AppSec stories
Millions of downloads were exposed to silent code execution as a flaw in Hugging Face Transformers let malicious models run on load.
The rollout aims to help customers tame rising AI-driven complexity as Datadog adds autonomous monitoring, security and agent oversight tools.
Rising demand for secure AI software development has prompted Sonatype to expand its leadership team and scale operations globally.
The partnership could help uncover critical flaws faster as AI-driven attacks and machine identities raise the stakes for infrastructure security.
Independent tests are giving APAC buyers a clearer basis to compare cloud WAAP products as web and API attacks intensify.
The partnership could speed up flaw detection and patching for critical software used by businesses and public sector organisations across the region.
Pressure to curb AI costs and improve returns is pushing Asia Pacific organisations towards multi-model deployment strategies across the software lifecycle.
Personalised prompts will now be triggered by risky AI-assisted code, as firms seek earlier controls on developer behaviour and data exposure.
Developers using npm could have secrets exposed as 176 malicious packages were set up to hijack dependency resolution and run postinstall malware.
The registry is tightening checks after malicious uploads exposed a gap between declared skill purpose and actual behaviour.
Early access to Anthropic's Mythos in Australia is helping Rubrik scan its code for flaws before attackers can exploit them.
Developers can now manage multiple AI coding agents in one place as GitHub tests a desktop Copilot app with worktree automation and review tools.
Rising vulnerability volumes are outpacing fix times, prompting HackerOne to roll out an AI system that feeds confirmed threats into developer tools.
Security teams can now apply the same rules to AI-generated code across development and deployment, as Salt broadens its platform to curb flaws earlier.
Businesses adopting AI now face a single service aimed at filling gaps in governance, monitoring and incident response across workflows.
AI-driven vulnerability scanning is forcing firms to rethink complacency as Check Point says existing defences still help against Mythos.
Companies can now tie AI code-use risks to developer training, with Secure Code Warrior aiming to prove compliance at commit level.
The restricted model could speed up vulnerability fixes across Cohesity's platform as AI intensifies both attack and defence in critical software.
The platform aims to speed application security reviews by about 20% while keeping expert testers in charge of final findings.
The survey also found most firms still lack secrets scanning and rapid audit proof, leaving hidden credentials and compliance delays as weak spots.
