AppSec Stories - Page 13

American Stories

AppSec stories

OpenAI broadens AI cyber tools as arms race heats up

Ransomware pressure on US firms is intensifying debate over whether broader AI hacking tools will help defenders or aid criminals.

By Sean Mitchell • 4 min read • Fri, 17th Apr 2026

Data Protection

Mythos model sparks warnings over AI cyber threats

Enterprises face faster phishing, deepfakes and automated exploits as security leaders say existing controls lag behind frontier AI models.

By Shannon Williams • 6 min read • Wed, 15th Apr 2026

Global Stories

AppSec stories

DevOps

Chainguard & Cursor tackle AI code supply chain risks

AI coding agents are increasing supply chain risk, prompting new controls to verify third-party dependencies before they reach production.

By Catherine Knowles • 4 min read • Wed, 22nd Apr 2026

DevOps

Tenable flags Microsoft GitHub workflow flaw exposing code

A critical flaw in a widely used Microsoft code-sample repository could have let attackers steal secrets and run code through GitHub issues.

By Sean Mitchell • 4 min read • Wed, 22nd Apr 2026

Data Protection

AI vulnerability discovery forces boards to rethink cyber risk

Boards are being pressed to abandon periodic patching as AI models can now uncover and chain software flaws faster than human teams can respond.

By Kaleah Salmon • 6 min read • Wed, 22nd Apr 2026

Data Protection

LangWatch launches open-source tool for AI red-teaming

The framework is designed to expose hidden risks in production AI systems that can be missed by conventional one-off tests.

By Sean Mitchell • 4 min read • Tue, 21st Apr 2026

Virtualisation

Appdome launches identity-first mobile API protection

Mobile API calls can now be checked against app, device and session identity before access is granted, aiming to curb bot abuse and takeover attempts.

By Catherine Knowles • 4 min read • Fri, 17th Apr 2026

Application Security

AI undermines mobile app obfuscation, says Approov

Businesses relying on obfuscation and embedded secrets in mobile apps may face easier API attacks as AI can mimic legitimate traffic.

By Sean Mitchell • 4 min read • Fri, 17th Apr 2026

Privileged Access Management

Capsule Security raises $7 million to guard AI agents

The Tel Aviv startup says enterprises need runtime controls as AI agents take on more privileged tasks across core business systems.

By Catherine Knowles • 5 min read • Thu, 16th Apr 2026

DevOps

AI coding boom deepens cognitive debt, says Thoughtworks

Rising use of AI assistants is making software harder to understand, prompting teams to revive stricter testing, controls and oversight.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 16th Apr 2026

Firewalls

Cloudflare, Wiz link AI security tools for unified view

Security teams gain a single view of shadow AI as Cloudflare and Wiz connect traffic inspection with cloud asset mapping to spot exposed data.

By Mark Tarre • 4 min read • Thu, 16th Apr 2026

Application Security

OpenAI expands cyber access for verified defenders

Thousands of vetted cybersecurity staff will gain broader access to OpenAI tools as the company loosens safeguards for defensive research.

By Mark Tarre • 4 min read • Thu, 16th Apr 2026

Application Security

Sonatype warns of surge in trusted open-source malware

Attackers hid malware in familiar package workflows, prompting Sonatype to log 21,764 malicious open-source packages in the quarter.

By Shannon Williams • 4 min read • Wed, 15th Apr 2026

Hybrid Cloud

Forrester says Anthropic AI could break patch playbook

Faster AI-led flaw discovery could overwhelm patching and disclosure processes, leaving companies with bigger backlogs and less time to respond.

By Sean Mitchell • 4 min read • Tue, 14th Apr 2026

DevOps

Cloudsmith survey finds SBOM gaps before cyber law

Most engineering teams could struggle to meet EU Cyber Resilience Act reporting deadlines, with many still handling SBOMs manually or only after incidents.

By Catherine Knowles • 4 min read • Fri, 10th Apr 2026