SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Composition Analysis Stories

Global Stories

Composition Analysis stories

Sonatype warns AI is speeding software risk growth
Digital Transformation

Sonatype warns AI is speeding software risk growth

Enterprise software teams are facing far more vulnerabilities as AI-assisted development multiplies application output and speeds exposure growth.

By Mark Tarre • 4 min read • Last week
Supercharged security: Cyber risk in the age of frontier AI
Data Protection

Supercharged security: Cyber risk in the age of frontier AI

Hong Kong saw a record 15,877 cyber incidents in 2025 as AI speeds attacks and shortens the window to exploit software flaws.

By Daniel Kwong • 3 min read • This month
Google warns of rise in open source supply chain attacks
Ransomware

Google warns of rise in open source supply chain attacks

Malicious packages are now spreading faster across code repositories, with Google saying open source ecosystems face the sharpest rise in risk.

By Sean Mitchell • 5 min read • Last month
Checkmarx launches Fusion hybrid scanning tool for AI code
Cloud Security

Checkmarx launches Fusion hybrid scanning tool for AI code

The hybrid system aims to help security teams spot serious flaws in AI-generated code faster, as production code becomes harder to review.

By Mark Tarre • 4 min read • Last month
Automotive cyber vulnerabilities more than double in Q2
Data Protection

Automotive cyber vulnerabilities more than double in Q2

Greater exposure to remote attacks is worrying carmakers, as high-severity automotive cybersecurity flaws jumped to 161 in the second quarter.

By Sean Mitchell • 4 min read • Last month
Ossprey raises USD $2.65 million for supply chain security
Application Security

Ossprey raises USD $2.65 million for supply chain security

The round will fund hiring, product work and overseas growth as investors back tools to counter AI-driven software supply chain risks.

By Sean Mitchell • 4 min read • Last month
Cisco launches Antares AI models for code flaw pinpointing
Data Protection

Cisco launches Antares AI models for code flaw pinpointing

Security teams could cut hours from patching work as open-weight Antares models narrow flaws to the relevant code segment.

By Sean Mitchell • 4 min read • Last month
Qualys joins Chainguard's Athena security coalition
Network Security

Qualys joins Chainguard's Athena security coalition

The coalition has now processed more than 40,000 findings, underscoring how quickly open source flaws can spread across corporate systems.

By Mark Tarre • 5 min read • Last month
Lineaje launches AI vulnerability elimination factory
Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Last month
BellSoft launches hardened Paketo builder for containers
DevOps

BellSoft launches hardened Paketo builder for containers

Security and compliance teams can now patch buildpack-based containers from a single hardened base, rather than chasing Dockerfiles across repositories.

By Sofiah Nichole Salivio • 4 min read • Last month
CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • Last month
Targeted open source malware attacks on developers soar
Application Security

Targeted open source malware attacks on developers soar

Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.

By Joseph Gabriel Lagonsin • 4 min read • Last month
Checkmarx named leader in Gartner supply chain quadrant
Application Security

Checkmarx named leader in Gartner supply chain quadrant

Enterprise buyers are treating software supply chain security as a standalone priority as Gartner creates a dedicated Magic Quadrant for the category.

By Joseph Gabriel Lagonsin • 3 min read • Thu, 25th Jun 2026
Chainguard named Gartner leader in software supply security
Cloud Security

Chainguard named Gartner leader in software supply security

The recognition underlines rising demand for tools that secure software builds before attackers can exploit open source dependencies and pipelines.

By Mark Tarre • 4 min read • Wed, 24th Jun 2026

Stories from Other Regions

Composition Analysis stories

Cloudsmith adds cooldown policies for software supply chain
DevSecOps

Cloudsmith adds cooldown policies for software supply chain

Malicious packages can now be held back before reaching developers, as Cloudsmith expands repository controls amid rising supply chain attacks.

By Mark Tarre • 4 min read • Last week
Chainguard joins AWS Security Hub for supply chain
Malware

Chainguard joins AWS Security Hub for supply chain

AWS customers can now buy Chainguard Libraries through Security Hub Extended, as open-source dependency attacks push firms to tighten supply chain checks.

By Sofiah Nichole Salivio • 4 min read • This month
NetRise adds package trust tools to Provenance platform
Application Security

NetRise adds package trust tools to Provenance platform

Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.

By Mark Tarre • 4 min read • Last month
Hancock backs Lumitron with USD $50 million investment
Power / Energy

Hancock backs Lumitron with USD $50 million investment

The funding could speed the rollout of a compact cancer imaging and radiotherapy platform, while opening industrial uses in mining and manufacturing.

By Sean Mitchell • 5 min read • Mon, 29th Jun 2026