AppSec stories
The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.
The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.
Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.
The new planning tool aims to cut bugs and security flaws before code is written, as the startup's seed funding reaches USD $17 million.
Enterprise customers face growing risks as autonomous software gains access to internal systems, prompting fresh demand for agent security tools.
Without stronger operational foundations, Asia Pacific firms risk turning new security tools into costly bottlenecks instead of productivity gains.
New tools for governing AI agents are moving to the fore as Google picks 33 cybersecurity startups for its first cybersecurity forum cohort.
The pilot could help uncover long-ignored flaws in ageing federal systems, but it also raises questions over transparency and supply-chain risk.
The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.
Developers using AI-generated code on Hostinger's Node.js plans will now get automatic alerts on vulnerable dependencies as apps are scanned in the background.
Hidden tracking markers and a US standoff over a vulnerability-finding model are fuelling fears that AI now carries cyber and national security risks.
Enterprises can now add more tailored IT tools after the new Marketplace passed 170 extensions and 10,000 downloads worldwide.
Gaps in oversight leave most firms unable to see what AI is doing inside mobile apps, despite broad adoption and formal governance policies.
Security teams are being pushed to react faster as AI-assisted attacks widen the gap between exploit discovery, patching and live defence.
Security risks are rising as AI coding tools become routine, leaving many firms unable to track how machine-generated code reaches production.
Developers can now add authentication and access controls earlier in AI-built apps, as Ory's free plugins plug identity tools into coding agents.
More than half of engineering teams are now using AI to write code, but weak oversight is leaving security, dependency and performance risks in production.
Customers can now query and act on API security data in plain English, but every change still needs human approval before it is applied.
North American expansion is now being funded as the startup targets cloud risks introduced at the design stage, not after deployment.
The pact aims to help enterprises patch vulnerable open source code faster without forcing disruptive upgrades to production systems.
