IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

AppSec Stories - Page 3

UK Stories

AppSec stories

The shadow identity crisis: Who let the agents in?
Digital Transformation

The shadow identity crisis: Who let the agents in?

Security chiefs face a widening breach risk as most firms plan to use AI agents, yet barely a third feel ready to secure them properly.

By Evgeny Zaretskov • 5 min read • Last month

Global Stories

AppSec stories

Qualys adds governance to TotalAI for AI risk control
Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Secure.com appoints Brown Hill to lead Americas sales
Digital Transformation

Secure.com appoints Brown Hill to lead Americas sales

The cybersecurity group is widening its Americas push as it seeks more customers and partners for its AI-focused platform.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Reco adds live AI runtime controls for browser use
Digital Transformation

Reco adds live AI runtime controls for browser use

Security teams can now block risky AI prompts in real time as Reco expands its platform from visibility into browser-level enforcement.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Miggo launches rapid defence layer for active exploits
Application Security

Miggo launches rapid defence layer for active exploits

Security teams can now block newly disclosed flaws in minutes, as Miggo's tool adds temporary protection while patches are still being deployed.

By Sofiah Nichole Salivio • 4 min read • Last month
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Last month
Checkmarx launches Fusion hybrid scanning tool for AI code
Cloud Security

Checkmarx launches Fusion hybrid scanning tool for AI code

The hybrid system aims to help security teams spot serious flaws in AI-generated code faster, as production code becomes harder to review.

By Mark Tarre • 4 min read • Last month
Netskope says downstream AI data breaches are surging
Malware

Netskope says downstream AI data breaches are surging

Downstream AI data leaks have more than doubled in a year, with connected services now returning unauthorised information to staff and agents.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Felk warns AI is fuelling attacks on smaller firms
Malware

Felk warns AI is fuelling attacks on smaller firms

Smaller firms face faster and costlier breaches as AI cuts the time hackers need to exploit software flaws from weeks to hours.

By Sean Mitchell • 4 min read • Last month
Ossprey raises USD $2.65 million for supply chain security
Application Security

Ossprey raises USD $2.65 million for supply chain security

The round will fund hiring, product work and overseas growth as investors back tools to counter AI-driven software supply chain risks.

By Sean Mitchell • 4 min read • Last month
OpenAI models hacked Hugging Face in security test
Cloud Security

OpenAI models hacked Hugging Face in security test

The breach highlights how autonomous AI can turn live testing into a real attack path, exposing internal data and credentials.

By Sofiah Nichole Salivio • 5 min read • Last month
Google makes CodeMender available in its Gemini security models
Private Cloud

Google makes CodeMender available in its Gemini security models

Developers may get patched code faster as Google's preview agent scans repositories, tests exploits and drafts fixes for review.

By Mark Tarre • 4 min read • Last month

Stories from Other Regions

AppSec stories

Saviynt tops USD $300 million ARR with Zuma launch
Data Protection

Saviynt tops USD $300 million ARR with Zuma launch

New controls for AI agents and machine identities come as Saviynt passes USD $300 million in annual recurring revenue, with bookings up more than 80%.

By Karen Joy Bacudo • 4 min read • Last month
NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Last month
Autonomous OpenAI agents breach Hugging Face in test
Robotics

Autonomous OpenAI agents breach Hugging Face in test

Security teams are reassessing AI access controls after autonomous models exploited an unknown flaw and moved laterally inside a real system.

By Sofiah Nichole Salivio • 6 min read • Last month
Synack study finds major blind spots in security testing
Data Protection

Synack study finds major blind spots in security testing

Fast-moving corporate systems are outpacing scheduled checks, leaving many firms with security gaps that can persist for days or weeks.

By Sean Mitchell • 4 min read • Last month
Harness launches tools to manage AI agents lifecycle
DevOps

Harness launches tools to manage AI agents lifecycle

Only 8% of organisations have agentic AI in production, highlighting the governance gap Harness aims to close with its new tools.

By Sean Mitchell • 4 min read • Last month