ChannelLife US - Industry insider news for technology resellers
United States

AppSec Stories

American Stories

AppSec stories

Global Stories

AppSec stories

CrowdStrike links PhantomRaven malware to bug bounty hunter
Malware

CrowdStrike links PhantomRaven malware to bug bounty hunter

The stealer's use of typosquatted npm packages has raised fears that bug bounty channels are being abused to monetise stolen developer data.

By Sean Mitchell • 4 min read • Last week
Secure Code Warrior launches Citizen AI training programme
Data Protection

Secure Code Warrior launches Citizen AI training programme

With most firms using AI in daily work but few staff ready for it, the programme targets non-developers handling sensitive data and automations.

By Joseph Gabriel Lagonsin • 3 min read • Last week
Rubrik launches Code Guardian & expands Anthropic ties
Data Protection

Rubrik launches Code Guardian & expands Anthropic ties

The private previews aim to help security teams spot exploitable code chains and connect AI agents to Rubrik's governance tools more safely.

By Joseph Gabriel Lagonsin • 4 min read • Last week
EU software makers face new cyber reporting deadlines
Data Protection

EU software makers face new cyber reporting deadlines

Companies selling software into the bloc now have 24 hours to flag exploited flaws, with fines reaching EUR €15 million for delays.

By Joseph Gabriel Lagonsin • 5 min read • Last week
Google warns cyber attackers are moving to agentic AI
Malware

Google warns cyber attackers are moving to agentic AI

Attackers are compressing intrusions into hours, leaving defenders less time to spot and stop credential-harvesting campaigns.

By Sean Mitchell • 3 min read • This month
Governance controls are crucial for AI adoption and modernisation
Data Protection

Governance controls are crucial for AI adoption and modernisation

Trusted partners and tighter guardrails are becoming essential as AI agents expand the attack surface and put data sovereignty on the line.

By Anthony Caruana • 5 min read • This month
Checkmarx joins Anthropic's Project Glasswing on defence
Application Security

Checkmarx joins Anthropic's Project Glasswing on defence

The collaboration could help security teams spot flaws before attackers exploit them, as exploitations increasingly happen on or before disclosure.

By Sean Mitchell • 3 min read • This month
RevEng.AI launches binary analysis models for code
Application Security

RevEng.AI launches binary analysis models for code

Security teams could get clearer visibility into compiled software, as RevEng.AI's new models aim to spot risks without source code.

By Joseph Gabriel Lagonsin • 4 min read • This month
Cycode launches agentic code scanning & attack chaining
DevOps

Cycode launches agentic code scanning & attack chaining

Security teams could see fewer false positives and faster fixes as Cycode's new system blends rule-based checks with AI to trace attack paths.

By Joseph Gabriel Lagonsin • 4 min read • This month
JFrog launches AI-era security tools for software supply
DevOps

JFrog launches AI-era security tools for software supply

As AI coding agents speed up development, JFrog is adding controls meant to keep governance, compliance and patching from lagging.

By Sean Mitchell • 6 min read • This month
TiDB clears security review & names CISO Robert Wood
Data Protection

TiDB clears security review & names CISO Robert Wood

Independent testing found no critical, high or medium flaws in TiDB's platform as database buyers demand stronger proof of security.

By Joseph Gabriel Lagonsin • 4 min read • This month
AI closes vulnerability window as zero-day exploits surge
Network Security

AI closes vulnerability window as zero-day exploits surge

Machine-speed discovery is shrinking defenders' lead time, as AI now uncovers obscure flaws and turns them into exploits before patches land.

By Pascal Geenens • 7 min read • This month
Westcon-Comstor signs Sonar deal across EMEA & APAC
Hybrid Cloud

Westcon-Comstor signs Sonar deal across EMEA & APAC

Partners across EMEA and APAC gain a route into AI coding and DevSecOps projects as SonarQube checks aim to cut security and governance risks.

By Sean Mitchell • 4 min read • This month
AI-generated cyber attacks to hit firms soon, warn experts
Multi-factor authentication

AI-generated cyber attacks to hit firms soon, warn experts

Many firms lack the capacity to fix existing flaws fast enough, leaving them exposed as AI-generated attacks scale up, experts warn.

By Joseph Gabriel Lagonsin • 6 min read • This month
Broadcom launches TrueSource for secure open source
Cloud Security

Broadcom launches TrueSource for secure open source

Customers will get human-verified open source fixes as Broadcom expands Spring security coverage and counters risks from AI-generated patches.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

AppSec stories

Protectt.ai launches MCP security solution for BFSI
Data Protection

Protectt.ai launches MCP security solution for BFSI

Banks face new exposure from AI agents linking to internal systems, as the platform aims to block data leaks and unauthorised actions.

By Joseph Gabriel Lagonsin • 3 min read • This month
Simple but secure: solving blockchain's biggest UX challenge
Crypto

Simple but secure: solving blockchain's biggest UX challenge

Blockchain apps risk losing new users unless developers simplify approvals and signing while keeping private keys and transactions secure.

By Ibraheem Kabir • 5 min read • Last month