TelcoNews UK - Telecommunications news for ICT decision-makers
United Kingdom

Supply Chain Security Stories

Global Stories

Supply Chain Security stories

GitLab unveils governed software factory tools for AI
DevOps

GitLab unveils governed software factory tools for AI

The new tools are meant to help large organisations control AI-driven coding, security and deployment as software moves from idea to production.

By Raphael Veloso • 5 min read • 3 days ago
CrowdStrike & CyberCert back SMB1001 for small firms
Cloud Security

CrowdStrike & CyberCert back SMB1001 for small firms

Small businesses could gain easier access to cyber protection and certification as the partnership bundles Falcon monitoring with SMB1001 support.

By Joseph Gabriel Lagonsin • 3 min read • 5 days ago
Cycode launches workstation protection for developers
Malware

Cycode launches workstation protection for developers

Malicious packages can now be blocked before they reach developers' machines, as supply chain attacks shift into AI-assisted coding workflows.

By Joseph Gabriel Lagonsin • 4 min read • 5 days ago
Google Cloud adds tighter code ownership & private CI/CD
Cloud Security

Google Cloud adds tighter code ownership & private CI/CD

Software supply chain controls tighten as Google Cloud lets teams limit approvers by file and keep CI/CD traffic inside private networks.

By Mara Sugue • 3 min read • Last week
OpenSSF adds four members amid EU cyber rules push
Supply Chain

OpenSSF adds four members amid EU cyber rules push

Tighter EU reporting duties are pushing open source vendors to harden supply chains, prompting four firms to join OpenSSF.

By Mara Sugue • 4 min read • Last week
AI, quantum computing and the future of cyber threats
Encryption

AI, quantum computing and the future of cyber threats

AI is already making cyber attacks faster and cheaper, while quantum computing could soon put trust in data and payments at risk.

By Illka Gobius • 6 min read • 6 days ago
Microsoft warns AI is deepening cyber threat links
Malware

Microsoft warns AI is deepening cyber threat links

Threats are now spanning identities, cloud and software supply chains, with AI speeding attacks and complicating defence, Microsoft says.

By Raphael Veloso • 4 min read • This month
TrendAI adds Claude session visibility for security teams
Data Protection

TrendAI adds Claude session visibility for security teams

Security teams can now trace prompts, responses and tool calls from Claude Code and Cowork alongside other enterprise signals.

By Raphael Veloso • 3 min read • This month
TrendAI launches autonomous vulnerability discovery on AWS
Cloud Security

TrendAI launches autonomous vulnerability discovery on AWS

The service keeps source code inside customers' AWS environments while using human review to cut false positives and verify fixes.

By Raphael Veloso • 4 min read • This month
Broadcom launches TrueSource to bolster open source security
Cloud Security

Broadcom launches TrueSource to bolster open source security

It widens Broadcom's support model beyond Spring, giving customers verified fixes for Java, Python, Node.js and data services as vulnerabilities surge.

By Mara Sugue • 4 min read • This month
Bitdefender launches AI Guardian beta for Mac agents
Endpoint Protection

Bitdefender launches AI Guardian beta for Mac agents

Mac developers using autonomous agents now get a free beta tool that blocks risky actions before tools, files or credentials are exposed.

By Mara Sugue • 3 min read • Last week
Companies warned of inherited cyber risks in acquisitions
Network Security

Companies warned of inherited cyber risks in acquisitions

Buyers may inherit unpatched systems and monitoring gaps unless cyber checks are done before a deal closes, Quest Technology Management says.

By Joseph Gabriel Lagonsin • 4 min read • This month
StackHawk launches Wingman to fix flaws in AI coding
Cloud Security

StackHawk launches Wingman to fix flaws in AI coding

The tool aims to close security gaps left by AI-written code before vulnerabilities reach security backlogs or pull requests.

By Joseph Gabriel Lagonsin • 4 min read • This month
Quest expands identity security for AI agent threats
Disaster Recovery

Quest expands identity security for AI agent threats

The update is aimed at speeding recovery and containing breaches as AI agents gain access to corporate identity systems.

By Raphael Veloso • 4 min read • Last week
Cloudsmith finds gap in software supply chain defences
Application Security

Cloudsmith finds gap in software supply chain defences

Many engineering teams still rely on reactive checks, leaving open-source packages to slip into systems before threats are blocked.

By Joseph Gabriel Lagonsin • 4 min read • Last month

Stories from Other Regions

Supply Chain Security stories

Entrust adds CBOM tools to Cryptographic Security Platform
Hybrid Cloud

Entrust adds CBOM tools to Cryptographic Security Platform

The update gives security teams a clearer way to map keys, certificates and secrets as regulators push harder on software component visibility.

By Mara Sugue • 4 min read • This month
Snyk Evo lifts deals as AI agent security demand surges
DevOps

Snyk Evo lifts deals as AI agent security demand surges

Enterprise buyers are spending more to secure AI agents, with Snyk saying Evo now drives 60% of new deals and larger contracts.

By Joseph Gabriel Lagonsin • 5 min read • Last month
Comp AI raises USD $34 million to boost cybersecurity
Data Protection

Comp AI raises USD $34 million to boost cybersecurity

The funding will help Comp AI expand into continuous monitoring and security testing as software firms face stronger pressure on controls.

By Joseph Gabriel Lagonsin • 4 min read • Last week