SCA stories
Organisations remain exposed as malware in open-source packages surged in 2025, with most advisories and account takeovers reported last year.
The malicious packages could leave build systems and Kubernetes clusters exposed, prompting checks across CI/CD pipelines and AI frameworks.
Enterprises could spot compromised maintainers sooner, as the new tool maps open-source contributors, dependencies and policy breaches across builds.
Fime's EMEA lab wins EMVCo nod to test fingerprint sensors for biometric cards, supporting global roll-out of trusted contactless payments.
Sonatype says smaller AI tied to live software data can outsecure larger models on dependency upgrades, slashing risk and cost.
Veracode unveils an AI-driven tool that automatically fixes open-source vulnerabilities, tackling mounting security debt in software supply chains.
Harness has launched AI Security and Secure AI Coding tools to spot and block vulnerabilities in AI-powered apps and AI-generated code.
ActiveState launches Curated Catalog, a private, pre-vetted open source repository to tighten software supply chain security for enterprises.
Manifest unveils SBOM generator for unmanaged C and C++ code, tackling critical supply chain blind spots in embedded and safety systems.
RateGain and Juspay unveil RG Pay, an embedded payments layer to boost cross-border checkout performance for global travel brands.
BioCatch launches DeviceIQ to scan mobile and web devices before login, spotting AI-driven fraud and compromised handsets in milliseconds.
ActiveState appoints seasoned open source leader Abby Kearns as Chief Executive, sharpening its focus on managed open source security.
Appdome's new Threat-Memory tool stores on-device threat histories and AI scores to counter repeat mobile fraud and account takeovers.
Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.
Australian organisations face fresh risk of cloud and identity compromise as the cyber watchdog reissues its alert on repository attacks.
Backslash adds cross-tool governance to discover, vet and monitor 'Skills' powering AI coding assistants like Cursor, Claude Code and Copilot.
Token.io launches Account on File to make Pay by Bank a near one-tap checkout, cutting steps and boosting conversion for UK and EU merchants.
Ditto launches cryptographic digital ID platform for EU, promising reusable wallet-based identities and less personal data exposure.
Ecommpay clinches Anti-fraud Solution and Financial Inclusion titles at the FSTech Awards 2026, underscoring its payments innovation.
Flawed payment design is costing UK online travel agencies up to GBP £16.5 billion in lost bookings, Ecommpay's new benchmark report warns.
