SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Supply Chain Security Stories - Page 24

Global Stories

Supply Chain Security stories

Orca Security flags AI secrets & supply chain gaps
Malware

Orca Security flags AI secrets & supply chain gaps

Leaked AI credentials and unpatched dependencies are leaving production systems exposed across US and European organisations, Orca Security said.

By Shannon Williams • 4 min read • Fri, 10th Apr 2026
2N urges tougher cyber rules for access control devices
EduTech

2N urges tougher cyber rules for access control devices

New EU rules could force access control makers to prove stronger patching, sourcing and disclosure processes as cyberattacks rise.

By Shannon Williams • 5 min read • Thu, 9th Apr 2026
Identity compromise emerges as top cyberattack route
Digital Transformation

Identity compromise emerges as top cyberattack route

Weak identity controls are now driving most attacks on Australian organisations, with breaches hitting revenue, customers and supply chains.

By Kaleah Salmon • 5 min read • Thu, 9th Apr 2026
Anthropic launches Glasswing AI cyber coalition with partners
Firewalls

Anthropic launches Glasswing AI cyber coalition with partners

Defenders may gain faster vulnerability discovery, but the same AI leap is also sharpening concerns that attackers will exploit flaws in minutes.

By Kaleah Salmon • 6 min read • Thu, 9th Apr 2026
Claude Code flaw leaves deny rules vulnerable in long workflows
Cloud Security

Claude Code flaw leaves deny rules vulnerable in long workflows

Security researchers say long automated jobs can make Claude Code’s deny rules fall back to user prompts, weakening protections in CI/CD pipelines.

By Kaleah Salmon • 8 min read • Thu, 9th Apr 2026
PyTorch Foundation adds Safetensors for safer AI models
Application Security

PyTorch Foundation adds Safetensors for safer AI models

The move aims to reduce the risk of arbitrary code execution as open-weight models are shared and deployed at scale.

By Sean Mitchell • 4 min read • Thu, 9th Apr 2026
Anthropic launches Project Glasswing for cyber defence
Firewalls

Anthropic launches Project Glasswing for cyber defence

Access to advanced AI security tools will be limited to vetted groups as Anthropic backs open-source defenders with USD $100 million in credits.

By Mark Tarre • 6 min read • Wed, 8th Apr 2026
Finite State names Ann Miller as Vice President of Marketing
Digital Transformation

Finite State names Ann Miller as Vice President of Marketing

Greater scrutiny of connected-device software is driving demand for product security tools, as Finite State adds another senior hire.

By Mark Tarre • 3 min read • Wed, 8th Apr 2026
Permiso launches sandbox for AI agent skill security
Firewalls

Permiso launches sandbox for AI agent skill security

Malicious downloads can now be caught at runtime, as the new tool records hidden network calls and file writes before deployment.

By Sofiah Nichole Salivio • 4 min read • Wed, 8th Apr 2026
TCCA urges standards push on critical broadband security
Unified Communications

TCCA urges standards push on critical broadband security

Broader supplier chains and open standards are leaving mission-critical broadband networks more exposed as operators move to 4G and 5G.

By Joseph Gabriel Lagonsin • 3 min read • Tue, 7th Apr 2026
Cloudflare, WatchGuard warn cloud security assumptions fail
Firewalls

Cloudflare, WatchGuard warn cloud security assumptions fail

Rising identity-based attacks and exposed cloud services are forcing Australian organisations to rethink security assumptions as threats accelerate.

By Sofiah Nichole Salivio • 5 min read • Tue, 7th Apr 2026
GigaOm names Check Point leader in app & API security
Firewalls

GigaOm names Check Point leader in app & API security

Businesses face growing exposure to API and AI-driven attacks as Check Point’s web application firewall earns top marks for accuracy.

By Sean Mitchell • 3 min read • Sat, 4th Apr 2026
NCC Group warns DC power regulation is a cyber risk
Hyperscale

NCC Group warns DC power regulation is a cyber risk

Modern regulators now sit below software defences, raising the risk of attacks that could disrupt services, corrupt data or damage hardware.

By Shannon Williams • 4 min read • Fri, 3rd Apr 2026
Malware surge in open source software alarms firms
Malware

Malware surge in open source software alarms firms

Organisations remain exposed as malware in open-source packages surged in 2025, with most advisories and account takeovers reported last year.

By Kaleah Salmon • 4 min read • Fri, 3rd Apr 2026
Google links axios attack to suspected North Korean actor
DevOps

Google links axios attack to suspected North Korean actor

Broad exposure across thousands of applications is feared after Google tied the axios npm supply chain attack to suspected North Korean hackers.

By Mark Tarre • 3 min read • Thu, 2nd Apr 2026

Stories from Other Regions

Supply Chain Security stories

From chaos to code efficiency: AI's big software development shift
DevOps

From chaos to code efficiency: AI's big software development shift

Australian firms risk shifting bottlenecks from coding to testing and security as AI boosts developer output but leaves workflows fragmented.

By Craig Nielsen • 5 min read • Tue, 7th Apr 2026
Vulnetix named Australia's first global CVE authority
Malware

Vulnetix named Australia's first global CVE authority

Australian developers can now access free vulnerability tools as Vulnetix takes a formal role in global software flaw tracking.

By Mark Tarre • 3 min read • Tue, 7th Apr 2026
Avocado warns on code repository supply chain attacks
Cloud Security

Avocado warns on code repository supply chain attacks

Australian organisations face fresh risk of cloud and identity compromise as the cyber watchdog reissues its alert on repository attacks.

By Mark Tarre • 4 min read • Tue, 7th Apr 2026