SecurityBrief UK - Technology news for CISOs & cybersecurity decision-makers
United Kingdom

AppSec Stories - Page 2

UK Stories

AppSec stories

Global Stories

AppSec stories

Secure Code Warrior launches AI adoption model for CISOs
Digital Transformation

Secure Code Warrior launches AI adoption model for CISOs

Security chiefs are being given a framework to curb risks as AI spreads through coding, no-code tools and autonomous software workflows.

By Joseph Gabriel Lagonsin • 4 min read • Last month
NCC Group joins OpenAI Daybreak cyber partner programme
Network Infrastructure

NCC Group joins OpenAI Daybreak cyber partner programme

The tie-up gives NCC Group early access to GPT-5.5-Cyber, as OpenAI seeks trusted testers for defensive uses of its cyber tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Your annual penetration testing is already out of date
Data Protection

Your annual penetration testing is already out of date

Organisations risk missed exposures as cloud, APIs and AI systems change far faster than annual security checks can keep up.

By Richard Ford • 5 min read • Last month
Checkmarx named leader in Gartner supply chain quadrant
Application Security

Checkmarx named leader in Gartner supply chain quadrant

Enterprise buyers are treating software supply chain security as a standalone priority as Gartner creates a dedicated Magic Quadrant for the category.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Dify flaws expose cross-tenant AI data, Zafran says
Application Security

Dify flaws expose cross-tenant AI data, Zafran says

Users of Dify's cloud service could have had private chats and files exposed after Zafran Security disclosed four flaws in the AI platform.

By Mark Tarre • 4 min read • Last month
Chainguard named Gartner leader in software supply security
Cloud Security

Chainguard named Gartner leader in software supply security

The recognition underlines rising demand for tools that secure software builds before attackers can exploit open source dependencies and pipelines.

By Mark Tarre • 4 min read • Last month
F5 launches AI security platform, buys SurePath AI
Private Cloud

F5 launches AI security platform, buys SurePath AI

Security teams are being offered new tools to track shadow AI and block prompt injection as enterprises rush to deploy agents and models.

By Sean Mitchell • 4 min read • Last month
Secure Code Warrior launches AI adoption model for CISOs
Robotics

Secure Code Warrior launches AI adoption model for CISOs

Growing AI use in coding is widening software risk, forcing security leaders to match training and controls to each adoption stage.

By Sean Mitchell • 4 min read • Last month
Explainer: How loop engineering is changing coding
DevOps

Explainer: How loop engineering is changing coding

By focusing on evidence and small reversible changes, loop engineering could curb costly AI coding mistakes before they reach production.

By Mark Tarre • 8 min read • Last month
IBM joins OpenAI cyber programme with app security tool
Cloud Security

IBM joins OpenAI cyber programme with app security tool

Enterprise security teams gain a new AI-assisted way to spot exploitable code flaws, as IBM widens its cyber work with OpenAI.

By Sean Mitchell • 4 min read • Last month
JFrog named leader in Gartner's software security quadrant
Hybrid Cloud

JFrog named leader in Gartner's software security quadrant

The recognition comes as firms scramble to secure software pipelines, open-source code and AI assets against rising supply chain attacks.

By Mark Tarre • 4 min read • Last month
OpenAI expands Daybreak with patching tools & partners
Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Last month
GitGuardian launches endpoint protection for laptops
Endpoint Protection

GitGuardian launches endpoint protection for laptops

A single compromised laptop can expose thousands of live keys, according to GitGuardian's early field tests, as attacks shift to developer machines.

By Sofiah Nichole Salivio • 4 min read • Last month

Stories from Other Regions

AppSec stories

DevOps breaches hit tech firms in trust chain attacks
Malware

DevOps breaches hit tech firms in trust chain attacks

Tech and software groups are most at risk as breaches, supplier access and stale credentials let attackers reach source code and customer data.

By Mark Tarre • 4 min read • Last month
Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Last month
A10 Networks buys TrojAI to boost AI security tools
Hybrid Cloud

A10 Networks buys TrojAI to boost AI security tools

The deal gives customers red teaming and runtime protection for AI systems as enterprises rush to secure models and autonomous agents.

By Joseph Gabriel Lagonsin • 4 min read • Last month
eSentire launches Atlas Preempt for continuous testing
Data Protection

eSentire launches Atlas Preempt for continuous testing

Continuous attack testing aims to help customers spot exploitable gaps before criminals do, including misconfigurations hiding outside core systems.

By Sean Mitchell • 4 min read • Last month