ChannelLife US - Industry insider news for technology resellers
United States

Security vulnerabilities Stories

Global Stories

Security vulnerabilities stories

NCC Group maps security gaps across AI coding agents
Application Security

NCC Group maps security gaps across AI coding agents

Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.

By Sean Mitchell • 4 min read • This month
Check Point report: vulnerabilities drive cyber risk rise
Digital Transformation

Check Point report: vulnerabilities drive cyber risk rise

Security teams are being pushed to prioritise more than ever, as vulnerabilities now make up 42.6% of critical exposures, Check Point says.

By Joseph Gabriel Lagonsin • 3 min read • This month
A strategic blueprint for governing AI-enabled software development
Data Protection

A strategic blueprint for governing AI-enabled software development

Security risks are rising as AI coding tools become routine, leaving many firms unable to track how machine-generated code reaches production.

By Pieter Danhieux • 3 min read • This month
AI-generated code is in production at 44.7% of firms
DevOps

AI-generated code is in production at 44.7% of firms

More than half of engineering teams are now using AI to write code, but weak oversight is leaving security, dependency and performance risks in production.

By Joseph Gabriel Lagonsin • 4 min read • This month
AI infrastructure incidents hit 93%, Spacelift warns
DevOps

AI infrastructure incidents hit 93%, Spacelift warns

Most firms are unprepared for AI-driven infrastructure risk, as Spacelift found only 19% have the governance needed to curb incidents.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AI incidents hit 93% as governance lags, study finds
DevOps

AI incidents hit 93% as governance lags, study finds

Governance gaps are leaving firms exposed, with only 19% meeting the readiness bar as AI-related infrastructure incidents spread across organisations.

By Sean Mitchell • 4 min read • Last month
Planet VPN urges caution over free cybersecurity tools
Data Protection

Planet VPN urges caution over free cybersecurity tools

Users could expose browsing and chatbot data if they trust free security software that quietly monetises information, Planet VPN said.

By Sean Mitchell • 4 min read • Last month
AI coding tools may raise enterprise software risk
DevOps

AI coding tools may raise enterprise software risk

Weaker oversight could turn AI-generated code into a costly drag, with security flaws and technical debt rising in enterprise projects.

By Karen Joy Bacudo • 4 min read • Last month
AI coding tools raise debt & security risks, SIG warns
DevOps

AI coding tools raise debt & security risks, SIG warns

Enterprise teams using AI coding tools may face higher technical debt, security gaps and costs, according to new SIG research.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Broadcom expands Spring security for AI threat surge
Application Security

Broadcom expands Spring security for AI threat surge

Enterprises using Spring will get faster access to validated fixes as Broadcom responds to a 1700% surge in monthly security advisories.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Thoughtworks launches Agent/works for AI governance
Digital Transformation

Thoughtworks launches Agent/works for AI governance

Enterprise teams are getting a single control plane to track agent sprawl, tighten permissions and curb AI spending as autonomous systems spread.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Automotive cyber vulnerabilities surge 105%, PCA says
Cloud Security

Automotive cyber vulnerabilities surge 105%, PCA says

Connected cars face a widening attack surface as PCA flags 265 new flaws in the first quarter, with most exploitable without specialist tools.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Liquibase launches free CVE library for Community users
DevOps

Liquibase launches free CVE library for Community users

Older Liquibase Community users can now check release-by-release vulnerabilities in a free public library covering Docker images and binaries.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Chief information security officers face pressure over flaws
Application Security

Chief information security officers face pressure over flaws

AI-generated code is widening security gaps, with most organisations still shipping vulnerable software and CISOs under pressure to delay fixes.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Forrester finds agentic AI stuck in enterprise pilots
Digital Transformation

Forrester finds agentic AI stuck in enterprise pilots

Most enterprises are still failing to turn agentic AI trials into usable gains, as weak governance and orchestration keep deployments in pilot mode.

By Sean Mitchell • 3 min read • Last month
Anthropic expands Project Glasswing to 150 organisations
Application Security

Anthropic expands Project Glasswing to 150 organisations

The wider rollout targets critical infrastructure and software maintainers after early users found more than 10,000 serious flaws.

By Mark Tarre • 4 min read • Last month

Stories from Other Regions

Security vulnerabilities stories

Alberta uses Claude to scan 466 million lines of code
Data Protection

Alberta uses Claude to scan 466 million lines of code

The province found hidden security flaws in public sector systems in hours, a task officials say could have taken a manual review 6.5 years.

By Mark Tarre • 4 min read • This month
Agoda launches public bug bounty with USD $6,000 reward
Data Protection

Agoda launches public bug bounty with USD $6,000 reward

Researchers can now earn up to USD $6,000 for exposing flaws in Agoda's core web services, APIs and mobile app via HackerOne.

By Sean Mitchell • 4 min read • Last month