Supply Chain Security stories
Java developers using Spring will get faster fixes as Broadcom backs day-zero patch access and more secure dependency builds for paying customers.
The partnership could help uncover critical flaws faster as AI-driven attacks and machine identities raise the stakes for infrastructure security.
The wider rollout targets critical infrastructure and software maintainers after early users found more than 10,000 serious flaws.
Personal-device access to production systems prompted DrillDocs to tighten oversight of offshore engineers and contractors across time zones.
The partnership could speed up flaw detection and patching for critical software used by businesses and public sector organisations across the region.
Growing supplier cyber risk is pushing businesses towards continuous monitoring, as Factor joins a crowded market focused on better response.
Banks and investment firms face mounting exposure as ransomware incidents jump and more than half of vendors carry high-severity flaws.
Mid-sized firms facing faster exploits can now outsource patching, exposure scanning and threat monitoring under one contract.
Personalised prompts will now be triggered by risky AI-assisted code, as firms seek earlier controls on developer behaviour and data exposure.
Developers using npm could have secrets exposed as 176 malicious packages were set up to hijack dependency resolution and run postinstall malware.
The ruling gives French critical-site buyers a benchmark for high-assurance access control as cyber and physical security risks converge.
The registry is tightening checks after malicious uploads exposed a gap between declared skill purpose and actual behaviour.
Early access to Anthropic's Mythos in Australia is helping Rubrik scan its code for flaws before attackers can exploit them.
Despite strong governance on paper, Singapore firms are struggling to enforce software security controls as AI and open-source use accelerates.
The restricted model could speed up vulnerability fixes across Cohesity's platform as AI intensifies both attack and defence in critical software.
The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.
British firms now use 713,130 AI agents, sharpening pressure for tighter oversight as Gravitee rolls out Gamma to govern them.
Controlled US availability means customers can now unify network, security and AI operations in one place, with external tools included.
Attackers targeting weaker suppliers are pushing enterprises to move from periodic reviews to continuous monitoring and response across vendor networks.
Nearly 70 first-time exhibitors will join the Detroit event, giving transport buyers a wider look at AI, cybersecurity and connected systems.