IT Brief UK - Technology news for CIOs & IT decision-makers
United Kingdom

AppSec Stories - Page 4

UK Stories

AppSec stories

Intruder launches AI web app pentesting at lower cost
Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Last month

Global Stories

AppSec stories

CrowdStrike warns of malware targeting AI coding tools
Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Last month
Secure Code Warrior launches AI trust index on code risk
Application Security

Secure Code Warrior launches AI trust index on code risk

Businesses using AI coding tools face repeatable security gaps, as the new index found an average 15 vulnerabilities in each codebase.

By Mark Tarre • 4 min read • Last month
Lineaje launches AI vulnerability elimination factory
Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Last month
Tenable adds code security to its exposure platform
Endpoint Protection

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • Last month
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last month
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Last month
GitLab 19.2 adds AI tools for security & workflows
DevOps

GitLab 19.2 adds AI tools for security & workflows

The update aims to cut review bottlenecks by auto-fixing vulnerable dependencies and surfacing code flaws scanners often miss.

By Joseph Gabriel Lagonsin • 4 min read • Last month
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Last month
CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Targeted open source malware attacks on developers soar
Application Security

Targeted open source malware attacks on developers soar

Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Mandiant warns on exposed Cloud Run serverless apps
Cloud Security

Mandiant warns on exposed Cloud Run serverless apps

Exposed serverless apps can let attackers steal tokens, read secrets and take over cloud projects if weak code is left unpatched.

By Mark Tarre • 4 min read • Last month
Tenable adds app security data to exposure platform
Hybrid Cloud

Tenable adds app security data to exposure platform

Security teams can now rank code flaws against cloud and identity risks after Tenable folded application security data into its exposure platform.

By Mark Tarre • 4 min read • Last month
Approov expands attestation network to fight AI attacks
Security Information and Event Management

Approov expands attestation network to fight AI attacks

Broader coverage in Mexico and Milan aims to cut latency for mobile security checks as fake app traffic grows more sophisticated.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Akamai warns commerce is top target for AI bot attacks
Malware

Akamai warns commerce is top target for AI bot attacks

Nearly half of commerce traffic across Akamai's network came from AI bots by late 2025, raising fraud and DDoS risks for retailers.

By Sean Mitchell • 4 min read • Last month
Checkmarx launches autonomous agents to fix code flaws
Data Protection

Checkmarx launches autonomous agents to fix code flaws

As AI coding speeds up, Checkmarx says its new agents can cut manual vulnerability fixes by up to 70% before code is committed.

By Mark Tarre • 4 min read • Last month

Stories from Other Regions

AppSec stories

The real cost of build vs. buy for agentic AI in regulated banking
Storage

The real cost of build vs. buy for agentic AI in regulated banking

Banks risk repeating DevOps sprawl as DIY agentic AI pushes build costs above USD $1.4 million and delays production by up to 18 months.

By Bryan Ross • 6 min read • Last month