Supply Chain Security Stories

Global Stories

Supply Chain Security stories

Australia & New Zealand face surge in critical flaws

Patch backlogs are leaving organisations exposed, with 85 high-impact flaws flagged across Australia and New Zealand, up 44% in July.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago

Ransomware

When AI accelerates the threat, identity governance cannot afford to stand still

AI-driven attacks are shrinking response times to minutes, forcing APAC firms to adopt continuous identity controls and zero trust.

By Takanori Nishiyama • 5 min read • 4 days ago

Data Protection

Google Cloud sets 2029 roadmap for quantum-safe shift

Customers face a 2029 deadline to test post-quantum controls as Google Cloud begins rolling out quantum-safe encryption across its services.

By Sean Mitchell • 4 min read • 4 days ago

Risk & Compliance

OpenAI expands Daybreak with specialist cyber model

Approved defenders will gain broader access to cyber tools as the new tiered Daybreak programme adds GPT-5.6-Cyber for advanced security work.

By Mark Tarre • 4 min read • 5 days ago

Digital Transformation

DigiCert named leader in Frost trust ecosystem radar

Demand is rising for auditable identity checks and document integrity as AI-generated content and tighter rules reshape online trust.

By Joseph Gabriel Lagonsin • 3 min read • 6 days ago

Security Information and Event Management

Google Cloud outlines targeted response to cyber threats

Customers will face narrower disruptions as Google Cloud moves to throttle malicious traffic, isolate risky identities and preserve legitimate usage.

By Sean Mitchell • 4 min read • Last week

Application Security

AI patches fail to fix flaws, 1Password study finds

Security teams should treat AI patching with caution after 53.9% of 6,080 model-generated fixes failed or introduced new flaws.

By Mark Tarre • 4 min read • Last week

Data Protection

Supercharged security: Cyber risk in the age of frontier AI

Hong Kong saw a record 15,877 cyber incidents in 2025 as AI speeds attacks and shortens the window to exploit software flaws.

By Daniel Kwong • 3 min read • Last week

Data Protection

Cherry launches smart card devices for secure workplaces

Support for mixed IT estates should improve as Cherry's new smart card devices work with native drivers and update after deployment.

By Sofiah Nichole Salivio • 3 min read • Last week

Phishing

RiskProfiler launches KnyX Autonomous Investigations

Security teams can now automate repetitive threat triage and response as AI agents assess alerts, gather evidence and act under policy controls.

By Joseph Gabriel Lagonsin • 3 min read • Last week

Security Operations Centres

Tenable launches free CyberAgents Exchange for AI security

Security teams can now reuse and share AI cyber tools in one free, vendor-neutral marketplace, as Tenable seeks to curb duplication and lock-in.

By Joseph Gabriel Lagonsin • 3 min read • Last week

Robotics

Linux Foundation seeks AI security incident sharing rules

A proposed framework could help firms share AI security failures confidentially, as concern grows over agentic systems that act across corporate tools.

By Mark Tarre • 5 min read • Last week

Malware

ESET unveils AI security tools for business agents

Businesses using AI agents face new risks of data leakage and malicious actions as ESET folds detection into its PROTECT platform.

By Mark Tarre • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

Robotics

Autonomous AI agents hit Asian government in four-day breach

Up to 85 government accounts were compromised in a four-day campaign that also reached nuclear and energy organisations, researchers said.

By Joseph Gabriel Lagonsin • 4 min read • 3 days ago

Privileged Access Management

AI agent used fake identities to push malicious code

Cybersecurity experts warn single-person approvals are now vulnerable after an AI agent used fabricated identities to slip malicious code past checks.

By Sean Mitchell • 6 min read • 4 days ago

Hybrid Cloud

Access doesn't disappear in the cloud - It just gets harder to see

Hybrid critical infrastructure estates are leaving contractor and vendor access unseen, raising compliance and supply chain risk under reformed CIRMP rules.

By Dennis Baltazar • 5 min read • 4 days ago