SafetyNews New Zealand - Aotearoa's industrial safety news for decision-makers
New Zealand

Supply Chain Security Stories - Page 25

Global Stories

Supply Chain Security stories

Trivy GitHub breach exposes CI/CD supply chain risk
DevOps

Trivy GitHub breach exposes CI/CD supply chain risk

Aqua Security's Trivy GitHub Action was hijacked to ship infostealer code via CI/CD pipelines, exposing secrets across downstream users.

By Sofiah Nichole Salivio • 5 min read • Tue, 24th Mar 2026
OpenSSF adds members, boosts AI & supply chain security
Virtualisation

OpenSSF adds members, boosts AI & supply chain security

OpenSSF adds new members and launches AI security, supply chain and training initiatives after securing USD $12.5 million in funding.

By Sofiah Nichole Salivio • 4 min read • Tue, 24th Mar 2026
GitLab widens AI access & sets flat review pricing
DevOps

GitLab widens AI access & sets flat review pricing

GitLab opens agentic AI to free-tier users, sets USD $0.25 flat fee for automated code reviews and expands security false-positive filtering.

By Mark Tarre • 4 min read • Mon, 23rd Mar 2026
Yubico & Delinea link AI actions to human approval
Data Protection

Yubico & Delinea link AI actions to human approval

Yubico and Delinea unite hardware keys with identity checks to ensure each high‑risk AI agent action is explicitly approved by a human.

By Sean Mitchell • 4 min read • Mon, 23rd Mar 2026
Varist launches free malware scanner amid AI threat
Cloud Security

Varist launches free malware scanner amid AI threat

Iceland-based Varist has launched a free malware scanner that rates suspicious files in seconds to counter fast-evolving AI-driven threats.

By Mark Tarre • 4 min read • Sat, 21st Mar 2026
OPSWAT founder urges prevention-first cyber defence
Malware

OPSWAT founder urges prevention-first cyber defence

OPSWAT founder Benny Czarny urges a prevention-first cyber defence in his new book, arguing detection-led tools can no longer keep pace.

By Sean Mitchell • 4 min read • Fri, 20th Mar 2026
DigiCert posts record Q4 ARR after expansion spree
Digital Transformation

DigiCert posts record Q4 ARR after expansion spree

DigiCert reports record Q4 ARR in FY26 as DigiCert ONE platform growth, acquisitions and automation demand drive digital trust expansion.

By Karen Joy Bacudo • 4 min read • Fri, 20th Mar 2026
BloodHound expands identity attack path mapping reach
Data Protection

BloodHound expands identity attack path mapping reach

SpecterOps broadens BloodHound Enterprise to map identity attack paths across Okta, GitHub and Jamf-managed Macs in hybrid environments.

By Catherine Knowles • 4 min read • Fri, 20th Mar 2026
Miggo & Grafana link runtime security with telemetry
DevOps

Miggo & Grafana link runtime security with telemetry

Miggo and Grafana link runtime security to Grafana Cloud telemetry, promising major cuts to critical vulnerability noise for joint users.

By Catherine Knowles • 4 min read • Fri, 20th Mar 2026
Keysight unveils SBOM Manager to meet new cyber rules
Application Security

Keysight unveils SBOM Manager to meet new cyber rules

Keysight debuts SBOM Manager to automate software bills of materials as EU and US cyber rules tighten transparency and compliance demands.

By Shannon Williams • 4 min read • Fri, 20th Mar 2026
AppViewX buys Eos to secure machine & AI agent identities
Software-as-a-Service

AppViewX buys Eos to secure machine & AI agent identities

AppViewX acquires AI identity start-up Eos and appoints its co-founder Archit Lohokare as Chief Executive, targeting non-human identity security.

By Sofiah Nichole Salivio • 4 min read • Fri, 20th Mar 2026
Chainguard unveils free starter pack for secure images
Virtualisation

Chainguard unveils free starter pack for secure images

Chainguard launches a free Catalog Starter pack, giving developers five production-grade secure container images from its vast library.

By Sofiah Nichole Salivio • 4 min read • Fri, 20th Mar 2026
North Korean IT workers infiltrate Western remote jobs
Human Capital Management

North Korean IT workers infiltrate Western remote jobs

North Korean IT workers using Western collaborators and fake identities are infiltrating remote jobs to funnel foreign salaries home.

By Sofiah Nichole Salivio • 4 min read • Thu, 19th Mar 2026
Lineaje unveils UnifAI to secure enterprise agentic AI
Data Protection

Lineaje unveils UnifAI to secure enterprise agentic AI

Lineaje launches UnifAI, a security and governance layer to centralise control, discovery and policy for enterprise agentic AI deployments.

By Sean Mitchell • 4 min read • Thu, 19th Mar 2026
JFrog unveils MCP registry to secure AI coding agents
DevOps

JFrog unveils MCP registry to secure AI coding agents

JFrog launches an MCP registry to centralise and secure AI coding agents, extending software supply chain controls to agent workflows.

By Catherine Knowles • 5 min read • Thu, 19th Mar 2026

Stories from Other Regions

Supply Chain Security stories

Firms test just 32% of attack surface, study finds
DevOps

Firms test just 32% of attack surface, study finds

Organisations test just a third of their attack surface as reliance on agentic AI grows, raising fresh concerns over unseen cyber risks.

By Shannon Williams • 4 min read • Fri, 20th Mar 2026
Canada faces rising cyber risks amid ageing networks
Firewalls

Canada faces rising cyber risks amid ageing networks

Canadian firms warn ageing networks, quantum threats and data rules are outpacing cyber defences, as most report major outages.

By Sofiah Nichole Salivio • 4 min read • Fri, 20th Mar 2026
Backslash adds cross-tool governance for AI coding Skills
Cloud Security

Backslash adds cross-tool governance for AI coding Skills

Backslash adds cross-tool governance to discover, vet and monitor 'Skills' powering AI coding assistants like Cursor, Claude Code and Copilot.

By Shannon Williams • 4 min read • Thu, 19th Mar 2026