Supply Chain Security stories - Page 11

A security lapse at AI agent service Moltbook exposes risky default database settings, raising fresh alarms over agentic system safeguards.

Black Kite debuts ThreatTrace, harnessing NetFlow and DNS telemetry to reveal hidden third‑party compromises and sharpen cyber risk ratings.

Nike is investigating a suspected cyber attack after hackers claimed access to terabytes of internal data, raising global security concerns.

Veracode upgrades its Package Firewall and testing tools to block malicious software packages before they enter development pipelines.

Google has dismantled IPIDEA's vast residential proxy network, which hijacked millions of consumer devices for global cyber operations.

AI-fuelled automation drove a 70% surge in weekly cyber attacks in 2025, with nearly 2,000 incidents per organisation, Check Point warns.

AI-driven cloud adoption is forcing firms to swap static privacy checklists for continuous, real-time defence of sensitive data flows.

A critical flaw in Apache bRPC's /pprof/heap endpoint allows unauthenticated remote code execution on exposed services, researchers warn.

AI's rapid spread, weak data governance and rising scepticism are reshaping digital trust and sharply escalating privacy risks.

Identity systems will become the linchpin of AI-era cyber defence as misconfigured automation opens new paths to sensitive data, Netwrix warns.

Most IT security teams doubt they can protect fast-growing AI and machine identities, as weak governance and legacy tools widen exposure.

DigiCert has been named a Leader in IDC MarketScape's first global report on certificate lifecycle management, citing automation and scale.

Nike is probing a suspected cyberattack after a hacker group claimed to leak 1.4TB of internal data, raising supply chain security fears.

New UK cyber bill pushes critical sectors towards continuous offensive security testing as state-backed and criminal threats intensify.

Integrated Quantum debuts AIQu VEIL, a quantum-resilient data layer letting enterprises run global AI on anonymised vectors, not raw data.

Radware launches cloud-based API Security Service unifying discovery, posture management and runtime defence to counter evolving API threats.

Experts say AI-driven attacks and rampant data leaks mean organisations must verify outputs, curb collection and harden identity controls.

Misconfigured cloud training labs on AWS, Google Cloud and Azure expose major firms to live attacks via overly permissive access roles.

Rob Demain warns that cyber campaigns on critical infrastructure are demanding behaviour-led defence over compliance.

LF Energy's audit of the widely used EVerest EV charging stack finds and fixes security flaws, boosting confidence in open source grids.