SecurityBrief India - Technology news for CISOs & cybersecurity decision-makers
India

Composition Analysis Stories

Global Stories

Composition Analysis stories

Targeted open source malware attacks on developers soar
Application Security

Targeted open source malware attacks on developers soar

Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
Checkmarx named leader in Gartner supply chain quadrant
Application Security

Checkmarx named leader in Gartner supply chain quadrant

Enterprise buyers are treating software supply chain security as a standalone priority as Gartner creates a dedicated Magic Quadrant for the category.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Chainguard named Gartner leader in software supply security
Cloud Security

Chainguard named Gartner leader in software supply security

The recognition underlines rising demand for tools that secure software builds before attackers can exploit open source dependencies and pipelines.

By Mark Tarre • 4 min read • Last month
JFrog named leader in Gartner's software security quadrant
Hybrid Cloud

JFrog named leader in Gartner's software security quadrant

The recognition comes as firms scramble to secure software pipelines, open-source code and AI assets against rising supply chain attacks.

By Mark Tarre • 4 min read • Last month
Midjourney unveils full-body medical scanner & spa
Data Privacy

Midjourney unveils full-body medical scanner & spa

The project could make routine scans faster and more convenient, as Midjourney seeks approval for broader diagnostic use in the US.

By Sean Mitchell • 3 min read • Last month
Broadcom expands Spring security for AI threat surge
Application Security

Broadcom expands Spring security for AI threat surge

Enterprises using Spring will get faster access to validated fixes as Broadcom responds to a 1700% surge in monthly security advisories.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Checkmarx partners with Carahsoft for public sector sales
Digital Transformation

Checkmarx partners with Carahsoft for public sector sales

Government agencies will gain wider access to application security tools as the partnership places Checkmarx products on Carahsoft's procurement channels.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Checkmarx partners Carahsoft to expand public sector sales
Data Protection

Checkmarx partners Carahsoft to expand public sector sales

Government buyers will gain wider access to Checkmarx tools as Carahsoft opens procurement routes through reseller networks and federal contracts.

By Mark Tarre • 4 min read • Last month
Humanoid robots, 0-day defence among Info-Tech trends for '27
Robotics

Humanoid robots, 0-day defence among Info-Tech trends for '27

Agentic AI, zero-day surge, sovereign cloud, and humanoid robots will define IT strategy in 2027, Info-Tech Research Group warns.

By Jake MacAndrew • 5 min read • Last month
Sonatype names new chiefs as AI demand drives growth
Data Protection

Sonatype names new chiefs as AI demand drives growth

Rising demand for secure AI software development has prompted Sonatype to expand its leadership team and scale operations globally.

By Sofiah Nichole Salivio • 3 min read • Last month
Software Improvement Group named Gartner leader on debt
DevOps

Software Improvement Group named Gartner leader on debt

The award underscores rising demand for software tools that spot structural risk as AI coding assistants flood enterprise systems with new code.

By Mark Tarre • 5 min read • Sat, 30th May 2026
Socket raises USD $60 million to tackle code risks
DevOps

Socket raises USD $60 million to tackle code risks

The round values the software supply chain security company at USD $1 billion as AI coding boosts the flow of third-party code into production.

By Sofiah Nichole Salivio • 3 min read • Tue, 26th May 2026
ispace & Leicester pact to send spectrometer to moon
Composition Analysis

ispace & Leicester pact to send spectrometer to moon

The pact advances a UK-led instrument towards the Moon as researchers hunt for minerals, volatiles and water ice on future commercial landings.

By Sean Mitchell • 4 min read • Thu, 14th May 2026
Sonatype warns of surge in trusted open-source malware
Application Security

Sonatype warns of surge in trusted open-source malware

Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.

By Shannon Williams • 4 min read • Wed, 15th Apr 2026
Cloudsmith survey finds SBOM gaps before cyber law
DevOps

Cloudsmith survey finds SBOM gaps before cyber law

Most engineering teams could struggle to meet EU Cyber Resilience Act reporting deadlines, with many still handling SBOMs manually or only after incidents.

By Catherine Knowles • 4 min read • Fri, 10th Apr 2026

Stories from Other Regions

Composition Analysis stories

Chainguard launches scanner to block npm malware greyware
Malware

Chainguard launches scanner to block npm malware greyware

The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.

By Sean Mitchell • 4 min read • Last month
Australia leads in self-hosted AI use, JFrog finds
DevOps

Australia leads in self-hosted AI use, JFrog finds

The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.

By Sean Mitchell • 5 min read • Last month
Sonatype expands Firewall to block malicious packages
Data Protection

Sonatype expands Firewall to block malicious packages

Malicious open source packages are increasingly slipping past spelling checks, exposing developer data and build systems to supply-chain attacks.

By Sean Mitchell • 4 min read • Last month