SecurityBrief US - Technology news for CISOs & cybersecurity decision-makers
United States

AppSec Stories

American Stories

AppSec stories

Miggo launches Pulse in bid to speed AI exploit response
Firewalls

Miggo launches Pulse in bid to speed AI exploit response

It aims to cut the time security teams need to spot exploitable flaws and deploy temporary defences before attackers strike.

By Shannon Williams • 4 min read • Last month

Global Stories

AppSec stories

HackerOne links validated flaws to Wiz cloud platform
Digital Transformation

HackerOne links validated flaws to Wiz cloud platform

Security teams may cut backlogs as validated HackerOne flaws are mapped into Wiz, linking exploit evidence to cloud assets for faster prioritisation.

By Sofiah Nichole Salivio • 4 min read • 2 days ago
HackerOne & Wiz link validated findings to cloud risk
Digital Transformation

HackerOne & Wiz link validated findings to cloud risk

Security teams can now rank cloud flaws by exploitability and impact, as validated HackerOne reports feed directly into Wiz's risk graph.

By Sofiah Nichole Salivio • 3 min read • 3 days ago
Sweet launches AI red-team agent to test attack paths
Cloud Security

Sweet launches AI red-team agent to test attack paths

Security teams under pressure to prove real exploitability can now test live production systems for attack paths rather than theoretical flaws.

By Sofiah Nichole Salivio • 4 min read • 3 days ago
Cycode launches agentic development lifecycle security
Application Security

Cycode launches agentic development lifecycle security

Security teams face new risks from AI coding tools as Cycode adds controls for prompts, generated code and unauthorised model use.

By Sean Mitchell • 4 min read • 4 days ago
AI now routine in cyber attacks, Google report finds
Malware

AI now routine in cyber attacks, Google report finds

Security teams face a broader threat as criminals and state-backed actors use generative AI to speed hacks, phishing and malware.

By Joseph Gabriel Lagonsin • 4 min read • 5 days ago
WatchGuard buys Perimeters.io in cloud security push
Data Protection

WatchGuard buys Perimeters.io in cloud security push

MSPs will gain a single platform for cloud threat detection as the deal widens WatchGuard's reach into identity and SaaS security.

By Mark Tarre • 3 min read • 6 days ago
KnowBe4 partners Secure Code Warrior on AI training
Data Protection

KnowBe4 partners Secure Code Warrior on AI training

Organisations using AI in software development will get training on secure coding and governance as vulnerabilities and data risks mount.

By Mark Tarre • 4 min read • Last week
Synack launches Sara AI Pentesting for wider coverage
Data Protection

Synack launches Sara AI Pentesting for wider coverage

The move aims to widen security coverage as firms struggle to test expanding attack surfaces quickly enough.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Causal Dynamics Lab launches Cielara Code for AI coding
DevOps

Causal Dynamics Lab launches Cielara Code for AI coding

It aims to cut wasted search time for coding agents after tests found most of their work was reading files rather than editing code.

By Sofiah Nichole Salivio • 5 min read • Last week
Tenable finds GitHub workflow flaw in Microsoft repo
DevOps

Tenable finds GitHub workflow flaw in Microsoft repo

A flaw in a widely watched Microsoft repository could have let attackers run code and steal secrets through GitHub Actions, Tenable said.

By Mark Tarre • 4 min read • Last week
Cloudflare warns of AI code review prompt injection
Virtual Private Networks

Cloudflare warns of AI code review prompt injection

Detection of malicious code can collapse when AI reviewers are fed large files packed with harmless text, Cloudflare's research shows.

By Sean Mitchell • 5 min read • Last week
Qilin drives 43% rise in ransomware attacks
Ransomware

Qilin drives 43% rise in ransomware attacks

Ransomware activity stayed elevated in March, with NCC Group saying Qilin alone was linked to 136 attacks and drove a 43% monthly rise.

By Catherine Knowles • 4 min read • This month
Intruder launches AI pentesting for faster validation
DevOps

Intruder launches AI pentesting for faster validation

Security teams can now validate scanner findings in minutes as Intruder rolls out AI agents to cut false positives and speed remediation.

By Catherine Knowles • 3 min read • This month
Keeper Security launches Agent Kit for AI coding agents
Virtualisation

Keeper Security launches Agent Kit for AI coding agents

It lets developers use AI coding tools without pasting sensitive credentials into prompts, reducing the risk of secrets leaking into logs or source control.

By Catherine Knowles • 4 min read • This month
Intruder launches AI pentesting to cut vulnerability triage
DevOps

Intruder launches AI pentesting to cut vulnerability triage

Security teams can now validate scanner alerts in minutes as Intruder’s new AI agents cut false positives and speed up triage.

By Sofiah Nichole Salivio • 4 min read • Last month
Cequence launches agent controls for enterprise AI
Data Protection

Cequence launches agent controls for enterprise AI

The release aims to curb a growing security risk as enterprises let autonomous agents into internal apps with broad human-style access.

By Shannon Williams • 4 min read • Last month

Stories from Other Regions

AppSec stories