Supply Chain Security stories
Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.
Security teams can now apply the same rules to AI-generated code across development and deployment, as Salt broadens its platform to curb flaws earlier.
Businesses adopting AI now face a single service aimed at filling gaps in governance, monitoring and incident response across workflows.
The report says Chinese threat groups are now tracking oil, reconstruction and strategic technologies across Venezuela, Syria, South Korea and the Gulf.
Companies can now tie AI code-use risks to developer training, with Secure Code Warrior aiming to prove compliance at commit level.
Enterprises using AI tools may now face a tougher check on their defences as benchmark scores give way to real-world attack testing.
Industrials remained the main target as the monthly ransomware total eased 7%, even as The Gentlemen surged to second place among active gangs.
The move gives the cyber risk provider closer access to EMEA customers as demand rises for better oversight of supplier vulnerabilities.
Critical infrastructure operators could gain broader visibility as Dragos adds Phosphorus tools for managing exposed connected devices across OT networks.
Industrial operators are turning to tighter network controls to curb cyberattacks, with OT now featuring in 26% of Zero Networks deals.
More than half of patched flaws in major DevOps tools were high or critical in 2025, putting software supply chains at greater risk.
Security teams can now fold supplier risk alerts into incident response as GuidePoint's new service targets breaches from third-party tools.
Reco COO Zoe Hillenmeyer says enterprises typically underestimate their AI agent exposure by a factor of ten and that gap is widening.
The move targets vulnerabilities in software used by large firms, as AI makes it easier to find and exploit flaws.
The funding will help firms spot hidden flaws and backdoors in compiled code as AI-generated software and supplier risk raise security concerns.
The Belfast software supply chain security firm is bolstering financial and legal controls as it seeks more enterprise customers after a USD $72 million round.
Its latest NIST ranking may bolster bids for government identity contracts, after ROC topped Class B slap fingerprint accuracy and cut error rates.
Malicious open source packages are increasingly slipping past spelling checks, exposing developer data and build systems to supply-chain attacks.
Charities, small firms and fraud victims across Scotland got more than GBP £3 million in cyber support as the centre reinvested profits.
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.