisations across the region.
Pressure to curb AI costs and improve returns is pushing Asia Pacific organisations towards multi-model deployment strategies across the software lifecycle.
Personalised prompts will now be triggered by risky AI-assisted code, as firms seek earlier controls on developer behaviour and data exposure.
Developers using npm could have secrets exposed as 176 malicious packages were set up to hijack dependency resolution and run postinstall malware.
The registry is tightening checks after malicious uploads exposed a gap between declared skill purpose and actual behaviour.
Early access to Anthropic's Mythos in Australia is helping Rubrik scan its code for flaws before attackers can exploit them.
UK businesses face more mobile phishing and fraud as Zimperium widens access to its defences through ABC Distribution.
The restricted model could speed up vulnerability fixes across Cohesity's platform as AI intensifies both attack and defence in critical software.
The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.
The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.
