SecurityBrief Canada - Technology news for CISOs & cybersecurity decision-makers
Canada

Threat modelling Stories - Page 2

Global Stories

Threat modelling stories

BreachLock report flags AI, cloud & web logic risks
Cloud Security

BreachLock report flags AI, cloud & web logic risks

Cloud audits produced the highest critical finding rate, while every AI system tested showed vulnerabilities and web logic flaws rose sharply.

By Joseph Gabriel Lagonsin • 3 min read • Fri, 31st Jul 2026
PRC model aims to reshape software security compliance
Application Security

PRC model aims to reshape software security compliance

New EU cyber rules are pushing software vendors to prove security is built into products, not bolted on after release.

By Sean Mitchell • 4 min read • Tue, 28th Jul 2026
OpenAI model breaches Hugging Face in unprecedented incident
Cloud Security

OpenAI model breaches Hugging Face in unprecedented incident

Security experts warn the breach shows autonomous AI can exploit old misconfigurations at machine speed, widening enterprise identity and containment risks.

By Sofiah Nichole Salivio • 4 min read • Fri, 24th Jul 2026
OpenAI & Hugging Face probe AI cyber security incident
AI Security

OpenAI & Hugging Face probe AI cyber security incident

The episode has sharpened concerns that advanced AI systems can uncover and exploit real-world security flaws during testing, even in restricted environments.

By Mark Tarre • 4 min read • Thu, 23rd Jul 2026
Google Cloud unveils 13 Gemini Enterprise agent demos
Data Science

Google Cloud unveils 13 Gemini Enterprise agent demos

Developers can now use Google Cloud's examples to build and govern Gemini-powered agents for approvals, compliance and data workflows.

By Sean Mitchell • 4 min read • Mon, 20th Jul 2026
Entrovy launches kinetic8 for enterprise cyber visibility
Software-as-a-Service

Entrovy launches kinetic8 for enterprise cyber visibility

Enterprise security teams can now move from fragmented asset views to explainable risk scoring, as the platform reaches general availability.

By Sean Mitchell • 4 min read • Sat, 18th Jul 2026
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Fri, 17th Jul 2026
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 17th Jul 2026
Arm expands Arteris security tools across CPU portfolio
IoT Security

Arm expands Arteris security tools across CPU portfolio

Security checks will now cover more Arm processors, as the chip designer broadens use of Arteris' Radix tool to spot flaws earlier.

By Sean Mitchell • 4 min read • Fri, 17th Jul 2026
AI coding models make working code, not secure code
Data Protection

AI coding models make working code, not secure code

Working output from the latest AI coding tools was secure barely a third of the time, exposing a widening risk for software teams.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 16th Jul 2026
NCC Group maps security gaps across AI coding agents
Application Security

NCC Group maps security gaps across AI coding agents

Weak default safeguards and uneven sandboxing could leave developers exposed to command execution before workspace trust is granted.

By Sean Mitchell • 4 min read • Fri, 10th Jul 2026
Giesecke+Devrient says post-quantum shift is urgent
Data Protection

Giesecke+Devrient says post-quantum shift is urgent

Encrypted data could be exposed years before practical quantum computers arrive, putting identity, telecoms and payments under pressure.

By Sofiah Nichole Salivio • 4 min read • Thu, 9th Jul 2026
XBOW wins AWS application security competency status
DevOps

XBOW wins AWS application security competency status

The AWS badge could help XBOW win more enterprise deals as buyers seek continuous testing that shows which vulnerabilities are exploitable.

By Sofiah Nichole Salivio • 3 min read • Thu, 9th Jul 2026

Stories from Other Regions

Threat modelling stories

NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Tue, 28th Jul 2026
Cobalt launches autonomous pentest for continuous testing
Application Security

Cobalt launches autonomous pentest for continuous testing

Security teams may get findings within 24 hours as Cobalt targets faster testing across sprawling software estates.

By Joseph Gabriel Lagonsin • 4 min read • Sat, 25th Jul 2026
How can banks adapt to the new, AI-driven economics of cybercrime?
Disaster Recovery

How can banks adapt to the new, AI-driven economics of cybercrime?

Banks face a shrinking window to harden legacy systems as cheap AI tools make vulnerability hunting and repeat attacks far easier for criminals.

By Richard Moore • 5 min read • Wed, 15th Jul 2026
Claroty & Frenos launch industrial cyber risk tool
Risk & Compliance

Claroty & Frenos launch industrial cyber risk tool

Industrial operators can now test cyber exposures without touching live systems, helping prioritise fixes that could prevent costly downtime.

By Mark Tarre • 4 min read • Fri, 10th Jul 2026
Picus launches AI platform to validate real exploits
Firewalls

Picus launches AI platform to validate real exploits

Security teams may be able to cut false alarms as Picus says its new platform proves whether a vulnerability can actually be exploited.

By Sean Mitchell • 4 min read • Thu, 9th Jul 2026