ChannelLife Australia - Industry insider news for technology resellers
Australia

Supply Chain Security Stories

Australian Stories

Supply Chain Security stories

PhishByte warns Essential Eight misses phishing risk
Multi-factor authentication

PhishByte warns Essential Eight misses phishing risk

Businesses risk false confidence if they meet the ACSC framework but leave staff exposed to phishing, social engineering and fake MFA prompts.

By Sean Mitchell • 4 min read • Yesterday

Global Stories

Supply Chain Security stories

CrowdStrike warns of malware targeting AI coding tools
Malware

CrowdStrike warns of malware targeting AI coding tools

Developers using AI assistants could face stolen credentials and poisoned repositories as the worm hides inside normal coding workflows.

By Sean Mitchell • 4 min read • Today
GitHub Sponsors tops USD $100 million for open source
Supply Chain

GitHub Sponsors tops USD $100 million for open source

Companies and individual developers have helped sustain open source as GitHub Sponsors passes USD $100 million, easing pressure on maintainers.

By Sean Mitchell • 5 min read • Today
Qualys joins Chainguard's Athena security coalition
Network Security

Qualys joins Chainguard's Athena security coalition

The coalition has now processed more than 40,000 findings, underscoring how quickly open source flaws can spread across corporate systems.

By Mark Tarre • 5 min read • Today
Lineaje launches AI vulnerability elimination factory
Application Security

Lineaje launches AI vulnerability elimination factory

The tool aims to help developers cut vulnerability backlogs and reach no exploitable flaws within 90 days as AI coding expands risk.

By Mark Tarre • 4 min read • Today
Salt Security expands Policy Hub to 100 AI policies
Data Protection

Salt Security expands Policy Hub to 100 AI policies

Enterprise teams can now switch on controls for AI agents and APIs faster, with Salt Security bundling 100 pre-built policies into its Policy Hub.

By Mark Tarre • 4 min read • Today
BellSoft launches hardened Paketo builder for containers
DevOps

BellSoft launches hardened Paketo builder for containers

Security and compliance teams can now patch buildpack-based containers from a single hardened base, rather than chasing Dockerfiles across repositories.

By Sofiah Nichole Salivio • 4 min read • Yesterday
Hugging Face hit by AI agent intrusion in production
Robotics

Hugging Face hit by AI agent intrusion in production

Autonomous AI agents breached internal systems and exposed limited datasets and credentials, prompting Hugging Face to urge users to rotate tokens.

By Sean Mitchell • 4 min read • Yesterday
Tenable adds code security to its exposure platform
Endpoint Protection

Tenable adds code security to its exposure platform

Security teams can now rank code flaws against wider business risk as Tenable One links static vulnerability data with cloud, identity and attack-path exposure.

By Sean Mitchell • 3 min read • 2 days ago
SonicWall & CyberCert launch SMB1001 push for MSPs
Partner Programmes

SonicWall & CyberCert launch SMB1001 push for MSPs

Smaller businesses under pressure from insurers and buyers can now turn existing SonicWall security setups into SMB1001 certification evidence.

By Mark Tarre • 4 min read • 2 days ago
FIS joins Anthropic cyber security project with Mythos 5
Fintech

FIS joins Anthropic cyber security project with Mythos 5

For thousands of banks and payments firms, the trial could help spot software flaws before they disrupt critical financial systems.

By Karen Joy Bacudo • 4 min read • Last week
Google Cloud unveils AI security blueprint for GKE
Data Protection

Google Cloud unveils AI security blueprint for GKE

The framework targets CISOs and platform teams as they move AI systems into production, amid rising risks from prompts, models and outputs.

By Sean Mitchell • 4 min read • Last week
Google Cloud issues guardrails for AI vulnerability agents
Privileged Access Management

Google Cloud issues guardrails for AI vulnerability agents

Security teams are being warned to keep humans and strict controls in place as AI agents can miss context and leak sensitive code.

By Sean Mitchell • 5 min read • Last week
Google Cloud sets out AI security plan with Gemini & Wiz
Cloud Security

Google Cloud sets out AI security plan with Gemini & Wiz

Defenders could gain a faster edge against AI-driven attacks as Google Cloud ties Gemini, Wiz, CodeMender and Mandiant into one platform.

By Mark Tarre • 4 min read • Last week
Filigran warns AI security needs tighter human oversight
Data Protection

Filigran warns AI security needs tighter human oversight

Rising automation could speed cyber defence, but Filigran says security teams must keep humans in the loop as agentic AI spreads.

By Sofiah Nichole Salivio • 7 min read • Last week

Stories from Other Regions

Supply Chain Security stories

Intruder launches AI pentesting for web apps on demand
Cloud Security

Intruder launches AI pentesting for web apps on demand

Smaller firms can now run web app pentests in hours, as Intruder's AI service cuts costs to a fraction of manual reviews.

By Sean Mitchell • 4 min read • Last week
NCC Group & Siemens team up on UK OT cyber security
Digital Transformation

NCC Group & Siemens team up on UK OT cyber security

Growing threats to UK critical infrastructure have pushed Siemens and NCC Group to join forces on protecting industrial systems from cyber attacks.

By Sean Mitchell • 4 min read • Last week