Supply Chain Security stories
Tighter EU reporting duties are pushing open source vendors to harden supply chains, prompting four firms to join OpenSSF.
AI is already making cyber attacks faster and cheaper, while quantum computing could soon put trust in data and payments at risk.
Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.
Security teams can now trace prompts, responses and tool calls from Claude Code and Cowork alongside other enterprise signals.
The service keeps source code inside customers' AWS environments while using human review to cut false positives and verify fixes.
It widens Broadcom's support model beyond Spring, giving customers verified fixes for Java, Python, Node.js and data services as vulnerabilities surge.
Mac developers using autonomous agents now get a free beta tool that blocks risky actions before tools, files or credentials are exposed.
Buyers may inherit unpatched systems and monitoring gaps unless cyber checks are done before a deal closes, Quest Technology Management says.
The tool aims to close security gaps left by AI-written code before vulnerabilities reach security backlogs or pull requests.
The update is aimed at speeding recovery and containing breaches as AI agents gain access to corporate identity systems.
Many engineering teams still rely on reactive checks, leaving open-source packages to slip into systems before threats are blocked.
Manufacturers, hospitals and service firms face escalating extortion threats as organised crime drives most attacks across Australasia.
Security teams are gaining real-time audit trails and controls as eSentire folds the stealth startup's AI monitoring module into Atlas.
The chip aims to ease power and cooling constraints for operators seeking AI systems with tighter supply chain control and domestic manufacturing.
It aims to help engineers close software flaws before pull requests are opened, as AI coding tools accelerate release cycles and security backlogs grow.
Enterprise users should gain tighter control over AI agents, as SAP and NVIDIA link runtime isolation with business authorisation and audit trails.
The update gives security teams a clearer way to map keys, certificates and secrets as regulators push harder on software component visibility.
Enterprise buyers are spending more to secure AI agents, with Snyk saying Evo now drives 60% of new deals and larger contracts.
The funding will help Comp AI expand into continuous monitoring and security testing as software firms face stronger pressure on controls.
Enterprises could gain a way to revoke an AI agent's authority and audit its actions as DigiCert ties identity controls to NVIDIA's platform.