Container Security stories
Enterprises can now vet open-source dependencies before build time, as the catalogue adds independent malware and vulnerability checks for Python and Java.
Developers can now pull thousands of hardened container images for free, as the company drops registration and expands access across its library.
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
Developers can now isolate AI-generated code and user scripts inside Cloud Run, reducing the risk of exposing credentials or host data.
The endorsement may help Tenable win buyers as security teams weigh AI risks alongside cloud, identity and container exposures.
The beta aims to stop unauthorised AI tools on corporate devices from reaching cloud services, repositories and production systems.
Enterprise buyers are treating software supply chain security as a standalone priority as Gartner creates a dedicated Magic Quadrant for the category.
Users of Dify's cloud service could have had private chats and files exposed after Zafran Security disclosed four flaws in the AI platform.
The recognition underlines rising demand for tools that secure software builds before attackers can exploit open source dependencies and pipelines.
Government agencies will gain wider access to application security tools as the partnership places Checkmarx products on Carahsoft's procurement channels.
Government buyers will gain wider access to Checkmarx tools as Carahsoft opens procurement routes through reseller networks and federal contracts.
Customers will be able to buy software supply chain security with advisory and managed services as NetRise widens its route to market through partners.
Older Liquibase Community users can now check release-by-release vulnerabilities in a free public library covering Docker images and binaries.
The update aims to simplify security operations as enterprises grapple with unmanaged devices, partners and multi-cloud workloads across AI projects.
Developers and enterprise customers will get more AI controls as Microsoft adds agents, in-house models and security tools across its software stack.
Cisco Cloud Control users will gain live cloud and AI risk data as the partnership aims to cut time spent switching between security tools.
The new service aims to help firms keep pace as AI-powered criminals automate attacks faster than security teams can patch flaws.
Mid-market security teams can now get permanent vulnerability and cloud checks free, easing access to tools often priced for larger enterprises.
The conference will put Scotland's AI talent, security and infrastructure under the spotlight as debate over governance and control intensifies.
A JFrog study says weak package and container defences are leaving Indian organisations exposed as AI use adds new checks for developers.