Supply Chain Security Stories

Global Stories

Supply Chain Security stories

Looking for cyber risk in the wrong places

Software supply chain weaknesses are becoming the main entry point for attackers as development pipelines expand without enough oversight.

By Serkan Cetin • 4 min read • Today

Data Protection

OpenSSL names keynote speakers & sponsors for Prague

Growing scrutiny of cryptographic supply chains is pushing maintainers, researchers and regulators into the same room in Prague this year.

By Sofiah Nichole Salivio • 4 min read • Last week

Data Protection

Google warns AI is reshaping cyber attacks & defences

Attackers are exploiting AI tools to speed intrusions and drain cloud resources, pushing defenders towards machine-speed security operations.

By Sean Mitchell • 4 min read • Last week

Privileged Access Management

Delinea joins Anthropic project to test identity security

It could expose faults in software that governs access to sensitive systems, with no customer data included in the AI-led testing.

By Joseph Gabriel Lagonsin • 3 min read • Last week

Software-as-a-Service

Mandiant warns of AI agents fuelling new attack risks

Autonomous systems are now creating fresh avenues for code theft, remote execution and runaway cloud spending, Mandiant says.

By Sean Mitchell • 3 min read • Last week

Data Protection

Rubrik launches Code Guardian & expands Anthropic ties

The private previews aim to help security teams spot exploitable code chains and connect AI agents to Rubrik's governance tools more safely.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Data Protection

AI systems expose sensitive data in ANZ, report finds

Downstream AI alerts in Australia and New Zealand are rising as agents and MCP links create fresh routes for sensitive data leakage.

By Joseph Gabriel Lagonsin • 4 min read • Last week

Digital Transformation

Beyond the campus perimeter: Why university cyber defence hinges on identity security

The sector faces mounting breach and compliance risk as unmanaged devices, shared logins and stale access undermine campus defences.

By Nam Lam • 5 min read • Last week

Data Protection

EU software makers face new cyber reporting deadlines

Companies selling software into the bloc now have 24 hours to flag exploited flaws, with fines reaching EUR €15 million for delays.

By Joseph Gabriel Lagonsin • 5 min read • Last week

Data Protection

F5 launches AI security to monitor worker tool use

As staff hand more tasks to AI agents, firms need audit trails and policy controls to stop unauthorised access and risky data moves.

By Joseph Gabriel Lagonsin • 4 min read • This month

Internet of Things

EU cyber rules test manufacturers' reporting readiness

Manufacturers face a 24-hour EU reporting deadline only after proving a flaw is in their product and actively exploited, testing their records.

By Sofiah Nichole Salivio • 4 min read • This month

Data Protection

Genetec urges buyers to test vendors for CRA readiness

Buyers of connected security kit face tougher supplier checks as the EU Cyber Resilience Act pushes lifecycle support and disclosure higher on the agenda.

By Sean Mitchell • 4 min read • This month

Security Operations Centres

CyberDockside.ai & HexaShield launch port cyber service

Ports and ship operators face rising regulatory pressure as the new service offers round-the-clock monitoring for critical operational technology.

By Joseph Gabriel Lagonsin • 4 min read • This month

Malware

Google warns of AI-powered cyberattacks in live ops

Defenders now have minutes, not hours, as attackers use agentic AI to automate credential theft, scanning and extortion across live operations.

By Sean Mitchell • 5 min read • This month

Network Security

SentinelOne adds OpenAI GPT-5.6-Cyber to AI services

Security teams could cut manual triage as the new service ranks code and intrusion risks by real-world exploitability, not alert volume.

By Sean Mitchell • 4 min read • This month

Stories from Other Regions

Supply Chain Security stories

Data Protection

ThreatCanary launches sovereign AI security platform

Australian firms could get a clearer view of AI-driven attack paths as ThreatCanary rolls out a platform blending asset discovery, API checks and offensive testing.

By Sean Mitchell • 4 min read • Last week