AppSec stories
Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.
Exposed serverless apps can let attackers steal tokens, read secrets and take over cloud projects if weak code is left unpatched.
Security teams can now rank code flaws against cloud and identity risks after Tenable folded application security data into its exposure platform.
Broader coverage in Mexico and Milan aims to cut latency for mobile security checks as fake app traffic grows more sophisticated.
Nearly half of commerce traffic across Akamai's network came from AI bots by late 2025, raising fraud and DDoS risks for retailers.
As AI coding speeds up, Checkmarx says its new agents can cut manual vulnerability fixes by up to 70% before code is committed.
Defenders face shorter patching windows as Check Point says AI can now turn new flaws into working exploits within hours.
The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.
Without stronger operational foundations, Asia Pacific firms risk turning new security tools into costly bottlenecks instead of productivity gains.
New tools for governing AI agents are moving to the fore as Google picks 33 cybersecurity startups for its first cybersecurity forum cohort.
The pilot could help uncover long-ignored flaws in ageing federal systems, but it also raises questions over transparency and supply-chain risk.
The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.
Developers using AI-generated code on Hostinger's Node.js plans will now get automatic alerts on vulnerable dependencies as apps are scanned in the background.
Hidden tracking markers and a US standoff over a vulnerability-finding model are fuelling fears that AI now carries cyber and national security risks.
Enterprises can now add more tailored IT tools after the new Marketplace passed 170 extensions and 10,000 downloads worldwide.
Gaps in oversight leave most firms unable to see what AI is doing inside mobile apps, despite broad adoption and formal governance policies.
Banks risk repeating DevOps sprawl as DIY agentic AI pushes build costs above USD $1.4 million and delays production by up to 18 months.
Boards are being pushed to rethink data platforms and cyber controls as AI adoption exposes Australian firms to faster attacks and stricter governance demands.
The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.
Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.
