Application security and coding requirements

Infosecurity 2025: SMEs feel on their own in the face of cyber attacks

Project findings to be presented at Infosecurity Europe 2025 highlight vulnerability of SMEs to cyber attack Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

The hidden security risks of open source AI

The Security Think Tank considers how CISOs can best plan to facilitate the secure running of AI and Gen AI-based initiatives and ensure employees do not inadvertently leak data or make bad decisions. Continue Reading

By

• Brian Fox, Sonatype

Dutch businesses lag behind in cyber resilience as threats escalate

While non-IT business professionals in the middle of their careers face the most disruption from AI, professionals in the IT services sector and their employers must prepare for change Continue Reading

By

• Kim Loohuis

What VMware’s licensing crackdown reveals about control and risk 

An assessments of the risks VMware customers on perpetual licences now need to consider Continue Reading

By

• Iain Saunderson, CTO, Spinnaker Support

Tackling the UK’s cyber threats

In this week’s Computer Weekly, we report from the National Cyber Security Centre’s annual update on the state of UK security and examine the emerging threats. The chief data officer of Standard Chartered bank discusses preparing for artificial intelligence. We also look at the networking implications of GPU-based AI datacentres. Read the issue now. Continue Reading

CW APAC – Trend Watch: API management

Application programming interfaces are subject to the pros and cons of emerging technologies. In this handbook, focused on API management in the Asia-Pacific region, Computer Weekly looks at governance and security, gateway tools, and strategic approaches to creating an automation framework Continue Reading

Security tests reveal serious vulnerability in government’s One Login digital ID system

A ‘red teaming’ exercise to simulate cyber attacks on the government’s flagship digital identity system has found that One Login can be compromised without detection Continue Reading

By

• Bryan Glick, Editor in chief

Is IPSIE the game changer that SaaS security demands?

It started with an announcement in October 2024, and now it seems the vision of secure identity in the enterprise is becoming a reality. We look at the prospects for IPSIE Continue Reading

By

• Dan Raywood

Enisa launches European vulnerability database

The EU’s new vulnerability database is designed to offer a broader, more transparent source of information on new cyber vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

New security paradigm needed for IT/OT convergence

Industry leaders and policymakers highlight growing cyber threats from the integration of IT and operational technology systems, calling for collaboration and regulatory frameworks to protect critical systems, among other measures Continue Reading

By

• Aaron Tan, Informa TechTarget

May Patch Tuesday brings five exploited zero-days to fix

Microsoft fixes five exploited, and two publicly disclosed, zero-days in the fifth Patch Tuesday update of 2025 Continue Reading

By

• Alex Scroxton, Security Editor

UK government websites to replace passwords with secure passkeys

Government websites are to replace difficult-to-remember passwords with highly secure passkeys that will protect against phishing and cyber attackers Continue Reading

By

• Bill Goodwin, Computer Weekly

Meta awarded $167m in court battle with spyware mercenaries

WhatsApp owner Meta is awarded millions of dollars in damages and compensation after its service was exploited by users of mercenary spyware developer NSO’s infamous Pegasus mobile malware Continue Reading

By

• Alex Scroxton, Security Editor

Europe leads shift from cyber security ‘headcount gap’ to skills-based hiring

Research from Sans Institute reveals European organisations are leading a global shift in hiring priorities, driven by regional regulatory frameworks Continue Reading

By

• Kim Loohuis

Current SaaS delivery model a risk management nightmare, says CISO

JPMorgan Chase security chief Patrick Opet laments the state of SaaS security in an open letter to the industry and calls on software providers to do more to enhance resilience Continue Reading

By

• Alex Scroxton, Security Editor

Kaspersky calls for cyber immunity amid growing cyber threats

The rise of professional cyber crime groups and state-sponsored actors targeting critical infrastructure requires a move towards inherently secure ‘cyber immune’ systems, says Kaspersky CEO Eugene Kaspersky Continue Reading

By

• Aaron Tan, Informa TechTarget

Enterprise strategies for API management

Application programming interfaces are the connective tissue of the modern enterprise, driving innovation and integration. But managing them effectively requires enterprises to consider governance, security and lifecycle management while preparing for emerging threats and technologies like AI Continue Reading

By

• Aaron Tan, Informa TechTarget

Amid uncertainty, Armis becomes newest CVE numbering authority

Amid an uncertain future for vulnerability research, exposure management company Armis has been given the authority to assign CVE IDs to newly discovered vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

AI-powered APIs proving highly vulnerable to attack

The growth of AI is proving a double-edged sword for API security, presenting opportunities for defenders to enhance their resilience, but also more risks from AI-powered attacks, according to report Continue Reading

By

• Alex Scroxton, Security Editor

Top APAC firms recognised at innovation awards

Citic Telecom, CapitaLand Investment and DBS Bank were among the region’s top industry innovators recognised for their digital transformation efforts at the Computer Weekly Innovation Awards APAC 2025 Continue Reading

By

• Aaron Tan, Informa TechTarget

CW Innovation Awards: Transforming cyber security with AI

Facing rising cyber threats and a shortage of experts, Citic Telecom International CPC developed an AI-powered penetration testing tool to automate security audits and reduce costs Continue Reading

By

• Ai Lei Tao

CISA extends Mitre CVE contract at last moment

The US Cybersecurity and Infrastructure Security Agency has ridden to the rescue of the under-threat Mitre CVE Programme, approving a last-minute, 11-month contract extension to preserve the project’s vital security vulnerability work Continue Reading

By

• Alex Scroxton, Security Editor

CVE Foundation pledges continuity after Mitre funding cut

With news that Mitre’s contract to run the world-renowned CVE Programme is abruptly terminating, a breakaway group is setting up a non-profit foundation to try to ensure the project’s continuity Continue Reading

By

• Alex Scroxton, Security Editor

Security leaders grapple with AI-driven threats

Experts warn of AI’s dual role in both empowering and challenging cyber defences, and called for intelligence sharing and the need to strike a balance between AI-driven innovation and existing security practices Continue Reading

By

• Aaron Tan, Informa TechTarget

Mitre warns over lapse in CVE coverage

Mitre, the operator of the world-renowned CVE repository, has warned of significant impacts to global cyber security standards, and increased risk from threat actors, as it emerges its US government contract will lapse imminently Continue Reading

By

• Alex Scroxton, Security Editor

No Complaints About Automating Compliance

I was recently in London recording some podcasts for a Data Centre client, Asanti, and two of the areas we discussed were – surely not – AI and… compliance. It seems to that Asanti’s Co-Lo ... Continue Reading

By

• Steve Broadhead, Broadband Testing

Warranty fraud fuels hidden army of hardware hackers

Widespread warranty fraud is not only costing companies billions but also creating a breeding ground for advanced hardware exploits, warns hardware hacker and researcher Bunnie Huang at Black Hat Asia 2025 Continue Reading

By

• Aaron Tan, Informa TechTarget

Google bets on unifying security tools to ease CISO pain

At Google Cloud Next in Las Vegas, Google launches its Unified Security platform with the goal of bringing together disparate security solutions to help cyber leaders and practitioners address their most keenly felt pain points Continue Reading

By

• Alex Scroxton, Security Editor

Microsoft’s April 2025 bumper Patch Tuesday corrects 124 bugs

Microsoft is correcting 124 vulnerabilities in its March Patch Tuesday, one of which is being actively exploited in the wild, and 11 of which are ‘critical’ Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

It’s time to stop the victim-blaming and insist on safer software

Businesses spend too much time and money protecting themselves against flaws and vulnerabilities in modern software products, when they ought to raise their expectations and insist on better solutions from providers Continue Reading

By

• Mandy Andress, Elastic

NIST calls time on older vulnerabilities amid surging disclosures

The National Institute of Standards and Technology is deferring future updates to thousands of cyber vulnerabilities discovered prior to 2018 amid surging volumes of new submissions Continue Reading

By

• Alex Scroxton, Security Editor

Norway and Nordic financial sector ramps up cyber security

Finans Norge sets up cyber security unit CTSU to support the finance sector in Norway amid increasing threats Continue Reading

By

• Gerard O'Dwyer

ETSI launches first post-quantum encryption standard

European telco standards body launches its first post-quantum cryptography cyber standard, covering the security of critical data and communications Continue Reading

By

• Alex Scroxton, Security Editor

Will DeepSeek force us to take application security seriously?

The rise of DeepSeek has prompted the usual well-documented concerns around AI, but also raised worries about its potential links to the Chinese state. The Security Think Tank considers the steps security leaders can take to counter threats posed by nation state industrial espionage? Continue Reading

By

• Mike Gillespie and Ellie Hurst

UK under-prepared for catastrophic cyber attack

In this week’s Computer Weekly, MPs have been told the UK is under-prepared to cope with a catastrophic cyber attack – we find out where the problems lie. Our new buyer’s guide assesses the challenges of datacentre capacity planning. And one of the UK’s most successful businessmen, Sir Martin Sorrell, gives his view on the risks and opportunities of AI. Read the issue now. Continue Reading

Seaco charts course for unified security strategy

Shipping container leasing giant consolidates security tools onto a single platform, leveraging AI and extended detection and response to improve security operations Continue Reading

By

• Aaron Tan, Informa TechTarget

iPhone, iPad update fixes critical WebKit flaw

iPhone and iPad users are advised to update their devices as Apple addresses an out-of-bounds write issue in the WebKit browser engine that appears to have been exploited in targeted cyber attacks Continue Reading

By

• Alex Scroxton, Security Editor

March Patch Tuesday brings 57 fixes, multiple zero-days

The third Patch Tuesday of 2025 brings fixes for 57 flaws and a hefty number of zero-days Continue Reading

By

• Alex Scroxton, Security Editor

UK government under-prepared for catastrophic cyber attack, hears PAC

The Commons Public Accounts Committee heard government IT leaders respond to recent National Audit Office findings that the government’s cyber resilience is under par Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Singapore IT leaders boost AI security defences

Study reveals a surge in perceived importance of artificial intelligence for cyber security in Singapore, but declining investment in traditional measures raises concerns as sophisticated cyber attacks intensify Continue Reading

By

• Aaron Tan, Informa TechTarget

Norway says ‘no way’ to global financial crime

Oslo’s startup ecosystem is fighting back against cyber criminals with tech to wipe out attacks rather than just detect them Continue Reading

By

• Matthew Staff

Going beyond search: Elastic’s observability and security play

Elastic’s chief product officer Ken Exner talks up the company’s expansion into observability and security and how it balances innovation with community contributions and monetisation Continue Reading

By

• Aaron Tan, Informa TechTarget

Aussie businesses ramp up security spending

Australian organisations are set to spend A$6.2bn on security and risk management in 2025, a 14.4% jump from the previous year, driven by the rise of AI and a growing threat landscape Continue Reading

By

• Aaron Tan, Informa TechTarget

Secure software: Third-party suppliers your first-party risk

Outgoing CISA chief Jen Easterly called on buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what best practice for secure software procurement looks like in 2025 Continue Reading

By

• Ejona Preci, Lindal Group

CVE volumes head towards 50,000 in 2025, analysts claim

Many trends, notably a big shift to open source tools, are behind an expected boom in the number of disclosed vulnerabilities Continue Reading

By

• Alex Scroxton, Security Editor

What is application allowlisting?

Application allowlisting, previously known as 'application whitelisting,' is the practice of specifying an index of approved software applications or executable files that are permitted to be present and active on a computer system. Continue Reading

By

• Mary E. Shacklett, Transworld Data
• Brien Posey
• Peter Loshin, Former Senior Technology Editor

Watchdog approves Sellafield physical security, but warns about cyber

The Office for Nuclear Regulation has taken Sellafield out of special measures for physical security, but harbours cyber security concerns Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Lenovo CSO: AI adoption fuels security paranoia

Doug Fisher, Lenovo’s chief security officer, outlines the company’s approach to security and AI governance, and the importance of having a strong security culture to combat cyber threats amplified by the use of AI Continue Reading

By

• Aaron Tan, Informa TechTarget

Government renames AI Safety Institute and teams up with Anthropic

Addressing the Munich Security Conference, UK government technology secretary Peter Kyle announces a change to the name of the AI Safety Institute and a tie-up with AI company Anthropic Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Microsoft’s February 2025 Patch Tuesday corrects 57 bugs, three critical

Microsoft is correcting 57 vulnerabilities in its February Patch Tuesday, two of which are being actively exploited in the wild, and three of which are ‘critical’ Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Google: Cyber crime meshes with cyber warfare as states enlist gangs

A report from the Google Threat Intelligence Group depicts China, Russia, Iran and North Korea as a bloc using cyber criminal gangs to attack the national security of western countries Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Secure software procurement in 2025: A call for accountability

Outgoing CISA chief Jen Easterly called on buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what best practice for secure software procurement looks like in 2025. Continue Reading

By

• Robert Campbell, PA Consulting

US lawmakers move to ban DeepSeek AI tool

US politicians have introduced a bill seeking to ban the use of the DeepSeek AI tool on government-owned devices, citing national security concerns due to its alleged links to the Chinese state Continue Reading

By

• Alex Scroxton, Security Editor

What is Internet Key Exchange (IKE)?

Internet Key Exchange (IKE) is a standard protocol used to set up a secure and authenticated communication channel between two parties via a virtual private network (VPN). Continue Reading

By

• Gavin Wright
• Andrew Zola
• Alexander S. Gillis, Technical Writer and Editor

“Unsafe At Any Speed”. Comparing automobiles to code risk

Outgoing CISA chief Jen Easterly called on buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what best practice for secure software procurement looks like in 2025. Continue Reading

By

• Tyler Shields

Vigilant buyers are the best recipe for accountable suppliers

In January 2025, outgoing CISA chief Jen Easterly called on IT buyers to demand better security standards from their software suppliers. The Security Think Tank considers what better means, and what does best practice for secure software procurement looks like in 2025. Continue Reading

By

• Aditya K Sood, Aryaka

AI jailbreaking techniques prove highly effective against DeepSeek

Researchers at Palo Alto have shown how novel jailbreaking techniques were able to fool breakout GenAI model DeepSeek into helping to create keylogging tools, steal data, and make a Molotov cocktail Continue Reading

By

• Alex Scroxton, Security Editor

How government hackers are trying to exploit Google Gemini AI

Google’s threat intel squad has shared information on how nation state threat actors are attempting to exploit its Gemini AI tool for nefarious ends Continue Reading

By

• Alex Scroxton, Security Editor

APAC businesses face surge in email attacks

Sophisticated phishing and business email compromise campaigns are increasingly targeting organisations across the Asia-Pacific region, research reveals Continue Reading

By

• Aaron Tan, Informa TechTarget

Cyber security dovetails with AI to lead 2025 corporate IT investment

Cyber security and GenAI top enterprise IT investment plans for 2025, whether singly or together, according to research from Enterprise Strategy Group Continue Reading

By

• Brian McKenna, Enterprise Applications Editor

Biggest Patch Tuesday in years sees Microsoft address 159 vulnerabilities

The largest Patch Tuesday of the 2020s so far brings fixes for more than 150 CVEs ranging widely in their scope and severity – including eight zero-day flaws Continue Reading

By

• Alex Scroxton, Security Editor

Top 10 cyber security stories of 2024

Data breaches, data privacy and protection, and the thorny issue of open source security were all hot topics this year. Meanwhile, security companies frequently found themselves hitting the headlines, and not always for good reasons. Here are Computer Weekly's top 10 cyber security stories of 2024 Continue Reading

By

• Alex Scroxton, Security Editor

CISOs: Don’t rely solely on technical defences in 2025

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Deepti Gopal, Gartner

Dangerous CLFS and LDAP flaws stand out on Patch Tuesday

Microsoft has fixed over 70 CVEs in its final Patch Tuesday update of the year, and defenders should prioritise a zero-day in the Common Log File System Driver, and another impactful flaw in the Lightweight Directory Access Protocol Continue Reading

By

• Alex Scroxton, Security Editor

iOS vuln leaves user data dangerously exposed

Jamf threat researchers detail an exploit chain for a recently patched iOS vulnerability that enables a threat actor to steal sensitive data, warning that many organisations are still neglecting mobile updates Continue Reading

By

• Alex Scroxton, Security Editor

Six trends that will define cyber through to 2030

From Covid-19 to war in Ukraine, SolarWinds Sunburst, Kaseya, Log4j, MOVEit and more, the past five years brought cyber to mainstream attention, but what comes next? The Computer Weekly Security Think Tank looks ahead to the second half of the 2020s Continue Reading

By

• Pierre-Martin Tardif, ISACA

Nordics move to deepen cyber security cooperation

Nordic countries are increasing collaboration on cyber security amid more sophisticated and aggressive attacks Continue Reading

By

• Gerard O'Dwyer

Curing cancer with computers

In this week’s Computer Weekly, we go behind the scenes at the Francis Crick Institute to find out how data science and AI support its groundbreaking medical research. As courts on both sides of the Atlantic target Google, we analyse the legal threats for Big Tech. And our latest buyer’s guide examines cloud and object storage. Read the issue now. Continue Reading

Automated patch management: A proactive way to stay ahead of threats

Timely patch management should be crucial in any organisation, but too often it goes by the wayside. Automating the process may offer a path forward for hard-pressed cyber defenders Continue Reading

By

• Isla Sibanda

What is obfuscation and how does it work?

Obfuscation means to make something difficult to understand. Programming code is often obfuscated to protect intellectual property or trade secrets, and to prevent an attacker from reverse engineering a proprietary software program. Continue Reading

By

• Rahul Awati
• Ben Lutkevich, Site Editor

Scientists demonstrate Pixelator deepfake image verification tool

With the age of deepfake imagery upon us, a team led by York St John University researchers has created a tool to help people ‘navigate the fine line between reality and fabrication’ Continue Reading

By

• Alex Scroxton, Security Editor

Russian threat actors poised to cripple power grid, UK warns

UK government escalates cyber rhetoric in a speech at a Nato event, saying Russian advanced persistent threats stand ready to conduct cyber attacks that could ‘turn off the lights for millions’ Continue Reading

By

• Alex Scroxton, Security Editor

Apple addresses two iPhone, Mac zero-days

Two zero-day vulnerabilities uncovered in Apple’s operating systems could have allowed for arbitrary code execution and cross-site scripting attacks Continue Reading

By

• Alex Scroxton, Security Editor

CW APAC – Trend Watch: Modernising security operations

Organisations everywhere know the risks of cyber security complacency. In this handbook, focused on modernising security operations in the Asia-Pacific region, Computer Weekly looks at how Australia is bolstering its defences, Splunk and Cisco’s integration, and Palo Alto Networks’ ‘precision AI’. Continue Reading

Microsoft fixes 89 CVEs on penultimate Patch Tuesday of 2024

High-profile vulns in NTLM, Windows Task Scheduler, Active Directory Certificate Services and Microsoft Exchange Server should be prioritised from November’s Patch Tuesday update Continue Reading

By

• Alex Scroxton, Security Editor

Zero-day exploits increasingly sought out by attackers

Threat actors increasingly favour zero-day exploits to attack their victims before patches become available, according to the NCSC and CISA, which have just published a list of the most widely used vulnerabilities of 2023 Continue Reading

By

• Alex Scroxton, Security Editor

Innovating with weather data at the Met Office

In this week’s Computer Weekly, we find out how the Met Office is using its vast stores of weather data to create innovative new products. Our latest buyer’s guide looks into identity and access management systems. And we examine the geopolitical threats that could curb the openness of open source. Read the issue now. Continue Reading

Virtual collaboration within and across industries – promises and challenges

New technologies enable intuitive and realistic visual and auditory landscapes that put users within applications. We look at which industries will likely illustrate the impact of virtual collaboration in commercial environments Continue Reading

By

• Martin Schwirn, Computer Weekly

Inside Google Cloud’s secure AI framework

Google Cloud’s secure AI framework that’s integrated into its Vertex AI platform offers practical tools and guidance to manage the lifecycle, data governance and operational risks of AI Continue Reading

By

• Aaron Tan, Informa TechTarget

Dutch critical infrastructure at risk despite high leadership confidence

Stark paradox in Dutch cyber security landscape has business leaders expressing high confidence in their IT infrastructure as cyber attacks rise Continue Reading

By

• Kim Loohuis

Danish government reboots cyber security council amid AI expansion

Denmark’s government relaunches digital security initiative to protect business sectors and society at large Continue Reading

By

• Gerard O'Dwyer

Can AI be secure? Experts discuss emerging threats and AI safety

International cyber security experts call for global cooperation and proactive strategies to address the security challenges posed by artificial intelligence Continue Reading

By

• Aaron Tan, Informa TechTarget

Reinventing security operations for the modern threat landscape

The growing pace of digital transformation has opened new avenues for attackers, making traditional security measures obsolete. Organisations must modernise their security operations to fortify their defences and navigate the evolving threat landscape Continue Reading

By

• Aaron Tan, Informa TechTarget

How Zoom is charting its course towards an AI-first platform

Zoom CEO Eric Yuan talks up his vision for the future of work, the company's transition to an AI-powered platform and what it is doing to stay ahead of rivals Continue Reading

By

• Aaron Tan, Informa TechTarget

Five zero-days to be fixed on October Patch Tuesday

Stand-out vulnerabilities in Microsoft’s latest Patch Tuesday drop include problems in Microsoft Management Console and the Windows MSHTML Platform Continue Reading

By

• Alex Scroxton, Security Editor

Cups Linux printing bugs open door to DDoS attacks, says Akamai

The Cups Linux printing vulnerabilities disclosed at the end of September would seem to have a nasty sting in their tail, according to researchers at Akamai Continue Reading

By

• Alex Scroxton, Security Editor

The cyber industry needs to accept it can't eliminate risk

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Paul Lewis, Nominet

Printing vulnerability affecting Linux distros raises alarm

Security pros need to get in front of a series of vulnerabilities affecting the Cups Linux printing service after an apparently botched disclosure process saw technical details published in advance of a patch Continue Reading

By

• Alex Scroxton, Security Editor

CrowdStrike apologises to US government for global mega-outage

CrowdStrike executive Adam Meyers appears before a US government committee to explain the series of errors that led directly to one of the biggest IT outages in history Continue Reading

By

• Alex Scroxton, Security Editor

Splunk and Cisco integration moving apace

Splunk is rapidly integrating with Cisco’s technology to enable seamless transitions between their platforms while delivering advanced threat detection capabilities Continue Reading

By

• Aaron Tan, Informa TechTarget

Microsoft shares progress on Secure Future Initiative

Microsoft has published a progress report on its Secure Future Initiative, launched last year in the wake of multiple security incidents, and made a series of commitments to improve its internal cyber culture Continue Reading

By

• Alex Scroxton, Security Editor

Security Think Tank: Win back lost trust by working smarter

The Computer Weekly Security Think Tank panel considers incident response in the wake of the July CrowdStrike incident, sharing their views on what CrowdStrike got wrong, what it did right, and next steps Continue Reading

By

• Vladimir Jirasek, Foresight Cyber

Gartner: Mitigating security threats in AI agents

Agents represent a step-change in the use of artificial intelligence in the enterprise - as attendees at Salesforce's annual conference saw first hand this month - but do not come without their risks Continue Reading

By

• Avivah Litan, Gartner

First CyberBoost Catalyse startup cohort named

The first group of companies named to a cyber incubator programme run by Plexal and the National University of Singapore includes two growing UK businesses Continue Reading

By

• Alex Scroxton, Security Editor

Cyber workforce must almost double to meet global talent need

Research from ISC2 finds global cyber workforce needs additional 4.8 million people to fully secure businesses Continue Reading

By

• Clare McDonald, Business Editor

How Sonar is elevating code quality in the age of AI

Sonar’s code quality platform helps developers maintain secure, high-quality code amid the rise of artificial intelligence-based coding assistants, now expanding into the Asian market Continue Reading

By

• Aaron Tan, Informa TechTarget

JFrog and GitHub unveil open source security integrations

Secure software specialist JFrog is working with code development service GitHub to integrate the onboard capabilities of its Software Supply Chain Platform service into GitHub’s platform Continue Reading

By

• Alex Scroxton, Security Editor

Multiple Veeam vulns spark concern among defenders

Veeam users are urged to patch a series of vulnerabilities in the firm’s Backup & Replication product to get out ahead of potential exploitation by ransomware gangs Continue Reading

By

• Alex Scroxton, Security Editor

PyPI loophole puts thousands of packages at risk of compromise

Thousands of PyPI packages are at risk of an attack technique dubbed Revival Hijack, which exploits a loophole in the platform’s package naming feature Continue Reading

By

• Alex Scroxton, Security Editor

Study highlights secure software supply chain best practices

Security trends report from open source firm shows the approaches IT leaders take to secure their software supply chain Continue Reading

By

• Cliff Saran, Managing Editor