Supply Chain Security stories - Page 4

Editorial compromised software supply chain key token leak dark

Trivy GitHub breach exposes CI/CD supply chain risk

Last month

#

devops

#

cloud security

#

application security

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

Ai assisted code review inclusive dev team modern office

GitLab widens AI access & sets flat review pricing

Last month

#

devops

#

application security

#

devsecops

GitLab opens agentic AI to free-tier users, sets USD $0.25 flat fee for automated code reviews and expands security false-positive filtering.

Editorial security key human approval robotic hand ai server control panels

Yubico & Delinea link AI actions to human approval

Last month

#

data protection

#

hybrid cloud

#

pam

Yubico and Delinea unite hardware keys with identity checks to ensure each high‑risk AI agent action is explicitly approved by a human.

Laptop security scan interface threat detection shield warning malware

Varist launches free malware scanner amid AI threat

Last month

#

cloud security

#

advanced persistent threat protection

#

socs

Iceland-based Varist has launched a free malware scanner that rates suspicious files in seconds to counter fast-evolving AI-driven threats.

Editorial secure server room layered barriers malware blocked shields

OPSWAT founder urges prevention-first cyber defence

Last month

#

malware

#

firewalls

#

ransomware

OPSWAT founder Benny Czarny urges a prevention-first cyber defence in his new book, arguing detection-led tools can no longer keep pace.

Corporate it cloud security automation dashboard server racks

DigiCert posts record Q4 ARR after expansion spree

Last month

#

digital transformation

#

encryption

#

hyperscale

DigiCert reports record Q4 ARR in FY26 as DigiCert ONE platform growth, acquisitions and automation demand drive digital trust expansion.

Hybrid it security control room cloud mac okta github network

BloodHound expands identity attack path mapping reach

Last month

#

data protection

#

encryption

#

pam

SpecterOps broadens BloodHound Enterprise to map identity attack paths across Okta, GitHub and Jamf-managed Macs in hybrid environments.

Isometric cloud security alerts to calm monitoring dashboard network

Miggo & Grafana link runtime security with telemetry

Last month

#

devops

#

cloud security

#

application security

Miggo and Grafana link runtime security to Grafana Cloud telemetry, promising major cuts to critical vulnerability noise for joint users.

Software supply chain security dashboard global infrastructure

Keysight unveils SBOM Manager to meet new cyber rules

Last month

#

application security

#

physical security

#

devsecops

Keysight debuts SBOM Manager to automate software bills of materials as EU and US cyber rules tighten transparency and compliance demands.

Developer workspace secure containers kubernetes cloud diagrams

Chainguard unveils free starter pack for secure images

Last month

#

virtualisation

#

devops

#

cloud security

Chainguard launches a free Catalog Starter pack, giving developers five production-grade secure container images from its vast library.

Sleek enterprise datacenter servers shielded secure blue glow

Lineaje unveils UnifAI to secure enterprise agentic AI

Last month

#

data protection

#

digital transformation

#

application security

Lineaje launches UnifAI, a security and governance layer to centralise control, discovery and policy for enterprise agentic AI deployments.

Isometric secure software pipeline ai agents shielded supply chain

JFrog unveils MCP registry to secure AI coding agents

Last month

#

devops

#

digital transformation

#

application security

JFrog launches an MCP registry to centralise and secure AI coding agents, extending software supply chain controls to agent workflows.

Secure hpe datacenter nvidia gpu private cloud ai shielded infra

TrendAI links with HPE to secure private cloud AI stack

Last month

#

virtualisation

#

data protection

#

private cloud

TrendAI integrates its AI security platform with HPE Private Cloud AI to secure enterprise AI deployments from infrastructure to applications.

Ai data center construction with digital twin secure infra

TrendAI, Nvidia bring digital twin security to AI hubs

Last month

#

firewalls

#

hybrid cloud

#

digital transformation

TrendAI and Nvidia link DSX Air with digital twin security tools so AI datacentre “factories” can be hardened before hardware is built.

Fortified data center ai brain secure autonomous agents lighting

TrendAI & Nvidia boost security for agentic AI tools

Last month

#

cloud security

#

application security

#

advanced persistent threat protection

TrendAI and Nvidia deepen collaboration to embed layered security and governance into OpenShell, protecting long-lived autonomous AI agents.

Modern corporate soc room with source code graphs and risk heatmaps

Secure Code Warrior unveils AI code governance tool

Last month

#

application security

#

devsecops

#

supply chain

Secure Code Warrior launches SCW Trust Agent: AI, giving security teams commit-level visibility and control over AI-influenced code.

Laptop code leaking secrets glowing keyholes cloud data exposure

AI surge drives record secrets sprawl across GitHub

Last month

#

cloud security

#

application security

#

socs

AI-fuelled coding drives record 29 million hardcoded secrets on GitHub in 2025, with leaks from AI tools and services surging sharply.

Secure ai software engineer workstation multi screens cinematic night

Harness unveils AI Security & coding tools for DevSecOps

Last month

#

devops

#

application security

#

advanced persistent threat protection

Harness has launched AI Security and Secure AI Coding tools to spot and block vulnerabilities in AI-powered apps and AI-generated code.

Cinematic secure ops center unified access ai devices glowing vault

1Password debuts Unified Access to secure AI agents

Last month

#

data protection

#

cloud security

#

mdm

1Password unveils Unified Access to secure AI agents and machine credentials, promising endpoint-to-agent visibility for security teams.

Global cybersecurity conference stages rising software risk map

FIRST announces 2026 cyber security conference trio

Last month

#

application security

#

advanced persistent threat protection

#

socs

FIRST to host three cybersecurity conferences in 2026 as it predicts annual CVE disclosures will surpass 50,000 for the first time.