SafetyNews New Zealand - Aotearoa's industrial safety news for decision-makers
New Zealand

Supply Chain Security Stories - Page 2

Global Stories

Supply Chain Security stories

Island flags security concerns in nearly half of MCP servers
Cloud Security

Island flags security concerns in nearly half of MCP servers

Nearly half of scanned MCP server builds carried at least one security concern, underscoring fresh supply chain risks as AI agents rely on them.

By Sean Mitchell • 5 min read • 6 days ago
CrowdStrike report: AI is rewriting rules of cybersecurity
Malware

CrowdStrike report: AI is rewriting rules of cybersecurity

Organisations now have just 48 hours to patch most flaws, as AI helps attackers weaponise vulnerabilities far faster than before.

By David Shilovsky • 6 min read • 6 days ago
Fintech leaders warn innovation outpaces cyber resilience
Ransomware

Fintech leaders warn innovation outpaces cyber resilience

Faster digital payments are leaving fintech firms exposed as regulators and attackers pressure weak controls and resilience across the sector.

By Sofiah Nichole Salivio • 4 min read • 6 days ago
AI security experts call for stronger deployment controls
Cloud Security

AI security experts call for stronger deployment controls

The move could reshape enterprise AI security as vendors and regulators demand stronger controls around access, logging and containment.

By Mark Tarre • 3 min read • Last week
Okta to buy Permiso Security in identity threat push
Cloud Security

Okta to buy Permiso Security in identity threat push

The deal aims to give security teams faster detection of post-authentication attacks as AI agents and machine identities multiply across cloud systems.

By Sofiah Nichole Salivio • 4 min read • Last week
Orca launches AI security tools for all software builders
Data Protection

Orca launches AI security tools for all software builders

Security teams face fresh blind spots as AI-built apps and traditional code pipelines increasingly expose company data and cloud systems.

By Joseph Gabriel Lagonsin • 4 min read • Last week
SonicWall joins Anthropic's Project Glasswing to find flaws
Data Protection

SonicWall joins Anthropic's Project Glasswing to find flaws

Defensive teams are racing to match attackers using AI to find flaws and weaponise exploits within hours of disclosure.

By Jordan Riddles • 3 min read • Last week
Contrast launches CVE Shield to block exploit attacks
Application Security

Contrast launches CVE Shield to block exploit attacks

The tool aims to give security teams breathing room as AI systems can now churn out working exploits faster than patch cycles can react.

By Joseph Gabriel Lagonsin • 4 min read • Last week
DefensX wins growth backing for browser security push
Data Protection

DefensX wins growth backing for browser security push

More than 7,000 SMEs could gain tighter AI and browser controls as the New York cybersecurity company uses fresh backing to widen its reach.

By Mark Tarre • 3 min read • Last week
AI boosts nation-state cyberattacks, TrendAI warns
Malware

AI boosts nation-state cyberattacks, TrendAI warns

Defenders in Australia and New Zealand face faster, more adaptive intrusions as state-backed hackers use generative AI to scout and spread.

By Sean Mitchell • 4 min read • Last week
Qualys adds governance to TotalAI for AI risk control
Cloud Security

Qualys adds governance to TotalAI for AI risk control

Governance features aim to help security teams prove AI controls to boards and regulators as shadow AI and agentic risks spread.

By Joseph Gabriel Lagonsin • 5 min read • Last week
Reco adds live AI runtime controls for browser use
Digital Transformation

Reco adds live AI runtime controls for browser use

Security teams can now block risky AI prompts in real time as Reco expands its platform from visibility into browser-level enforcement.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Researchers find 36,872 exposed server management interfaces
Ransomware

Researchers find 36,872 exposed server management interfaces

Exposed BMCs can let attackers take persistent control of servers, with nearly 25,000 systems leaking password data before login.

By Sean Mitchell • 4 min read • Last week

Stories from Other Regions

Supply Chain Security stories

NetRise adds package trust tools to Provenance platform
Application Security

NetRise adds package trust tools to Provenance platform

Open source package attacks can now be blocked earlier, as NetRise brings trust checks into editors, command lines and AI coding tools.

By Mark Tarre • 4 min read • Last week
Saviynt tops USD $300 million ARR & launches Zuma AI
Software-as-a-Service

Saviynt tops USD $300 million ARR & launches Zuma AI

The rise of AI agents is forcing security teams to rethink access controls, as the identity vendor passes USD $300 million in ARR.

By Joseph Gabriel Lagonsin • 4 min read • Last week
Sweet Security launches AI blocking for rogue agents
Cloud Security

Sweet Security launches AI blocking for rogue agents

The new controls aim to stop unauthorised tool calls, data leaks and prompt injection as firms deploy more autonomous software.

By Mark Tarre • 3 min read • Last week
Sygnia finds AI onboarding flaw exposing client data
Fintech

Sygnia finds AI onboarding flaw exposing client data

A faulty token check let low-privilege users view other applicants' identities, payment details and Social Security numbers in a financial onboarding app.

By Mark Tarre • 4 min read • Last week
The post-quantum mandate isn't about algorithms, it's about operational trust
Data Protection

The post-quantum mandate isn't about algorithms, it's about operational trust

June 2026 U.S. executive orders have turned post-quantum readiness into an operational race, forcing firms to map and manage trust fast.

By David Sequino • 5 min read • Last week