CFOtech UK - Technology news for CFOs & financial decision-makers
United Kingdom

AppSec Stories - Page 4

UK Stories

AppSec stories

PortSwigger launches Burp AT public beta for pentesters
Application Security

PortSwigger launches Burp AT public beta for pentesters

The beta gives pentesters controlled AI assistance inside Burp Suite, with approvals, logging and scope rules still enforced by the platform.

By Sean Mitchell • 4 min read • Thu, 30th Jul 2026
The shadow identity crisis: Who let the agents in?
Digital Transformation

The shadow identity crisis: Who let the agents in?

Security chiefs face a widening breach risk as most firms plan to use AI agents, yet barely a third feel ready to secure them properly.

By Evgeny Zaretskov • 5 min read • Wed, 29th Jul 2026

Global Stories

AppSec stories

Orca launches AI security tools for all software builders
Data Protection

Orca launches AI security tools for all software builders

Security teams face fresh blind spots as AI-built apps and traditional code pipelines increasingly expose company data and cloud systems.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 31st Jul 2026
F5 & NVIDIA tie up on AI guardrails for production
Hybrid Cloud

F5 & NVIDIA tie up on AI guardrails for production

Centralised oversight for AI traffic should help firms cut prompt-injection and data-leakage risks as models shift into production.

By Sean Mitchell • 4 min read • Fri, 31st Jul 2026
Proofpoint flags underground AI prompt injection tools
Software-as-a-Service

Proofpoint flags underground AI prompt injection tools

Proofpoint says underground forums are advertising tools that use indirect prompt injection across emails, PDFs, calendar invites and web pages.

By Mark Tarre • 4 min read • Thu, 30th Jul 2026
Qualys adds governance to TotalAI for AI risk control
Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Thu, 30th Jul 2026
Secure.com appoints Brown Hill to lead Americas sales
Digital Transformation

Secure.com appoints Brown Hill to lead Americas sales

The cybersecurity group is widening its Americas push as it seeks more customers and partners for its AI-focused platform.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 30th Jul 2026
Reco adds live AI runtime controls for browser use
Digital Transformation

Reco adds live AI runtime controls for browser use

Security teams can now block risky AI prompts in real time as Reco expands its platform from visibility into browser-level enforcement.

By Joseph Gabriel Lagonsin • 4 min read • Thu, 30th Jul 2026
Miggo launches rapid defence layer for active exploits
Application Security

Miggo launches rapid defence layer for active exploits

Security teams can now block newly disclosed flaws in minutes, as Miggo's tool adds temporary protection while patches are still being deployed.

By Sofiah Nichole Salivio • 4 min read • Thu, 30th Jul 2026
HackerOne launches H1 Remediation for faster fixes
Digital Transformation

HackerOne launches H1 Remediation for faster fixes

Critical vulnerability backlogs have swelled 29-fold, prompting a tool that sends fix plans into engineering systems and AI coding tools.

By Sofiah Nichole Salivio • 5 min read • Thu, 30th Jul 2026
Checkmarx launches Fusion hybrid scanning tool for AI code
Cloud Security

Checkmarx launches Fusion hybrid scanning tool for AI code

The hybrid system aims to help security teams spot serious flaws in AI-generated code faster, as production code becomes harder to review.

By Mark Tarre • 4 min read • Wed, 29th Jul 2026
Netskope says downstream AI data breaches are surging
Malware

Netskope says downstream AI data breaches are surging

Downstream AI data leaks have more than doubled in a year, with connected services now returning unauthorised information to staff and agents.

By Joseph Gabriel Lagonsin • 4 min read • Wed, 29th Jul 2026

Stories from Other Regions

AppSec stories

NetRise adds package trust tools to Provenance platform
Application Security

NetRise adds package trust tools to Provenance platform

Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.

By Mark Tarre • 4 min read • Sat, 1st Aug 2026
Saviynt tops USD $300 million ARR & launches Zuma AI
Software-as-a-Service

Saviynt tops USD $300 million ARR & launches Zuma AI

The rise of AI agents is forcing security teams to rethink access controls, as the identity vendor passes USD $300 million in ARR.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 31st Jul 2026
Sygnia finds AI onboarding flaw exposing client data
Fintech

Sygnia finds AI onboarding flaw exposing client data

A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.

By Mark Tarre • 4 min read • Fri, 31st Jul 2026
Saviynt tops USD $300 million ARR with Zuma launch
Data Protection

Saviynt tops USD $300 million ARR with Zuma launch

New controls for AI agents and machine identities come as Saviynt passes USD $300 million in annual recurring revenue, with bookings up more than 80%.

By Karen Joy Bacudo • 4 min read • Wed, 29th Jul 2026
NCC Group says human testers still vital in AI security
Data Protection

NCC Group says human testers still vital in AI security

AI tools are speeding routine checks, but hidden business logic flaws and context-specific risks still need human testers to spot them.

By Sean Mitchell • 5 min read • Tue, 28th Jul 2026