SecurityBrief Asia - Technology news for CISOs & cybersecurity decision-makers
Asia

AppSec Stories

Asian Stories

AppSec stories

Global Stories

AppSec stories

Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Yesterday
GitLab 19.2 adds AI tools for security & workflows
DevOps

GitLab 19.2 adds AI tools for security & workflows

The update aims to cut review bottlenecks by auto-fixing vulnerable dependencies and surfacing code flaws scanners often miss.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
SecurityBridge launches SAPMAP to map attack paths
Data Protection

SecurityBridge launches SAPMAP to map attack paths

Security teams can now trace how one SAP flaw could spread across finance, payroll and supply chains, with access tightly restricted.

By Joseph Gabriel Lagonsin • 4 min read • Yesterday
CleanStart launches Clean Libraries to secure AI code
Application Security

CleanStart launches Clean Libraries to secure AI code

Developers face earlier checks on risky open-source dependencies as AI coding tools speed up software assembly and raise supply chain concerns.

By Joseph Gabriel Lagonsin • 3 min read • Yesterday
Targeted open source malware attacks on developers soar
Application Security

Targeted open source malware attacks on developers soar

Malicious package advisories jumped from 21 in 2023 to 1,576 in 2025, as attackers increasingly target developers before code reaches production.

By Joseph Gabriel Lagonsin • 4 min read • 2 days ago
Mandiant warns on exposed Cloud Run serverless apps
Cloud Security

Mandiant warns on exposed Cloud Run serverless apps

Exposed serverless apps can let attackers steal tokens, read secrets and take over cloud projects if weak code is left unpatched.

By Mark Tarre • 4 min read • 2 days ago
Tenable adds app security data to exposure platform
Hybrid Cloud

Tenable adds app security data to exposure platform

Security teams can now rank code flaws against cloud and identity risks after Tenable folded application security data into its exposure platform.

By Mark Tarre • 4 min read • 3 days ago
Approov expands attestation network to fight AI attacks
Security Information and Event Management

Approov expands attestation network to fight AI attacks

Broader coverage in Mexico and Milan aims to cut latency for mobile security checks as fake app traffic grows more sophisticated.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago
Akamai warns commerce is top target for AI bot attacks
Malware

Akamai warns commerce is top target for AI bot attacks

Nearly half of commerce traffic across Akamai's network came from AI bots by late 2025, raising fraud and DDoS risks for retailers.

By Sean Mitchell • 4 min read • 3 days ago
Checkmarx launches autonomous agents to fix code flaws
Data Protection

Checkmarx launches autonomous agents to fix code flaws

As AI coding speeds up, Checkmarx says its new agents can cut manual vulnerability fixes by up to 70% before code is committed.

By Mark Tarre • 4 min read • 3 days ago
AI now runs parts of cyber attacks, Check Point says
Data Protection

AI now runs parts of cyber attacks, Check Point says

Defenders face shorter patching windows as Check Point says AI can now turn new flaws into working exploits within hours.

By Joseph Gabriel Lagonsin • 4 min read • 4 days ago
HackerOne joins Anthropic cyber defence AI programme
Software-as-a-Service

HackerOne joins Anthropic cyber defence AI programme

The controlled trial could help security teams cut false positives and speed remediation as frontier AI moves beyond finding bugs to validating risk.

By Sofiah Nichole Salivio • 4 min read • Last week
Buying more tools won't scale your security ambitions, operational maturity will
DevOps

Buying more tools won't scale your security ambitions, operational maturity will

Without stronger operational foundations, Asia Pacific firms risk turning new security tools into costly bottlenecks instead of productivity gains.

By Craig Nielsen • 5 min read • Last week

Stories from Other Regions

AppSec stories

Intruder launches AI web app pentesting at lower cost
Cloud Security

Intruder launches AI web app pentesting at lower cost

Security teams could cut testing delays to hours as Intruder's AI tool scans web apps for flaws from source code access.

By Sean Mitchell • 4 min read • Yesterday
The real cost of build vs. buy for agentic AI in regulated banking
Storage

The real cost of build vs. buy for agentic AI in regulated banking

Banks risk repeating DevOps sprawl as DIY agentic AI pushes build costs above USD $1.4 million and delays production by up to 18 months.

By Bryan Ross • 6 min read • 3 days ago
AI reshapes data & cyber risk for Australian firms
Ransomware

AI reshapes data & cyber risk for Australian firms

Boards are being pushed to rethink data platforms and cyber controls as AI adoption exposes Australian firms to faster attacks and stricter governance demands.

By Sofiah Nichole Salivio • 4 min read • 4 days ago
CISA uses Anthropic AI to hunt flaws in federal code
Application Security

CISA uses Anthropic AI to hunt flaws in federal code

The pilot could speed up vulnerability hunting across government systems, but it also leaves human teams to verify and fix each AI flag.

By Mark Tarre • 5 min read • Last week