SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

AppSec Stories - Page 4

Canadian Stories

AppSec stories

Global Stories

AppSec stories

Explainer: How loop engineering is changing coding
DevOps

Explainer: How loop engineering is changing coding

By focusing on evidence and small reversible changes, loop engineering could curb costly AI coding mistakes before they reach production.

By Mark Tarre • 8 min read • Last month
IBM joins OpenAI cyber programme with app security tool
Cloud Security

IBM joins OpenAI cyber programme with app security tool

Enterprise security teams gain a new AI-assisted way to spot exploitable code flaws, as IBM widens its cyber work with OpenAI.

By Sean Mitchell • 4 min read • Last month
JFrog named leader in Gartner's software security quadrant
Hybrid Cloud

JFrog named leader in Gartner's software security quadrant

The recognition comes as firms scramble to secure software pipelines, open-source code and AI assets against rising supply chain attacks.

By Mark Tarre • 4 min read • Last month
OpenAI expands Daybreak with patching tools & partners
Network Security

OpenAI expands Daybreak with patching tools & partners

The move aims to help defenders turn faster vulnerability discovery into working fixes, as OpenAI broadens access to its cyber tools and partners.

By Sean Mitchell • 5 min read • Last month
GitGuardian launches endpoint protection for laptops
Endpoint Protection

GitGuardian launches endpoint protection for laptops

A single compromised laptop can expose thousands of live keys, according to GitGuardian's early field tests, as attacks shift to developer machines.

By Sofiah Nichole Salivio • 4 min read • Last month
Mini Shai-Hulud worm turns public, NCC Group warns
Cloud Security

Mini Shai-Hulud worm turns public, NCC Group warns

Public release of the Mini Shai-Hulud code means copycat attacks can now hit developers, CI/CD systems and open-source supply chains.

By Sofiah Nichole Salivio • 4 min read • Last month
Broadridge joins Anthropic's Project Glasswing on security
Fintech

Broadridge joins Anthropic's Project Glasswing on security

The move puts Broadridge among firms using frontier AI to harden financial software, where breaches can disrupt trading and client communications.

By Sofiah Nichole Salivio • 3 min read • Last month
AI coding tools raise debt & security risks, SIG warns
DevOps

AI coding tools raise debt & security risks, SIG warns

Enterprise teams using AI coding tools may face higher technical debt, security gaps and costs, according to new SIG research.

By Joseph Gabriel Lagonsin • 4 min read • Last month
As agentic development accelerates, workflow auditability becomes a bottleneck
DevOps

As agentic development accelerates, workflow auditability becomes a bottleneck

Regulators may soon demand proof of who did what as AI agents start opening merge requests in heavily audited development pipelines.

By Brian Wald • 6 min read • Last month
Thoughtworks launches Agent/works for AI governance
Digital Transformation

Thoughtworks launches Agent/works for AI governance

Enterprise teams are getting a single control plane to track agent sprawl, tighten permissions and curb AI spending as autonomous systems spread.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Checkmarx partners with Carahsoft for public sector sales
Digital Transformation

Checkmarx partners with Carahsoft for public sector sales

Government agencies will gain wider access to application security tools as the partnership places Checkmarx products on Carahsoft's procurement channels.

By Joseph Gabriel Lagonsin • 4 min read • Last month
AISLE launches Snapshot for secure private cloud use
Data Protection

AISLE launches Snapshot for secure private cloud use

Regulated firms can now scan code for flaws without sending sensitive data to external AI services, as AISLE targets private deployments.

By Sofiah Nichole Salivio • 4 min read • Last month
Organisations shift to continuous testing in security
Digital Transformation

Organisations shift to continuous testing in security

With AI speeding up attacks, 53% of security leaders say point-in-time tests are already outdated by the time reports land.

By Sean Mitchell • 4 min read • Last month
Checkmarx partners Carahsoft to expand public sector sales
Data Protection

Checkmarx partners Carahsoft to expand public sector sales

Government buyers will gain wider access to Checkmarx tools as Carahsoft opens procurement routes through reseller networks and federal contracts.

By Mark Tarre • 4 min read • Last month

Stories from Other Regions

AppSec stories

Ethiack says vulnerabilities jumped 106% in a year
Digital Transformation

Ethiack says vulnerabilities jumped 106% in a year

Exploited software flaws are now overtaking stolen passwords as the main breach route, sharpening pressure on security teams to patch faster.

By Sean Mitchell • 3 min read • Last month
Chainguard launches scanner to block npm malware greyware
Malware

Chainguard launches scanner to block npm malware greyware

The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.

By Sean Mitchell • 4 min read • Last month
Cequence backs behaviour-based zero trust for AI agents
Data Protection

Cequence backs behaviour-based zero trust for AI agents

Runtime behaviour, not login checks, is now seen as the key control as businesses put AI agents into live systems and data.

By Sean Mitchell • 4 min read • Last month