SecurityBrief New Zealand - Technology news for CISOs & cybersecurity decision-makers
New Zealand

Supply Chain Security Stories - Page 2

Global Stories

Supply Chain Security stories

Sonatype warns AI is speeding software risk growth
Digital Transformation

Sonatype warns AI is speeding software risk growth

Enterprise software teams are facing far more vulnerabilities as AI-assisted development multiplies application output and speeds exposure growth.

By Mark Tarre • 4 min read • Last week
Google Cloud unveils AI harness that finds flaws fast
Cloud Security

Google Cloud unveils AI harness that finds flaws fast

In two days, the system uncovered more than 100 critical bugs in stolen code repositories, outpacing manual review and aiding incident response.

By Mark Tarre • 5 min read • Last week
NASA lab console flaw allows unauthorised commands
Space

NASA lab console flaw allows unauthorised commands

Unauthorised access could let attackers send arbitrary commands to spacecraft and instruments via NASA's AIT-GUI console, now fixed in version 2.5.2.

By Sean Mitchell • 4 min read • Last week
Australia & New Zealand face surge in critical flaws
Network Infrastructure

Australia & New Zealand face surge in critical flaws

Patch backlogs are leaving organisations exposed, with 85 high-impact flaws flagged across Australia and New Zealand, up 44% in July.

By Joseph Gabriel Lagonsin • 4 min read • This month
When AI accelerates the threat, identity governance cannot afford to stand still
Ransomware

When AI accelerates the threat, identity governance cannot afford to stand still

AI-driven attacks are shrinking response times to minutes, forcing APAC firms to adopt continuous identity controls and zero trust.

By Takanori Nishiyama • 5 min read • This month
Google Cloud sets 2029 roadmap for quantum-safe shift
Data Protection

Google Cloud sets 2029 roadmap for quantum-safe shift

Customers face a 2029 deadline to test post-quantum controls as Google Cloud begins rolling out quantum-safe encryption across its services.

By Sean Mitchell • 4 min read • This month
OpenAI expands Daybreak with specialist cyber model
Risk & Compliance

OpenAI expands Daybreak with specialist cyber model

Approved defenders will gain broader access to cyber tools as the new tiered Daybreak programme adds GPT-5.6-Cyber for advanced security work.

By Mark Tarre • 4 min read • This month
DigiCert named leader in Frost trust ecosystem radar
Digital Transformation

DigiCert named leader in Frost trust ecosystem radar

Demand is rising for auditable identity checks and document integrity as AI-generated content and tighter rules reshape online trust.

By Joseph Gabriel Lagonsin • 3 min read • This month
Google Cloud outlines targeted response to cyber threats
Security Information and Event Management

Google Cloud outlines targeted response to cyber threats

Customers will face narrower disruptions as Google Cloud moves to throttle malicious traffic, isolate risky identities and preserve legitimate usage.

By Sean Mitchell • 4 min read • This month
AI patches fail to fix flaws, 1Password study finds
Application Security

AI patches fail to fix flaws, 1Password study finds

Security teams should treat AI patching with caution after 53.9% of 6,080 model-generated fixes failed or introduced new flaws.

By Mark Tarre • 4 min read • This month

Stories from Other Regions

Supply Chain Security stories

Payward joins Anthropic's AI cyber defence project
Fintech

Payward joins Anthropic's AI cyber defence project

The move gives the crypto exchange's security team AI help to hunt flaws in critical code as threats to financial infrastructure grow.

By Karen Joy Bacudo • 4 min read • Last week
Trust, AI, and quantum technologies in the new logic of state power
Data Protection

Trust, AI, and quantum technologies in the new logic of state power

States risk losing strategic autonomy as cloud, chip and cryptographic dependencies spread beyond borders and into foreign-controlled systems.

By Dr Najwa Aaraj • 5 min read • Last week
Cloudsmith adds cooldown policies for software supply chain
DevSecOps

Cloudsmith adds cooldown policies for software supply chain

Malicious packages can now be held back before reaching developers, as Cloudsmith expands repository controls amid rising supply chain attacks.

By Mark Tarre • 4 min read • Last week
Mindgard raises USD $30 million to boost AI security
Data Protection

Mindgard raises USD $30 million to boost AI security

Customer demand is helping the Boston and London startup expand as enterprises race to secure AI systems against fresh attack risks.

By Karen Joy Bacudo • 3 min read • Last week
Autonomous AI agents hit Asian government in four-day breach
Robotics

Autonomous AI agents hit Asian government in four-day breach

Up to 85 government accounts were compromised in a four-day campaign that also reached nuclear and energy organisations, researchers said.

By Joseph Gabriel Lagonsin • 4 min read • This month
AI agent used fake identities to push malicious code
Privileged Access Management

AI agent used fake identities to push malicious code

Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.

By Sean Mitchell • 6 min read • This month
Access doesn't disappear in the cloud - It just gets harder to see
Hybrid Cloud

Access doesn't disappear in the cloud - It just gets harder to see

Hybrid critical infrastructure estates are leaving contractor and vendor access unseen, raising compliance and supply chain risk under reformed CIRMP rules.

By Dennis Baltazar • 5 min read • This month
Refrigeration controller flaws threaten cold chains
Virtual Private Networks

Refrigeration controller flaws threaten cold chains

Supermarkets and hospitals could face spoiled stock and medicines after flaws in two widely used refrigeration controller platforms were disclosed.

By Sean Mitchell • 4 min read • This month