TelcoNews Canada - Telecommunications news for ICT decision-makers
Canada

Composition Analysis Stories - Page 3

Global Stories

Composition Analysis stories

Cloudsmith adds controls to block risky dependencies
DevOps

Cloudsmith adds controls to block risky dependencies

Cloudsmith adds automated controls to quarantine and block risky dependencies, tightening enforcement on software supply chain security.

By Joseph Gabriel Lagonsin • 4 min read • Tue, 24th Mar 2026
Veracode launches Fix for open-source vulnerability repair
DevOps

Veracode launches Fix for open-source vulnerability repair

Veracode unveils an AI-driven tool that automatically fixes open-source vulnerabilities, tackling mounting security debt in software supply chains.

By Sean Mitchell • 4 min read • Tue, 24th Mar 2026
Keysight unveils SBOM Manager to meet new cyber rules
Application Security

Keysight unveils SBOM Manager to meet new cyber rules

Keysight debuts SBOM Manager to automate software bills of materials as EU and US cyber rules tighten transparency and compliance demands.

By Shannon Williams • 4 min read • Fri, 20th Mar 2026
Harness unveils AI Security & coding tools for DevSecOps
DevOps

Harness unveils AI Security & coding tools for DevSecOps

Harness has launched AI Security and Secure AI Coding tools to spot and block vulnerabilities in AI-powered apps and AI-generated code.

By Sean Mitchell • 5 min read • Thu, 19th Mar 2026
ActiveState unveils Curated Catalog for safer code
Application Security

ActiveState unveils Curated Catalog for safer code

ActiveState launches Curated Catalog, a private, pre-vetted open source repository to tighten software supply chain security for enterprises.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 18th Mar 2026
Manifest tool boosts SBOMs for critical C & C++ code
Space

Manifest tool boosts SBOMs for critical C & C++ code

Manifest unveils SBOM generator for unmanaged C and C++ code, tackling critical supply chain blind spots in embedded and safety systems.

By Mark Tarre • 4 min read • Sat, 14th Mar 2026
ActiveState names Abby Kearns as new Chief Executive
Digital Transformation

ActiveState names Abby Kearns as new Chief Executive

ActiveState appoints seasoned open source leader Abby Kearns as Chief Executive, sharpening its focus on managed open source security.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 12th Mar 2026
Open source dependencies leave apps dangerously exposed
Unified Communications

Open source dependencies leave apps dangerously exposed

Secure.com warns most apps hide critical flaws in open source components, as unpatched dependencies and licence risks leave firms exposed.

By Shannon Williams • 4 min read • Thu, 12th Mar 2026
Endor Labs launches AURI to secure AI-driven coding
Digital Transformation

Endor Labs launches AURI to secure AI-driven coding

Endor Labs unveils AURI, a security intelligence platform embedding reachability-led checks into AI coding assistants and CI/CD pipelines.

By Sean Mitchell • 5 min read • Sat, 7th Mar 2026
Manifest flags AI readiness gap between execs & AppSec
Digital Transformation

Manifest flags AI readiness gap between execs & AppSec

Manifest research reveals executives overestimate AI security readiness, as AppSec teams warn of unmanaged tools, blind spots and rising risk.

By Shannon Williams • 4 min read • Thu, 5th Mar 2026
Security debt surges as legacy vulnerabilities pile up
Data Protection

Security debt surges as legacy vulnerabilities pile up

Security debt hits 82% of organisations as legacy flaws linger over a year, with third-party code driving most critical vulnerabilities.

By Shannon Williams • 4 min read • Thu, 26th Feb 2026
AI, cloud adoption driving new surge in cyber exposure
Data Protection

AI, cloud adoption driving new surge in cyber exposure

Rapid AI and cloud adoption is fuelling a new wave of cyber risk, as Tenable warns of exposed software supply chains and “ghost” identities.

By Sofiah Nichole Salivio • 4 min read • Wed, 25th Feb 2026
ActiveState unveils 79m-strong secure open source catalogue
DevOps

ActiveState unveils 79m-strong secure open source catalogue

ActiveState launches a 79m-component secure open source catalogue to centralise software supply chains and cut enterprise vulnerability risk.

By Kaleah Salmon • 4 min read • Fri, 20th Feb 2026
Armis unveils AI-native Centrix platform for app security
DevOps

Armis unveils AI-native Centrix platform for app security

Armis launches AI-native Centrix platform to secure application code, aiming to cut false alarms and safeguard AI-assisted development.

By Mark Tarre • 4 min read • Wed, 11th Feb 2026
Veracode boosts package firewall to block malicious code
DevOps

Veracode boosts package firewall to block malicious code

Veracode upgrades its Package Firewall and testing tools to block malicious software packages before they enter development pipelines.

By Mark Tarre • 3 min read • Thu, 29th Jan 2026
AI adoption to double ROI by 2026 amid rising cloud costs
DevOps

AI adoption to double ROI by 2026 amid rising cloud costs

AI adoption is set to double ROI by 2026 as businesses move to focused integration amid security challenges, says Harness Field CTO Martin Reynolds.

By Jake MacAndrew • 3 min read • Sat, 22nd Nov 2025

Stories from Other Regions

Composition Analysis stories

Endor Labs buys Autonomous Plane for container security
Virtualisation

Endor Labs buys Autonomous Plane for container security

Endor Labs acquires Autonomous Plane to add reachability-led container image analysis, promising fewer false positives for security teams.

By Catherine Knowles • 4 min read • Fri, 13th Feb 2026
How security theatre is killing developer productivity
Security Operations Centres

How security theatre is killing developer productivity

Fragmented security tools and manual remediation overload developers, causing burnout that threatens productivity and cybersecurity in fast-paced AI-driven workplaces.

By Derek Maki • 7 min read • Fri, 21st Nov 2025