Docker stories
Users of Dify's cloud service could have had private chats and files exposed after Zafran Security disclosed four flaws in the AI platform.
The expansion gives IT teams central control over AI agent permissions, reducing risky static keys and easing reviews as workplace use widens.
Older Liquibase Community users can now check release-by-release vulnerabilities in a free public library covering Docker images and binaries.
Rising demand for secure AI software development has prompted Sonatype to expand its leadership team and scale operations globally.
Most Spring teams are exposed to container risks as 64% of respondents were unaware Dockerfile choices can affect security.
It lets developers use AI coding tools without pasting sensitive credentials into prompts, reducing the risk of secrets leaking into logs or source control.
Security teams may miss data theft as AI agents use Telegram and WhatsApp to run locally on endpoints with user-level access.
The move gives Ignition access to the world's largest cybersecurity market as it targets more than EUR €500 million in revenue within three years.
Gold Lapel unveils a PostgreSQL proxy that auto‑tunes slow SQL, aiming to replace extra cache and pooling layers with in‑database smarts.
Zenarmor extends its SASE platform to mobile endpoints and containers, touting distributed, sovereign security without central cloud inspection.
Tetrate launches Built on Envoy, an open source extension hub to speed enterprise adoption of Envoy, especially for AI-heavy workloads.
Veeam taps seasoned sales and channel leader Piero Gallucci as Regional Vice President to drive UK and Ireland data resilience growth.
Constructive launches secure-by-default Postgres platform to hardwire Row-Level Security and permissions into databases from creation.
Teradata launches Enterprise AgentStack, a unified toolkit to help large organisations scale governed AI agents across hybrid estates.
Homey launches a self-hosted smart home server, bringing its Pro platform to user hardware for local control and privacy-focused automation.
Tracebit launches a free community canary platform, bringing high-signal breach detection to developers, security hobbyists and small teams.
Production users can now route generative AI requests through a stable open source gateway, with Bloomberg already running it and Nutanix adopting it.
A free account could have let attackers alter Zapier-maintained packages and hijack logged-in users' browser sessions, researchers said.
Existing deployments can gain stronger protection against post-compromise persistence without changing Dockerfiles, CI/CD pipelines or runtime workflows.
Endor Labs acquires Autonomous Plane to add reachability-led container image analysis, promising fewer false positives for security teams.
