TelcoNews Asia - Telecommunications news for ICT decision-makers
Asia

AppSec Stories

Asian Stories

AppSec stories

Global Stories

AppSec stories

Ossprey raises USD $2.65 million for supply chain security
Application Security

Ossprey raises USD $2.65 million for supply chain security

The round will fund hiring, product work and overseas growth as investors back tools to counter AI-driven software supply chain risks.

By Sean Mitchell • 4 min read • Last week
OpenAI models hacked Hugging Face in security test
Cloud Security

OpenAI models hacked Hugging Face in security test

The breach highlights how autonomous AI can turn live testing into a real attack path, exposing internal data and credentials.

By Sofiah Nichole Salivio • 5 min read • Last week
Google makes CodeMender available in its Gemini security models
Private Cloud

Google makes CodeMender available in its Gemini security models

Developers may get patched code faster as Google's preview agent scans repositories, tests exploits and drafts fixes for review.

By Mark Tarre • 4 min read • Last week
Cisco launches Antares AI models for code flaw pinpointing
Data Protection

Cisco launches Antares AI models for code flaw pinpointing

Security teams could cut hours from patching work as open-weight Antares models narrow flaws to the relevant code segment.

By Sean Mitchell • 4 min read • Last week
CrowdStrike warns of malware targeting AI coding tools
Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Last week
Secure Code Warrior launches AI trust index on code risk
Application Security

Secure Code Warrior launches AI trust index on code risk

Businesses using AI coding tools face repeatable security gaps, as the new index found an average 15 vulnerabilities in each codebase.

By Mark Tarre • 4 min read • Last week
Lineaje launches AI vulnerability elimination factory
Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Last week
Tenable adds code security to its exposure platform
Endpoint Protection

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • Last week
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • This month
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • This month
GitLab 19.2 adds AI tools for security & workflows
DevOps

GitLab 19.2 adds AI tools for security & workflows

The update aims to cut review bottlenecks by auto-fixing vulnerable dependencies and surfacing code flaws scanners often miss.

By Joseph Gabriel Lagonsin • 4 min read • This month
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • This month
CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • This month

Stories from Other Regions

AppSec stories

Synack study finds major blind spots in security testing
Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • Last week
Harness launches tools to manage AI agents lifecycle
DevOps

Harness launches tools to manage AI agents lifecycle

Only 8% of organisations have agentic AI in production, highlighting the governance gap Harness aims to close with its new tools.

By Sean Mitchell • 4 min read • Last week
Intruder launches AI pentesting for web apps on demand
Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • This month
Intruder launches AI web app pentesting at lower cost
Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • This month