IT Brief Asia - Technology news for CIOs & IT decision-makers
Asia

AppSec Stories - Page 2

Asian Stories

AppSec stories

Global Stories

AppSec stories

Google Cloud urges stronger cyber basics amid AI attacks
Malware

Google Cloud urges stronger cyber basics amid AI attacks

As attackers use AI to speed up phishing and malware, companies are being told that multi-factor authentication and patching matter more than ever.

By Mark Tarre • 4 min read • Last month
TrendAI adopts Claude Opus 5 for vulnerability triage
Data Protection

TrendAI adopts Claude Opus 5 for vulnerability triage

Security teams could cut exposure faster as the model helps rank exploitable flaws and apply temporary defences before vendor fixes arrive.

By Sean Mitchell • 4 min read • Last month
GitLab adds enterprise controls for agentic AI tools
DevOps

GitLab adds enterprise controls for agentic AI tools

Regulated teams can now keep AI processing inside GitLab Dedicated, with new secret handling, spending caps and security fixes added in 19.3.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Barracuda finds average web app has 20 security flaws
Digital Transformation

Barracuda finds average web app has 20 security flaws

Basic security lapses are leaving web apps exposed, with Barracuda saying routine misconfigurations account for most of 20 flaws per site.

By Sean Mitchell • 3 min read • Last month
AI models expose new attack surfaces through misconfiguration
Ransomware

AI models expose new attack surfaces through misconfiguration

Misconfigured models are giving attackers a fresh route into cloud systems, raising the risk of data theft and service compromise.

By Anthony Caruana • 5 min read • Last month
Prem launches CyberScan for Bitcoin security audits
Data Protection

Prem launches CyberScan for Bitcoin security audits

The new tool aims to catch Bitcoin software flaws between formal audits after a regression led to more than USD $116 million stolen.

By Sofiah Nichole Salivio • 4 min read • Last month
Endor Labs adds buildless C support to AI SAST tool
Application Security

Endor Labs adds buildless C support to AI SAST tool

Developers can now scan C code earlier in the process, as Endor Labs says its buildless AI SAST found 96 of 102 known bugs in tests.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Keeper launches Microsoft Power Platform secrets connector
DevOps

Keeper launches Microsoft Power Platform secrets connector

Organisations using Microsoft automation can now keep credentials out of scripts, reducing the risk of exposed secrets in cloud workflows.

By Mark Tarre • 3 min read • Last month
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last month
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last month
Bugtri launches in Sydney to curb AI vulnerability spam
Application Security

Bugtri launches in Sydney to curb AI vulnerability spam

Security teams are drowning in AI-generated bug reports, and 11 early users are already testing a system that filters the noise.

By Sean Mitchell • 3 min read • Last month
ArmorCode gets verified Claude access for cyber defence
Cloud Security

ArmorCode gets verified Claude access for cyber defence

Verified access to Anthropic's Claude models should sharpen ArmorCode's exploitability scoring as security teams race to cut alert noise.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

AppSec stories

Visa expands cybersecurity tools with new advisory services
Digital Transformation

Visa expands cybersecurity tools with new advisory services

Businesses facing faster AI-driven attacks can now use Visa's updated framework and advisory services to cut vulnerability fixes from weeks to hours.

By Joseph Gabriel Lagonsin • 4 min read • Last month
BreachLock launches Breach360 autonomous pen testing
Network Security

BreachLock launches Breach360 autonomous pen testing

Security teams gain a single workflow to validate real exploit paths as BreachLock folds autonomous testing into its wider platform.

By Sofiah Nichole Salivio • 4 min read • Last month
CleanStart expands Middle East, Africa security push
Digital Transformation

CleanStart expands Middle East, Africa security push

Rising use of AI coding tools is widening software supply-chain risks for businesses across the Middle East, Türkiye and Africa.

By Sofiah Nichole Salivio • 4 min read • Last month
Harness launches AI security agents to speed fixes
Cloud Security

Harness launches AI security agents to speed fixes

The new tools aim to cut the gap between finding a flaw and fixing it from weeks to hours as attacks accelerate.

By Mark Tarre • 4 min read • Last month
Cytix launches risk platform after GBP £5.2m funding
DevOps

Cytix launches risk platform after GBP £5.2m funding

UK security leaders are warning that AI-generated code is outpacing controls, with a quarter already seeing incidents from flaws it introduced.

By Sofiah Nichole Salivio • 4 min read • Last month